Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
File:                     j_3661qU6wJ-yDivUw88ELObHNk.mft (raw, json)
Hash identifier:          SQhsdF6WCPz7F7kTonuD8mprEMJ/LgH3MFW8s31RWlE=
Subject key identifier:   18:C2:64:87:6D:E2:3C:B9:35:FF:FB:A6:50:36:05:DB:57:0C:7F:BE
Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
Certificate issuer:       /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Certificate serial:       019848F7071E980A57121A401D4AF37699D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
Manifest number:          1418
Signing time:             Sat 26 Jul 2025 23:00:05 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:05 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:05 +0000
Files and hashes:         1: hH1lu6qi54xeYgPUuzVlSLVdXOk.roa (hash: 9Lqd0U++MW4wXcTAm0AGtBobzDUdjZXw+rDwnRqe5sI=)
                          2: j_3661qU6wJ-yDivUw88ELObHNk.crl (hash: CCzKA4SNbEOArGpc/D9U/o6j39BYAWF0e7sHA+hJgI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:07:1e:98:0a:57:12:1a:40:1d:4a:f3:76:99:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
        Validity
            Not Before: Jul 26 23:00:05 2025 GMT
            Not After : Jul 27 23:00:05 2025 GMT
        Subject: CN=18c264876de23cb935fffba6503605db570c7fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:87:8c:ec:80:84:76:1c:99:54:4a:39:51:
                    d1:86:96:e3:d7:c9:7d:46:a4:a5:9a:5e:c0:9d:53:
                    a7:2f:da:6a:35:22:b0:cc:d3:23:ab:97:3b:05:53:
                    c5:2c:35:f8:8e:eb:3b:4f:84:0c:d1:ce:4b:a1:93:
                    13:e4:99:8c:05:50:13:25:54:22:04:b3:2f:b7:a7:
                    69:e2:32:70:62:6b:6a:d4:44:ba:47:15:cb:1d:c1:
                    ab:be:dd:7b:f4:ec:1c:3b:0d:20:07:f5:5b:cc:cb:
                    d9:fd:e5:61:46:32:97:39:c9:a8:04:78:bb:65:0b:
                    82:41:c4:56:4f:3f:a3:f0:40:8a:1a:34:05:3b:74:
                    f6:82:50:fa:33:a6:c8:ea:2e:e4:7a:40:b2:bc:e6:
                    33:9c:f0:a4:2e:2b:3c:e6:35:a7:34:67:58:62:06:
                    26:41:af:de:2e:2e:9d:a6:4a:3b:bf:33:3a:84:45:
                    08:ba:88:29:5b:3e:54:dc:a6:c2:52:d9:82:65:b0:
                    bf:38:85:1a:bc:ef:ef:69:88:ce:18:82:11:84:2e:
                    29:2c:74:4f:3e:25:4f:3a:46:64:ea:18:ba:6b:c0:
                    ad:ee:fa:3b:cf:6e:f7:8e:4b:85:10:45:66:aa:8f:
                    58:3f:16:63:d0:e1:8c:ca:60:0b:f3:76:f2:94:4f:
                    8a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C2:64:87:6D:E2:3C:B9:35:FF:FB:A6:50:36:05:DB:57:0C:7F:BE
            X509v3 Authority Key Identifier:
                keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:17:06:34:4b:76:80:16:5f:e8:e9:6d:59:4d:33:31:dd:1a:
         81:50:93:53:93:44:a9:4c:24:9b:7c:e1:e3:a4:5d:fd:d2:c5:
         8e:a2:78:a5:eb:e9:35:ee:b9:31:b1:fb:c0:78:67:67:36:1d:
         8c:22:47:cf:c1:8a:e1:db:37:18:8c:af:42:90:94:1c:0a:d9:
         47:ad:0d:6a:cc:08:9b:30:1a:51:9f:fe:95:47:11:07:41:6a:
         4f:50:f2:51:5f:4d:3f:fc:e1:2c:b5:d0:a8:be:f6:00:88:70:
         a8:c4:cb:71:8c:06:23:1a:f9:97:a4:ec:0e:7e:b9:73:83:39:
         02:9c:5d:78:9b:5b:73:8f:36:27:b2:2a:44:b9:08:fd:96:76:
         46:3b:b5:93:e9:3e:da:a0:5b:4e:4b:3a:51:23:ea:d6:75:30:
         a2:63:98:f1:26:90:08:54:88:3a:d3:83:32:e1:40:b8:3f:03:
         bc:23:38:63:45:fa:44:0a:f6:f5:59:cf:22:a6:f4:99:9d:39:
         c4:27:51:9a:25:8b:f5:67:ed:ed:67:84:1e:40:f3:e0:19:84:
         50:91:ec:4c:bd:cc:14:79:4a:43:f5:04:b4:50:89:50:03:16:
         7d:11:bf:2d:6d:13:ef:ad:b8:b0:79:d0:95:33:d3:4a:15:c2:
         7d:a8:23:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI9wcemApXEhpAHUrzdpnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZmRmYWViNWE5NGViMDI3ZWM4MzhhZjUzMGYzYzEwYjM5
YjFjZDkwHhcNMjUwNzI2MjMwMDA1WhcNMjUwNzI3MjMwMDA1WjAzMTEwLwYDVQQD
EygxOGMyNjQ4NzZkZTIzY2I5MzVmZmZiYTY1MDM2MDVkYjU3MGM3ZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI2HjOyAhHYcmVRKOVHRhpbj18l9
RqSlml7AnVOnL9pqNSKwzNMjq5c7BVPFLDX4jus7T4QM0c5LoZMT5JmMBVATJVQi
BLMvt6dp4jJwYmtq1ES6RxXLHcGrvt179OwcOw0gB/VbzMvZ/eVhRjKXOcmoBHi7
ZQuCQcRWTz+j8ECKGjQFO3T2glD6M6bI6i7kekCyvOYznPCkLis85jWnNGdYYgYm
Qa/eLi6dpko7vzM6hEUIuogpWz5U3KbCUtmCZbC/OIUavO/vaYjOGIIRhC4pLHRP
PiVPOkZk6hi6a8Ct7vo7z273jkuFEEVmqo9YPxZj0OGMymAL83bylE+K7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjCZIdt4jy5Nf/7plA2BdtXDH++MB8GA1UdIwQY
MBaAFI/9+utalOsCfsg4r1MPPBCzmxzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZGNmZjUtYjJiMS00OGRmLWI3NTYt
NmZiNGJlZTk5ZTYzLzEval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hZGNmZjUtYjJiMS00OGRmLWI3NTYtNmZiNGJlZTk5ZTYz
LzEval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhcGNEt2
gBZf6OltWU0zMd0agVCTU5NEqUwkm3zh46Rd/dLFjqJ4pevpNe65MbH7wHhnZzYd
jCJHz8GK4ds3GIyvQpCUHArZR60NaswImzAaUZ/+lUcRB0FqT1DyUV9NP/zhLLXQ
qL72AIhwqMTLcYwGIxr5l6TsDn65c4M5ApxdeJtbc482J7IqRLkI/ZZ2Rju1k+k+
2qBbTks6USPq1nUwomOY8SaQCFSIOtODMuFAuD8DvCM4Y0X6RAr29VnPIqb0mZ05
xCdRmiWL9Wft7WeEHkDz4BmEUJHsTL3MFHlKQ/UEtFCJUAMWfRG/LW0T7624sHnQ
lTPTShXCfagjhA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:02:17 2025 by rpki-client