Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
File:                     IqyN_06Z0-IomvY7FdVdJFDIQsM.mft (raw, json)
Hash identifier:          Wv1UUGb62mG09clED8KPuwyqdb3RYeX3pHtuhpijPR8=
Subject key identifier:   20:21:A4:85:1D:E0:AD:62:30:FD:7D:3D:D4:52:19:5E:DD:D9:A6:48
Authority key identifier: 22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3
Certificate issuer:       /CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
Certificate serial:       01992444209D9D4203AF467AD5DF2EC9850D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
Manifest number:          0593
Signing time:             Sun 07 Sep 2025 13:01:08 +0000
Manifest this update:     Sun 07 Sep 2025 13:01:08 +0000
Manifest next update:     Mon 08 Sep 2025 13:01:08 +0000
Files and hashes:         1: 1YFZUWeFsFFhNH6pH-z6oTf7e1M.roa (hash: N3xo7g5jGJQoS/qFHbtXSlXVpbFrX6/YoQPrJBEqRCc=)
                          2: IqyN_06Z0-IomvY7FdVdJFDIQsM.crl (hash: lWJhYwib6jKnmi/ozcuWAVSpc6kPqdhi2YxYJOJPFeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:44:20:9d:9d:42:03:af:46:7a:d5:df:2e:c9:85:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
        Validity
            Not Before: Sep  7 13:01:08 2025 GMT
            Not After : Sep  8 13:01:08 2025 GMT
        Subject: CN=2021a4851de0ad6230fd7d3dd452195eddd9a648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:1c:df:9c:1f:ae:03:1e:e9:b9:6d:b8:9a:
                    ec:8b:92:ad:ef:d2:5d:f1:21:6b:67:b7:6c:4a:50:
                    a5:ba:cf:7a:2d:68:04:cc:05:31:9a:e7:b7:c3:02:
                    7a:95:eb:42:b3:56:ca:fb:98:78:a1:60:7b:c4:b4:
                    ea:42:d6:af:c9:60:18:4a:5f:30:79:ed:05:37:dc:
                    12:03:aa:dc:ee:2a:c1:31:8b:2d:c7:85:23:69:87:
                    cd:f3:74:81:45:04:5f:4c:0d:00:4b:3d:8e:a3:9b:
                    ac:c9:8c:12:1e:aa:26:4d:26:65:36:58:20:79:ed:
                    18:89:de:51:6a:65:42:06:14:08:55:d6:6c:a8:09:
                    bb:41:8d:8d:b0:73:40:95:91:a5:b2:dd:55:6e:92:
                    36:ec:41:6b:7b:86:a9:91:87:80:0a:2a:ff:1c:3c:
                    cd:ca:10:d5:8c:5e:cc:e0:04:a5:b4:33:0c:87:2b:
                    71:c3:51:17:39:16:a9:30:39:7a:10:c5:93:d3:66:
                    1b:95:17:4f:83:3c:2c:f7:0f:b9:e1:df:7b:67:8d:
                    f7:09:3a:a0:25:d8:02:72:5d:0a:bd:d3:d3:0f:e2:
                    c1:a6:84:ab:df:d9:63:b8:12:7f:62:fb:9d:77:c3:
                    39:25:43:c0:15:46:2a:73:fa:10:3b:9e:c4:2a:f8:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:21:A4:85:1D:E0:AD:62:30:FD:7D:3D:D4:52:19:5E:DD:D9:A6:48
            X509v3 Authority Key Identifier:
