Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
File:                     F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft (raw, json)
Hash identifier:          DRYVO5ooYlz+HTu+qPi63+QC05ERrFc+VvLrb1eJGqA=
Subject key identifier:   30:F9:DF:29:1A:B7:74:AE:B7:0E:06:FF:A4:B0:40:EA:5B:BA:55:34
Authority key identifier: 17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3
Certificate issuer:       /CN=179661a164d2d517ea7677fb229cafa19eba97f3
Certificate serial:       0198462D14BC736C3550013434ED41D8C628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 10:00:16 +0000
Manifest this update:     Sat 26 Jul 2025 10:00:16 +0000
Manifest next update:     Sun 27 Jul 2025 10:00:16 +0000
Files and hashes:         1: F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl (hash: bCd0/+EBGl3TVnuHJmQj+YJK493ssdws+LMXmZzQogM=)
                          2: WmJngWZzmKvAdcCFlnXZaxyPpiY.roa (hash: uKArgllEdQakrvIrUr4Tsros7JNu1glQJvvnJhzoD8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:2d:14:bc:73:6c:35:50:01:34:34:ed:41:d8:c6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179661a164d2d517ea7677fb229cafa19eba97f3
        Validity
            Not Before: Jul 26 10:00:16 2025 GMT
            Not After : Jul 27 10:00:16 2025 GMT
        Subject: CN=30f9df291ab774aeb70e06ffa4b040ea5bba5534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:33:95:01:a1:a8:85:2e:fc:67:b0:b2:60:
                    e0:0e:ec:ad:70:20:fc:10:fd:9e:62:8f:cc:1d:e3:
                    5a:18:a8:cb:30:50:b9:b5:04:98:69:4d:d8:ba:f4:
                    c5:1f:23:01:be:e9:59:81:d9:71:db:c2:7f:66:3d:
                    4d:5a:9d:ee:38:ab:72:6d:9d:ed:83:42:95:67:bd:
                    ef:9e:59:bd:d2:b9:63:d9:20:00:f1:90:25:43:ea:
                    2d:98:b9:85:1b:87:73:47:61:0d:bb:53:55:9c:16:
                    ad:0d:94:43:72:87:0d:cc:29:40:45:97:79:40:2e:
                    42:d0:05:e7:ab:fa:c1:29:1c:a2:8a:11:42:66:fa:
                    83:bf:1f:87:d1:e5:29:88:dd:d3:88:9a:a6:15:17:
                    2a:d6:34:ea:36:2a:d1:bc:9e:ab:1e:0e:77:17:00:
                    23:79:2d:be:f6:59:82:ac:37:0e:83:50:77:6e:ec:
                    09:ae:4e:d5:d9:32:c0:c0:99:50:fd:cf:df:2c:11:
                    c5:6e:48:64:89:d7:fb:75:1a:d5:50:5d:41:a7:c9:
                    e0:fe:e5:09:68:4a:9e:c2:2c:45:47:bc:d2:c2:26:
                    cc:d7:2c:24:13:8c:b5:ae:11:eb:02:54:b5:e8:b1:
                    a4:6d:05:b5:03:09:90:62:ad:ff:b6:ec:7d:96:dd:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F9:DF:29:1A:B7:74:AE:B7:0E:06:FF:A4:B0:40:EA:5B:BA:55:34
            X509v3 Authority Key Identifier:
                keyid:17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:93:32:3a:6e:56:ba:4d:3e:d4:2f:9f:a5:e6:00:76:9e:67:
         7c:d8:37:a8:b1:71:af:1b:dd:2c:e9:0c:e2:79:28:55:ba:2f:
         b0:be:7c:c7:7c:0e:9a:6d:ef:ae:30:12:85:80:de:bc:7c:be:
         c9:16:62:4c:b2:5f:4e:f8:3d:b1:0f:47:9d:f7:ff:73:e7:0d:
         49:9f:99:fe:91:70:65:4c:91:ac:ad:76:43:91:a9:f0:1a:56:
         97:05:6c:95:26:05:b6:e3:db:ce:fe:f3:27:70:3d:66:8c:18:
         ee:ab:29:f9:4b:02:fe:6a:cc:cf:4e:63:1d:3f:91:d9:91:95:
         11:19:ad:72:0e:cf:6d:10:9b:49:3e:dd:c5:63:de:d6:fb:b2:
         95:f6:df:46:5e:c0:5e:ff:ba:96:fb:24:95:9b:36:01:09:fd:
         18:e4:3a:e9:c9:0e:51:9e:0e:ba:64:23:58:8a:8a:76:2f:fb:
         4c:77:a4:8a:1c:f4:65:8d:cc:52:42:d4:0d:1d:f1:16:c0:a7:
         2d:23:6d:f2:33:ca:75:ab:1a:e2:da:37:d8:ab:cf:2e:61:7c:
         98:9f:14:d3:43:53:f8:80:76:77:96:9d:20:fa:25:c9:05:9a:
         a3:8a:c0:f3:31:e4:22:c3:f8:27:5a:e6:7a:a1:be:5f:27:db:
         71:30:b7:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGLRS8c2w1UAE0NO1B2MYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTY2MWExNjRkMmQ1MTdlYTc2NzdmYjIyOWNhZmExOWVi
YTk3ZjMwHhcNMjUwNzI2MTAwMDE2WhcNMjUwNzI3MTAwMDE2WjAzMTEwLwYDVQQD
EygzMGY5ZGYyOTFhYjc3NGFlYjcwZTA2ZmZhNGIwNDBlYTViYmE1NTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz8zlQGhqIUu/GewsmDgDuytcCD8
EP2eYo/MHeNaGKjLMFC5tQSYaU3YuvTFHyMBvulZgdlx28J/Zj1NWp3uOKtybZ3t
g0KVZ73vnlm90rlj2SAA8ZAlQ+otmLmFG4dzR2ENu1NVnBatDZRDcocNzClARZd5
QC5C0AXnq/rBKRyiihFCZvqDvx+H0eUpiN3TiJqmFRcq1jTqNirRvJ6rHg53FwAj
eS2+9lmCrDcOg1B3buwJrk7V2TLAwJlQ/c/fLBHFbkhkidf7dRrVUF1Bp8ng/uUJ
aEqewixFR7zSwibM1ywkE4y1rhHrAlS16LGkbQW1AwmQYq3/tux9lt14aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD53ykat3Sutw4G/6SwQOpbulU0MB8GA1UdIwQY
MBaAFBeWYaFk0tUX6nZ3+yKcr6GeupfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mODQwMDEtNjY0ZC00OTk4LThjMzUt
ZTRmMmUwYjIzNTBmLzEvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mODQwMDEtNjY0ZC00OTk4LThjMzUtZTRmMmUwYjIzNTBm
LzEvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZMyOm5W
uk0+1C+fpeYAdp5nfNg3qLFxrxvdLOkM4nkoVbovsL58x3wOmm3vrjAShYDevHy+
yRZiTLJfTvg9sQ9Hnff/c+cNSZ+Z/pFwZUyRrK12Q5Gp8BpWlwVslSYFtuPbzv7z
J3A9ZowY7qsp+UsC/mrMz05jHT+R2ZGVERmtcg7PbRCbST7dxWPe1vuylfbfRl7A
Xv+6lvsklZs2AQn9GOQ66ckOUZ4OumQjWIqKdi/7THekihz0ZY3MUkLUDR3xFsCn
LSNt8jPKdasa4to32KvPLmF8mJ8U00NT+IB2d5adIPolyQWao4rA8zHkIsP4J1rm
eqG+XyfbcTC3/Q==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:55:28 2025 by rpki-client