Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
File:                     DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json)
Hash identifier:          iNA/N45Til3GS678XjR+FkrXeUj9uS1AjCqbTMvwcOs=
Subject key identifier:   EF:DC:5C:47:8F:F9:EE:59:9B:31:47:08:5C:4B:6B:76:D7:2B:AA:33
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Certificate issuer:       /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial:       019926D75B7D049D9B16951C936C661A0537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
Manifest number:          1675
Signing time:             Mon 08 Sep 2025 01:01:11 +0000
Manifest this update:     Mon 08 Sep 2025 01:01:11 +0000
Manifest next update:     Tue 09 Sep 2025 01:01:11 +0000
Files and hashes:         1: 1-sk04SJKaJ6g1Y9khEpsLFas3Kk.roa (hash: XxZhRBWthERVmL3LKPQQh5B0868NCMjhs1tFs+3eMxM=)
                          2: 4QpvM3CE_nzBSqatuahpsYYH1qM.roa (hash: Qrg/EHEt9L0x/2vBVqdC/NUou31du+BoDTLXvsaFSGk=)
                          3: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: vb6Hh3GiRNakTOn6GWLpaVn05kNl3UBupW7bRD6kZl8=)
                          4: OKvzKSdRprY6KmoCf5oHQIz_91A.roa (hash: c7CmyJe2kYuAmiLCH0rQuuU8EyGxHjQvlpZniPCLw0U=)
                          5: mHALm7hBq5s0140ybe8Xc1F8234.roa (hash: imdhLSNxS5EA5IBXEn3VpwdKjS6o+zDqUc/wlGF8Pzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:26:d7:5b:7d:04:9d:9b:16:95:1c:93:6c:66:1a:05:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
        Validity
            Not Before: Sep  8 01:01:11 2025 GMT
            Not After : Sep  9 01:01:11 2025 GMT
        Subject: CN=efdc5c478ff9ee599b3147085c4b6b76d72baa33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d9:3f:31:6d:88:93:1e:de:4b:a8:92:f3:e1:
                    22:08:3a:10:d5:5b:e3:f0:36:ec:93:88:be:6a:89:
                    72:bb:26:0b:92:4a:25:59:ec:2a:61:a3:5d:cb:5a:
                    51:f9:80:f4:c3:57:fd:27:ac:e3:54:4a:5b:1d:91:
                    16:16:34:1b:a9:b7:ee:f7:65:9e:0b:85:56:ed:ac:
                    17:81:6e:27:93:6a:eb:9d:b8:04:02:21:02:b0:de:
                    0d:f4:de:5e:5d:2a:42:03:60:41:66:ed:b7:eb:44:
                    2e:5d:63:76:9e:65:fa:53:06:62:fb:f6:da:f4:f3:
                    c0:72:a3:62:57:9f:bb:bd:56:0e:e3:00:1b:85:8e:
                    3e:1c:cf:f3:d9:03:fe:34:6f:7b:36:a8:ff:46:34:
                    27:b1:39:42:fb:fa:ea:18:d7:f4:5b:51:ac:c0:6a:
                    1c:5d:7a:fb:a9:a9:86:0e:81:e5:00:33:ef:79:b2:
                    e4:27:3a:f7:fc:de:94:b0:85:34:84:82:d8:2c:50:
                    09:d1:21:20:db:eb:ac:cc:30:f4:f9:97:01:64:cc:
                    16:7f:a5:ff:4e:81:c3:74:32:45:40:8b:70:ba:41:
