Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
File:                     RmSWpNugTX71InAAYXQ8bF0K5ZA.mft (raw, json)
Hash identifier:          /WnJOZTmUREMlnFm36RYu/faGPhOPJDzMmW/++f+PtY=
Subject key identifier:   A2:00:51:BE:89:61:1A:7A:E4:D3:7E:52:98:C6:DF:32:D4:95:2C:A9
Authority key identifier: 46:64:96:A4:DB:A0:4D:7E:F5:22:70:00:61:74:3C:6C:5D:0A:E5:90
Certificate issuer:       /CN=466496a4dba04d7ef522700061743c6c5d0ae590
Certificate serial:       0199180ABC3A4D28F20D6DAFA5C591E86B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
Manifest number:          4C
Signing time:             Fri 05 Sep 2025 04:03:00 +0000
Manifest this update:     Fri 05 Sep 2025 04:03:00 +0000
Manifest next update:     Sat 06 Sep 2025 04:03:00 +0000
Files and hashes:         1: 3cYwGEYRvz1yKJhsQiVSnoCXk2c.roa (hash: 7LKNIki25we3oiggzy3/a1vHXwiHcC9D9HO/l5A+7h0=)
                          2: RmSWpNugTX71InAAYXQ8bF0K5ZA.crl (hash: cHg9gt+envHWPxELo4I8F5kI/jREu5Jd9nyyk4lZcRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:0a:bc:3a:4d:28:f2:0d:6d:af:a5:c5:91:e8:6b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466496a4dba04d7ef522700061743c6c5d0ae590
        Validity
            Not Before: Sep  5 04:03:00 2025 GMT
            Not After : Sep  6 04:03:00 2025 GMT
        Subject: CN=a20051be89611a7ae4d37e5298c6df32d4952ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d1:c6:bd:43:70:b0:8d:45:37:bc:9c:05:2f:
                    cf:3f:c9:8c:14:a1:c7:16:61:6f:6f:de:6a:c5:dc:
                    d8:d7:08:5b:7a:d7:a3:70:76:dc:3e:ef:35:73:f9:
                    79:34:57:73:18:dc:fd:64:d8:64:f1:8f:d3:c6:72:
                    40:af:fe:b4:8f:0c:d6:80:45:72:81:e5:37:f6:0f:
                    64:31:7f:e5:48:f8:b1:1a:3d:89:3c:63:c1:4f:a7:
                    40:7e:87:be:bd:94:67:77:3f:a9:f3:20:70:9d:bf:
                    72:17:fc:0d:fe:72:94:a2:66:6b:f1:d3:2d:bb:b8:
                    bd:d5:c9:3e:22:bb:32:7c:08:68:52:a5:d3:f4:84:
                    a4:e5:6e:09:25:61:40:06:c9:cf:38:6f:de:e0:b2:
                    3d:8d:28:9c:41:13:b3:b4:2d:30:21:ce:1f:6c:7d:
                    3a:b6:e3:f7:58:17:68:c4:9b:1d:a9:09:ee:56:ac:
                    e3:8e:42:1e:b6:3c:a3:76:d9:f4:e7:ed:f5:1a:d3:
                    86:ed:e9:e5:12:28:1c:f0:0d:3b:94:96:9f:7b:ff:
                    c9:78:8d:16:cc:8c:43:4a:fa:b6:93:72:f1:d9:cd:
                    08:58:8d:eb:21:c9:60:5a:60:e8:fe:47:ef:82:a4:
                    68:c9:d9:19:5b:10:a0:89:c2:2c:8f:37:b7:f7:a7:
                    ed:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:00:51:BE:89:61:1A:7A:E4:D3:7E:52:98:C6:DF:32:D4:95:2C:A9
            X509v3 Authority Key Identifier:
                keyid:46:64:96:A4:DB:A0:4D:7E:F5:22:70:00:61:74:3C:6C:5D:0A:E5:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:9d:34:0d:e9:6b:18:b2:85:7e:b2:6d:5b:b4:23:bb:bf:09:
         84:bc:95:c7:4d:10:4d:60:37:0a:2b:4b:15:ee:16:a7:bc:fe:
         dc:29:00:6a:15:03:49:68:63:ac:4c:85:dd:ee:a0:78:47:e6:
         83:db:6e:1b:d9:04:f9:7a:c2:9c:50:4f:b6:7e:22:65:83:9e:
         fb:44:1e:51:14:97:f6:e7:97:ef:6f:2a:32:67:64:ca:de:1f:
         69:f8:bb:ab:a5:31:be:83:ff:47:76:4e:9e:42:ea:79:e3:38:
         bd:cc:3c:62:a6:dd:c2:10:f1:1a:29:61:64:93:4b:e8:dd:c5:
         69:03:3b:31:5a:43:da:c3:68:98:2e:84:68:d5:94:08:0d:0c:
         b3:a2:4f:f9:5f:d5:37:38:5b:ac:59:86:21:03:e2:ed:95:27:
         9b:0f:4d:6c:9b:8d:d9:cc:37:ae:14:64:f9:5a:fd:16:26:95:
         50:48:36:1b:b1:9f:61:0b:92:84:20:b6:c4:19:5a:39:63:38:
         13:f3:3b:23:96:94:28:80:fb:5d:e0:f9:f9:f7:a8:bf:64:01:
         6e:b6:83:90:80:5e:86:35:b2:34:97:c4:08:08:6d:18:4c:0f:
         a2:1e:c8:d7:43:da:5e:73:a1:61:f8:8f:a1:31:60:34:95:a5:
         c8:4d:fa:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCrw6TSjyDW2vpcWR6GtpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjQ5NmE0ZGJhMDRkN2VmNTIyNzAwMDYxNzQzYzZjNWQw
YWU1OTAwHhcNMjUwOTA1MDQwMzAwWhcNMjUwOTA2MDQwMzAwWjAzMTEwLwYDVQQD
EyhhMjAwNTFiZTg5NjExYTdhZTRkMzdlNTI5OGM2ZGYzMmQ0OTUyY2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNHGvUNwsI1FN7ycBS/PP8mMFKHH
FmFvb95qxdzY1whbetejcHbcPu81c/l5NFdzGNz9ZNhk8Y/TxnJAr/60jwzWgEVy
geU39g9kMX/lSPixGj2JPGPBT6dAfoe+vZRndz+p8yBwnb9yF/wN/nKUomZr8dMt
u7i91ck+IrsyfAhoUqXT9ISk5W4JJWFABsnPOG/e4LI9jSicQROztC0wIc4fbH06
tuP3WBdoxJsdqQnuVqzjjkIetjyjdtn05+31GtOG7enlEigc8A07lJafe//JeI0W
zIxDSvq2k3Lx2c0IWI3rIclgWmDo/kfvgqRoydkZWxCgicIsjze396ftTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIAUb6JYRp65NN+UpjG3zLUlSypMB8GA1UdIwQY
MBaAFEZklqTboE1+9SJwAGF0PGxdCuWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1TV3BOdWdUWDcxSW5BQVlYUThiRjBLNVpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9hNjBmZTktODU4ZC00NjYyLTgwY2Mt
ZTg5ZTAyNjU5MTAwLzEvUm1TV3BOdWdUWDcxSW5BQVlYUThiRjBLNVpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9hNjBmZTktODU4ZC00NjYyLTgwY2MtZTg5ZTAyNjU5MTAw
LzEvUm1TV3BOdWdUWDcxSW5BQVlYUThiRjBLNVpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJ00Delr
GLKFfrJtW7Qju78JhLyVx00QTWA3CitLFe4Wp7z+3CkAahUDSWhjrEyF3e6geEfm
g9tuG9kE+XrCnFBPtn4iZYOe+0QeURSX9ueX728qMmdkyt4fafi7q6UxvoP/R3ZO
nkLqeeM4vcw8YqbdwhDxGilhZJNL6N3FaQM7MVpD2sNomC6EaNWUCA0Ms6JP+V/V
NzhbrFmGIQPi7ZUnmw9NbJuN2cw3rhRk+Vr9FiaVUEg2G7GfYQuShCC2xBlaOWM4
E/M7I5aUKID7XeD5+feov2QBbraDkIBehjWyNJfECAhtGEwPoh7I10PaXnOhYfiP
oTFgNJWlyE36BA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 05:54:45 2025 by rpki-client