Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File:                     4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier:          LZJPO81bDF3pMWSmhvfPMAbJz9BwWBxWM3Sh9R9vYpg=
Subject key identifier:   1E:CC:99:C0:08:34:51:9C:24:13:94:17:CC:FB:13:0A:18:8D:9A:94
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer:       /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial:       0198451A437B2248D6CD05F0C5F186AD4662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number:          1608
Signing time:             Sat 26 Jul 2025 05:00:05 +0000
Manifest this update:     Sat 26 Jul 2025 05:00:05 +0000
Manifest next update:     Sun 27 Jul 2025 05:00:05 +0000
Files and hashes:         1: 3FLOlTCLI1G1gTETun5ejoasBuA.roa (hash: ZqTUajmkPh8jnrRO1gF7H9NNj5iQ+rkTS+4qDwUhPQw=)
                          2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: n+vgQTRpunqYaOWnqhYFt0vaaH6oeJauq/MZrHRGpdo=)
                          3: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (hash: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=)
                          4: ccRftpql5fjXlNV0NylDd4KOG5c.roa (hash: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=)
                          5: iGsK_B5kc7f5LtdtrLxtSL9ku54.roa (hash: raQtWkSW1CK//C2quX0UqsJsM/839tIzJbksWP0Gq+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:1a:43:7b:22:48:d6:cd:05:f0:c5:f1:86:ad:46:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
        Validity
            Not Before: Jul 26 05:00:05 2025 GMT
            Not After : Jul 27 05:00:05 2025 GMT
        Subject: CN=1ecc99c00834519c24139417ccfb130a188d9a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:82:f4:fd:73:0a:2c:67:86:36:c9:1d:af:
                    8c:d9:fd:da:e7:fa:dc:51:e7:68:28:a7:37:1d:af:
                    87:53:26:65:85:da:46:8b:db:cd:b6:90:6f:a3:3a:
                    d1:62:38:35:3d:c1:5b:c4:eb:50:15:50:e4:ce:66:
                    5e:6b:4f:35:8b:2e:82:dc:ed:6c:4c:d5:09:2f:5c:
                    9e:e6:1e:3b:78:7b:cd:a6:b9:4a:87:2f:c5:88:3c:
                    86:56:9a:7d:0a:2d:c8:1f:73:02:f5:a2:75:c1:1b:
                    54:8b:4e:51:99:b3:35:4a:82:74:d0:4b:8d:61:d7:
                    b1:57:f3:df:58:8d:7a:06:e7:82:d2:7c:3b:1a:a0:
                    65:b1:fd:33:ff:ff:bd:97:ef:1c:7f:87:b1:26:13:
                    51:93:96:b1:e6:4b:82:dd:76:ed:cd:49:67:c6:bd:
                    ed:af:d8:f5:ad:b4:3d:37:65:fd:8d:c9:d9:32:99:
                    8d:a5:47:b4:40:79:1c:19:0e:2f:30:60:1e:53:7a:
                    1a:d3:e9:03:50:47:26:10:e8:7c:eb:25:a7:88:95:
                    14:36:4e:d8:4c:0e:8e:e7:fc:c0:21:a1:92:c8:7d:
                    61:5f:0b:ad:44:ee:6c:48:02:8d:ab:cb:3d:64:07:
                    a2:20:d2:ff:0d:01:b4:2c:e4:2f:d8:de:d6:0f:f4:
                    1e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CC:99:C0:08:34:51:9C:24:13:94:17:CC:FB:13:0A:18:8D:9A:94
            X509v3 Authority Key Identifier:
                keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f9:09:d4:02:5b:ea:a6:79:7d:70:27:a9:a2:94:54:34:cf:
         38:11:71:56:fd:1f:f8:5c:98:4d:2b:f7:06:9c:c2:92:b9:53:
         f6:fc:c5:d5:b9:38:34:60:57:d1:42:58:0b:0c:28:34:e7:1c:
         b4:a8:94:6b:71:8e:95:52:af:33:11:45:4b:9c:dc:9e:95:de:
         11:76:1d:cc:7b:f8:2a:8d:3f:90:38:04:35:7e:89:04:ae:fd:
         1a:0e:ce:90:9b:55:63:db:bc:f8:e0:17:97:45:1d:ac:72:38:
         f7:d7:3c:69:1c:4c:90:49:04:76:60:3c:3a:0a:3f:9e:4d:f6:
         10:aa:8d:ea:1b:fd:a8:68:b8:e3:97:bb:78:85:2d:3e:f8:6c:
         a4:26:52:38:5c:49:64:15:ea:e3:a5:a9:38:6b:37:e1:b2:29:
         bf:df:21:61:77:bc:74:5f:32:67:cc:5d:4f:53:10:83:fc:23:
         79:fb:73:72:98:3e:fc:6d:69:e8:78:86:e5:d2:10:86:27:25:
         50:c7:36:8e:8a:38:52:58:23:4b:ef:f6:2d:7c:e2:c2:b7:ca:
         44:91:7c:58:02:e7:00:ed:6c:af:54:6b:ed:13:4b:07:c8:9c:
         c9:7b:33:1a:0e:8d:2c:23:10:cc:c6:6d:a9:db:f9:cf:a0:8a:
         b1:ab:4d:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGkN7IkjWzQXwxfGGrUZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1
M2Q5NDAwHhcNMjUwNzI2MDUwMDA1WhcNMjUwNzI3MDUwMDA1WjAzMTEwLwYDVQQD
EygxZWNjOTljMDA4MzQ1MTljMjQxMzk0MTdjY2ZiMTMwYTE4OGQ5YTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfWC9P1zCixnhjbJHa+M2f3a5/rc
UedoKKc3Ha+HUyZlhdpGi9vNtpBvozrRYjg1PcFbxOtQFVDkzmZea081iy6C3O1s
TNUJL1ye5h47eHvNprlKhy/FiDyGVpp9Ci3IH3MC9aJ1wRtUi05RmbM1SoJ00EuN
YdexV/PfWI16BueC0nw7GqBlsf0z//+9l+8cf4exJhNRk5ax5kuC3XbtzUlnxr3t
r9j1rbQ9N2X9jcnZMpmNpUe0QHkcGQ4vMGAeU3oa0+kDUEcmEOh86yWniJUUNk7Y
TA6O5/zAIaGSyH1hXwutRO5sSAKNq8s9ZAeiINL/DQG0LOQv2N7WD/QePwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7MmcAINFGcJBOUF8z7EwoYjZqUMB8GA1UdIwQY
MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt
MDU1NTY5NTljNDU1LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1
LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvkJ1AJb
6qZ5fXAnqaKUVDTPOBFxVv0f+FyYTSv3BpzCkrlT9vzF1bk4NGBX0UJYCwwoNOcc
tKiUa3GOlVKvMxFFS5zcnpXeEXYdzHv4Ko0/kDgENX6JBK79Gg7OkJtVY9u8+OAX
l0UdrHI499c8aRxMkEkEdmA8Ogo/nk32EKqN6hv9qGi445e7eIUtPvhspCZSOFxJ
ZBXq46WpOGs34bIpv98hYXe8dF8yZ8xdT1MQg/wjeftzcpg+/G1p6HiG5dIQhicl
UMc2joo4UlgjS+/2LXziwrfKRJF8WALnAO1sr1Rr7RNLB8icyXszGg6NLCMQzMZt
qdv5z6CKsatNJQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:46:18 2025 by rpki-client