Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File:                     F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier:          p6tIP7tKRu/WsYnWC3G5RtSCi8jkbzmeY06+Bob2Oj4=
Subject key identifier:   D7:6E:A2:74:5F:78:87:58:06:D6:7A:CF:96:65:6F:E9:F1:3E:08:25
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer:       /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial:       01991BE66F70A2DA9529089E8171E91D763C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number:          1071
Signing time:             Fri 05 Sep 2025 22:01:50 +0000
Manifest this update:     Fri 05 Sep 2025 22:01:50 +0000
Manifest next update:     Sat 06 Sep 2025 22:01:50 +0000
Files and hashes:         1: A-cG9_VLTkbphCfs69AUhiirqHg.roa (hash: t1BknoTJdcFpSWtNoZoHuIOq9kUcPBsqmM7WgqQbhUw=)
                          2: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: TA1TSyyfC9/N3iLCW0Lz4rla/4uk9HIeN2xj1D2ChFE=)
                          3: jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa (hash: gfvmY5Jw7/jL3ve93eYFDmKDfaFU9R+FgRyjOHRXXxo=)
                          4: nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa (hash: PxAEcSL4+pjTKWciNNPj/S1u+RcprIkbVvq5ujpcIuY=)
                          5: wNwz-CEyZ2UgBaszV0ucixDH2J8.roa (hash: 7MrpT4CLu6mRCHE7ngg+YWwTFHL1zoVwcmT3KvmQWLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 22:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1b:e6:6f:70:a2:da:95:29:08:9e:81:71:e9:1d:76:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: Sep  5 22:01:50 2025 GMT
            Not After : Sep  6 22:01:50 2025 GMT
        Subject: CN=d76ea2745f78875806d67acf96656fe9f13e0825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:9e:97:02:c1:b4:5c:2c:29:46:47:8b:cb:
                    c0:dd:8c:1d:3c:eb:f6:93:ee:46:01:6b:53:04:a9:
                    c0:85:e7:1a:85:07:4b:c2:99:f8:54:87:9b:d0:22:
                    4c:44:28:28:87:6e:c7:4d:0e:ea:99:ee:ca:5b:0d:
                    4a:a2:2b:20:be:1b:c7:93:3d:ff:c6:21:69:cd:e3:
                    50:bb:dd:e5:de:b0:4d:81:f3:71:b5:40:db:c9:97:
                    47:0b:6f:13:a1:b4:a8:bd:d6:27:e2:53:3f:ee:f5:
                    3c:8c:46:43:52:49:ed:6c:99:6f:25:15:64:05:5b:
                    4a:c1:a5:3c:a6:73:14:30:90:09:f6:9f:01:c4:54:
                    36:48:d4:19:8f:6d:97:32:0f:aa:ac:ce:0f:c0:5e:
                    3b:21:67:10:de:39:df:83:cd:fd:41:cb:b4:e4:c7:
                    13:a0:b2:7c:92:20:4f:0e:b1:82:14:aa:17:8c:29:
                    3d:d6:15:ca:f9:35:d1:41:60:4a:85:65:bf:9c:24:
                    b4:7a:91:9b:95:a5:20:1a:23:40:6b:65:70:df:67:
                    78:aa:47:c7:7b:6a:06:3c:b4:13:86:72:61:d6:52:
                    4b:57:8a:f3:78:38:50:0b:c6:63:32:f8:6d:27:1a:
                    a3:03:67:32:ff:bd:b8:82:c2:81:0e:aa:9e:23:21:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6E:A2:74:5F:78:87:58:06:D6:7A:CF:96:65:6F:E9:F1:3E:08:25
            X509v3 Authority Key Identifier:
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:99:e6:fc:2d:74:0a:e7:7a:5f:c9:45:9a:e6:a4:35:13:3c:
         c4:2b:5f:08:a7:bb:f7:3d:17:a2:d0:3d:f2:68:ed:2d:ec:6a:
         42:2b:10:8e:04:3f:d3:6e:be:c6:8c:56:b0:4b:3e:28:bd:70:
         44:ab:9b:34:b5:ff:e2:eb:55:7d:e8:a2:44:d1:b9:21:c6:d9:
         07:c4:c0:ec:e6:a3:51:5f:b3:e4:d1:b5:31:3b:8f:f3:97:f8:
         a8:17:f5:82:94:73:0e:cc:d6:6c:0c:24:a5:82:ff:10:e4:2a:
         6d:21:eb:0b:c3:dc:36:5e:bd:a6:94:45:97:0b:7d:86:fb:48:
         29:b9:45:ab:c6:b5:75:1f:6c:95:9e:0e:38:4c:7e:ff:1d:1c:
         d0:95:74:2d:79:12:49:13:ca:45:5a:5c:91:a2:59:29:66:d2:
         7a:da:f6:9f:29:44:75:be:8b:a0:35:e6:d1:39:2a:52:91:b5:
         b1:c1:13:4d:f0:1c:2c:19:0a:49:fb:e1:95:0a:93:94:f0:ab:
         ce:41:6a:61:35:ab:60:0c:97:dd:e8:61:b3:92:fb:79:18:7a:
         be:f5:26:fa:5e:95:25:d1:92:b9:e1:2c:da:55:70:33:d1:15:
         fc:e1:ee:42:97:ea:f5:07:8d:82:26:a5:55:fa:00:ea:67:ee:
         84:50:22:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkb5m9wotqVKQiegXHpHXY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTI2Y2NhYzRmOTA2NGUwNTg1NDliMzAxNzJjODQ0Mzk3
ODdmYmMwHhcNMjUwOTA1MjIwMTUwWhcNMjUwOTA2MjIwMTUwWjAzMTEwLwYDVQQD
EyhkNzZlYTI3NDVmNzg4NzU4MDZkNjdhY2Y5NjY1NmZlOWYxM2UwODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOWelwLBtFwsKUZHi8vA3YwdPOv2
k+5GAWtTBKnAhecahQdLwpn4VIeb0CJMRCgoh27HTQ7qme7KWw1KoisgvhvHkz3/
xiFpzeNQu93l3rBNgfNxtUDbyZdHC28TobSovdYn4lM/7vU8jEZDUkntbJlvJRVk
BVtKwaU8pnMUMJAJ9p8BxFQ2SNQZj22XMg+qrM4PwF47IWcQ3jnfg839Qcu05McT
oLJ8kiBPDrGCFKoXjCk91hXK+TXRQWBKhWW/nCS0epGblaUgGiNAa2Vw32d4qkfH
e2oGPLQThnJh1lJLV4rzeDhQC8ZjMvhtJxqjA2cy/724gsKBDqqeIyEgZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNduonRfeIdYBtZ6z5Zlb+nxPgglMB8GA1UdIwQY
MBaAFBdSbMrE+QZOBYVJswFyyEQ5eH+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYt
OTQxY2M2YTdiYWQ5LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYtOTQxY2M2YTdiYWQ5
LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpnm/C10
Cud6X8lFmuakNRM8xCtfCKe79z0XotA98mjtLexqQisQjgQ/026+xoxWsEs+KL1w
RKubNLX/4utVfeiiRNG5IcbZB8TA7OajUV+z5NG1MTuP85f4qBf1gpRzDszWbAwk
pYL/EOQqbSHrC8PcNl69ppRFlwt9hvtIKblFq8a1dR9slZ4OOEx+/x0c0JV0LXkS
SRPKRVpckaJZKWbSetr2nylEdb6LoDXm0TkqUpG1scETTfAcLBkKSfvhlQqTlPCr
zkFqYTWrYAyX3ehhs5L7eRh6vvUm+l6VJdGSueEs2lVwM9EV/OHuQpfq9QeNgial
VfoA6mfuhFAivQ==
-----END CERTIFICATE-----
Generated at Sat Sep 6 06:01:34 2025 by rpki-client