                    54:cb:b0:22:06:4c:23:a7:75:d8:c8:f3:8f:f9:60:
                    de:31:c8:7e:0e:a8:89:72:2a:c7:dd:06:20:bd:1d:
                    bb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DC:5C:47:8F:F9:EE:59:9B:31:47:08:5C:4B:6B:76:D7:2B:AA:33
            X509v3 Authority Key Identifier:
                keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:43:e7:a0:90:18:8b:c2:d2:81:ae:a6:aa:f2:ba:c9:1f:91:
         51:29:9b:09:53:13:3a:3e:af:ea:d9:12:c5:00:0f:89:a3:ae:
         c8:7a:f6:a4:d5:67:24:07:16:50:35:8c:6f:e3:44:dd:4f:64:
         20:be:6c:73:1d:f9:a5:e6:58:c9:a9:d6:0a:56:52:d2:dd:ed:
         f0:81:b3:84:35:13:69:1c:aa:b3:b5:ea:35:48:1b:96:47:82:
         02:60:60:a9:3d:2b:66:ed:cc:b7:79:6c:2e:2f:69:f3:40:c9:
         93:9c:2e:d4:db:ae:95:1f:4f:9d:f1:a7:77:68:06:17:b9:22:
         ef:f6:99:ab:ca:05:99:e0:20:3e:3e:1c:84:ac:13:30:51:5b:
         d4:70:12:85:51:24:8c:c4:ee:d2:f3:24:69:72:df:37:71:db:
         0d:b7:5e:a8:3f:d7:af:4b:af:57:38:3d:53:12:2e:ed:0e:3d:
         4f:61:cd:5e:f5:83:a8:6a:a8:49:71:df:bc:59:e2:70:c9:be:
         b4:65:02:24:c1:20:84:b5:db:05:e1:24:56:57:57:39:26:be:
         db:da:b7:e2:99:2d:12:f6:d7:da:e6:92:5b:31:33:97:da:0e:
         c3:0d:c6:75:01:a8:7c:af:2f:67:9e:75:c4:ce:42:20:58:e1:
         4d:6a:b7:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkm11t9BJ2bFpUck2xmGgU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTMwMmQ1NDZlMDY4YzJmZDc2NzdkOWQ1MjAwYWRkMzZj
OGJjZDUwHhcNMjUwOTA4MDEwMTExWhcNMjUwOTA5MDEwMTExWjAzMTEwLwYDVQQD
EyhlZmRjNWM0NzhmZjllZTU5OWIzMTQ3MDg1YzRiNmI3NmQ3MmJhYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNk/MW2Ikx7eS6iS8+EiCDoQ1Vvj
8Dbsk4i+aolyuyYLkkolWewqYaNdy1pR+YD0w1f9J6zjVEpbHZEWFjQbqbfu92We
C4VW7awXgW4nk2rrnbgEAiECsN4N9N5eXSpCA2BBZu2360QuXWN2nmX6UwZi+/ba
9PPAcqNiV5+7vVYO4wAbhY4+HM/z2QP+NG97Nqj/RjQnsTlC+/rqGNf0W1GswGoc
XXr7qamGDoHlADPvebLkJzr3/N6UsIU0hILYLFAJ0SEg2+uszDD0+ZcBZMwWf6X/
ToHDdDJFQItwukFUy7AiBkwjp3XYyPOP+WDeMch+DqiJcirH3QYgvR27JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/cXEeP+e5ZmzFHCFxLa3bXK6ozMB8GA1UdIwQY
MBaAFA2TAtVG4GjC/XZ32dUgCt02yLzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUt
NGJlZjQzZDNmYjE3LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUtNGJlZjQzZDNmYjE3
LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0PnoJAY
i8LSga6mqvK6yR+RUSmbCVMTOj6v6tkSxQAPiaOuyHr2pNVnJAcWUDWMb+NE3U9k
IL5scx35peZYyanWClZS0t3t8IGzhDUTaRyqs7XqNUgblkeCAmBgqT0rZu3Mt3ls
Li9p80DJk5wu1NuulR9PnfGnd2gGF7ki7/aZq8oFmeAgPj4chKwTMFFb1HAShVEk
jMTu0vMkaXLfN3HbDbdeqD/Xr0uvVzg9UxIu7Q49T2HNXvWDqGqoSXHfvFnicMm+
tGUCJMEghLXbBeEkVldXOSa+29q34pktEvbX2uaSWzEzl9oOww3GdQGofK8vZ551
xM5CIFjhTWq3BA==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:08:25 2025 by rpki-client