                keyid:22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:37:41:c5:1d:d8:32:ca:e1:0e:fd:a7:5a:c8:3d:70:2f:56:
         9c:1e:da:ef:90:62:86:2f:10:6b:d4:40:2f:cc:d7:5f:58:76:
         d7:f9:c1:5a:71:64:85:ae:88:20:fb:77:cb:95:36:df:1b:80:
         12:f9:bc:45:87:83:46:1f:82:7c:a0:92:f0:53:cb:ff:cb:01:
         e4:64:d0:6a:e9:dc:b6:51:75:94:4c:9c:73:e7:45:59:49:9e:
         66:d5:2c:c6:da:2f:66:42:c9:67:82:a4:78:5c:22:73:16:19:
         05:b5:46:4d:e1:2f:97:eb:6e:39:3b:04:6f:c9:b5:33:7a:af:
         49:a2:58:11:90:f6:96:98:10:a9:d7:74:c6:62:20:ae:b8:90:
         80:cd:3f:dc:17:f2:4c:8f:5f:bc:10:21:75:26:13:fe:dc:7c:
         bb:4b:65:92:4a:a2:12:19:c1:a7:e0:e3:b1:bd:6d:34:02:c9:
         da:c1:61:f9:60:9d:41:9b:38:9d:89:7d:e4:e6:f0:bd:bb:4c:
         1e:10:cb:0b:84:81:9e:20:b3:63:93:94:b0:a7:82:a6:2d:ec:
         f2:f0:5b:7b:42:10:10:81:c9:25:88:17:2e:a5:9d:2d:40:a3:
         49:7a:c8:05:bb:8e:57:74:ba:53:70:0d:eb:61:fd:07:bf:fe:
         8a:d5:7f:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkRCCdnUIDr0Z61d8uyYUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYWM4ZGZmNGU5OWQzZTIyODlhZjYzYjE1ZDU1ZDI0NTBj
ODQyYzMwHhcNMjUwOTA3MTMwMTA4WhcNMjUwOTA4MTMwMTA4WjAzMTEwLwYDVQQD
EygyMDIxYTQ4NTFkZTBhZDYyMzBmZDdkM2RkNDUyMTk1ZWRkZDlhNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTsc35wfrgMe6bltuJrsi5Kt79Jd
8SFrZ7dsSlClus96LWgEzAUxmue3wwJ6letCs1bK+5h4oWB7xLTqQtavyWAYSl8w
ee0FN9wSA6rc7irBMYstx4UjaYfN83SBRQRfTA0ASz2Oo5usyYwSHqomTSZlNlgg
ee0Yid5RamVCBhQIVdZsqAm7QY2NsHNAlZGlst1VbpI27EFre4apkYeACir/HDzN
yhDVjF7M4ASltDMMhytxw1EXORapMDl6EMWT02YblRdPgzws9w+54d97Z433CTqg
JdgCcl0KvdPTD+LBpoSr39ljuBJ/Yvudd8M5JUPAFUYqc/oQO57EKviEsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAhpIUd4K1iMP19PdRSGV7d2aZIMB8GA1UdIwQY
MBaAFCKsjf9OmdPiKJr2OxXVXSRQyELDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXF5Tl8wNlowLUlvbXZZN0ZkVmRKRkRJUXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9hNzVlMWQtNGQ4MS00OWNiLWFjYTUt
ODI5OThhOTI4N2UyLzEvSXF5Tl8wNlowLUlvbXZZN0ZkVmRKRkRJUXNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9hNzVlMWQtNGQ4MS00OWNiLWFjYTUtODI5OThhOTI4N2Uy
LzEvSXF5Tl8wNlowLUlvbXZZN0ZkVmRKRkRJUXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzdBxR3Y
MsrhDv2nWsg9cC9WnB7a75Bihi8Qa9RAL8zXX1h21/nBWnFkha6IIPt3y5U23xuA
Evm8RYeDRh+CfKCS8FPL/8sB5GTQaunctlF1lEycc+dFWUmeZtUsxtovZkLJZ4Kk
eFwicxYZBbVGTeEvl+tuOTsEb8m1M3qvSaJYEZD2lpgQqdd0xmIgrriQgM0/3Bfy
TI9fvBAhdSYT/tx8u0tlkkqiEhnBp+Djsb1tNALJ2sFh+WCdQZs4nYl95ObwvbtM
HhDLC4SBniCzY5OUsKeCpi3s8vBbe0IQEIHJJYgXLqWdLUCjSXrIBbuOV3S6U3AN
62H9B7/+itV/Mw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 15:02:57 2025 by rpki-client