Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
File:                     IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft (raw, json)
Hash identifier:          F5WkmdVCijYee91cOramfWA9qbUnuhNgph5LkWIQ+HE=
Subject key identifier:   C2:1F:1C:2A:11:FE:06:AE:D7:04:9B:6A:A9:04:99:39:EE:AE:19:2D
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Certificate issuer:       /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial:       01992C345BCB8615998512B22280F6E5E8D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
Manifest number:          16A3
Signing time:             Tue 09 Sep 2025 02:00:52 +0000
Manifest this update:     Tue 09 Sep 2025 02:00:52 +0000
Manifest next update:     Wed 10 Sep 2025 02:00:52 +0000
Files and hashes:         1: IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl (hash: aUtClQR5PsmCSKs1Pz5NMz6233IeabVOjEc99JxFZyU=)
                          2: Q8etSu2zHMkh6fhsXllq0m85sqg.roa (hash: Aasfzwuv8iCEYaBcficgkTOl5p9Jnx6y2dL1fKqUxfY=)
                          3: R99dYNqYsBqUsChphTk93qUHPQI.roa (hash: oITPzkMB7sLtvkSUO+8ORkUXyH71yZzthGpvgYu/GMw=)
                          4: YlS0qhcvfxmHK3i2Atu8iHlQyy8.roa (hash: JJTAqpTGe2vNlEv4BQ7ae6jf0gv/R7qn+RigFBVB2r8=)
                          5: enCYou3Lgslt7KYd_8YoMvxJSfM.roa (hash: dwoCU6EXuYG3N406vlo44zskpOVN8Ue3bL3Fche1WCc=)
                          6: jMxhOzBSeMP0LtXLXP7EcBhoAB8.roa (hash: 0uCBihxg/sVC+EOc4ZTIYJf8x4v2kocHLJVgzm9lM24=)
                          7: wxI5PYnsJV_pw-ZAaHHG4istOuM.roa (hash: MuOSU2DUhtvwHObwNbqVRHZsUbztYSCYXG4GZ/vH3/I=)
                          8: xv12OPtaTpKWrICjs27-0WrsmIg.roa (hash: X8XG/cdIF+kjQf+VKvmL60lRdGE9r9sJ1I4ddr9jEgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 02:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2c:34:5b:cb:86:15:99:85:12:b2:22:80:f6:e5:e8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
        Validity
            Not Before: Sep  9 02:00:52 2025 GMT
            Not After : Sep 10 02:00:52 2025 GMT
        Subject: CN=c21f1c2a11fe06aed7049b6aa9049939eeae192d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:b4:d0:c4:50:da:9b:30:ef:eb:81:98:9d:
                    09:3c:04:ce:2b:ca:22:fd:d3:a3:1a:35:3c:80:26:
                    94:3e:1f:06:72:99:42:ef:5a:a4:d7:bf:0c:24:01:
                    6e:20:16:3e:5b:0a:9e:bc:39:b8:eb:ea:81:a7:21:
                    fa:63:90:89:06:8a:4e:fc:5d:19:d9:32:8c:08:fe:
                    19:ad:9b:ab:45:00:70:72:db:8e:21:05:c1:ca:83:
                    34:c6:46:8c:72:4c:49:94:d8:8e:4c:4b:41:c3:39:
                    d7:d6:27:8f:87:4f:5a:ed:7b:68:2e:b1:e3:8f:24:
                    4a:fe:87:d7:ef:8a:48:e1:28:f7:5c:4d:ab:d4:7c:
                    ad:90:25:c2:e4:c0:67:25:07:a1:55:c2:66:5c:5a:
                    72:3c:66:86:58:43:55:8a:d5:8c:75:92:c8:25:60:
                    d6:ca:2e:f1:8c:4d:e8:e0:73:29:1d:08:bd:40:4d:
                    3b:49:8a:05:ef:c8:3b:a6:5c:a7:1e:e2:e2:4a:1b:
                    e2:c1:7b:0f:64:eb:6c:ff:f9:b8:40:99:4f:cb:96:
                    1e:c7:f9:3c:2d:ba:94:2d:47:86:1d:0b:f5:67:40:
                    d5:d3:48:67:f6:bb:7e:b6:ed:1b:ce:fa:8d:95:59:
                    f2:2c:69:ae:68:4b:fe:a8:b3:5a:50:34:7d:fd:b6:
                    f7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1F:1C:2A:11:FE:06:AE:D7:04:9B:6A:A9:04:99:39:EE:AE:19:2D
            X509v3 Authority Key Identifier:
                keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f9:c5:d5:f0:7d:8b:60:31:eb:cd:94:a2:32:62:06:c1:2d:
         dc:0e:95:17:a3:4a:7c:a0:b0:0a:f0:48:fa:1e:2f:7f:6d:d7:
         a4:c8:e4:ac:dc:04:20:5b:f8:c5:a4:e2:46:e5:55:d8:de:ef:
         f8:29:68:12:fb:04:a3:33:e3:0b:13:58:b1:2d:1f:de:ad:2f:
         b3:66:b3:ef:44:0e:9a:da:82:e1:1e:69:63:18:57:4a:b6:5d:
         38:2d:47:08:b9:bf:99:c0:f7:d6:9a:46:83:44:44:72:7c:9a:
         f8:fb:f8:13:28:cb:f7:fb:2e:99:ae:48:c0:c2:5e:09:0b:eb:
         db:d6:90:56:5b:c1:77:61:b2:2d:1f:2f:cf:d3:92:82:5b:4e:
         14:86:ea:76:d4:bd:c7:ba:48:df:aa:e0:16:2b:e3:0d:03:f2:
         22:1e:e5:b4:a0:8e:14:b1:89:8b:04:cf:0c:54:00:fd:b4:32:
         0e:b0:e4:9b:10:ca:b6:3c:d5:40:90:c8:4a:6c:f0:39:d2:27:
         76:d7:5a:90:51:b3:7e:45:f4:c1:1e:d6:49:1c:d1:74:1e:59:
         7f:22:2c:07:87:83:c2:23:fb:09:05:1c:36:ae:7b:e3:f2:37:
         07:b0:e2:86:ea:69:de:27:e8:bb:8b:69:16:e9:5e:16:ec:b1:
         5c:fc:0b:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZksNFvLhhWZhRKyIoD25ejTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi
OWQ2MDgwHhcNMjUwOTA5MDIwMDUyWhcNMjUwOTEwMDIwMDUyWjAzMTEwLwYDVQQD
EyhjMjFmMWMyYTExZmUwNmFlZDcwNDliNmFhOTA0OTkzOWVlYWUxOTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAC00MRQ2psw7+uBmJ0JPATOK8oi
/dOjGjU8gCaUPh8GcplC71qk178MJAFuIBY+WwqevDm46+qBpyH6Y5CJBopO/F0Z
2TKMCP4ZrZurRQBwctuOIQXByoM0xkaMckxJlNiOTEtBwznX1iePh09a7XtoLrHj
jyRK/ofX74pI4Sj3XE2r1HytkCXC5MBnJQehVcJmXFpyPGaGWENVitWMdZLIJWDW
yi7xjE3o4HMpHQi9QE07SYoF78g7plynHuLiShviwXsPZOts//m4QJlPy5Yex/k8
LbqULUeGHQv1Z0DV00hn9rt+tu0bzvqNlVnyLGmuaEv+qLNaUDR9/bb3MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIfHCoR/gau1wSbaqkEmTnurhktMB8GA1UdIwQY
MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt
YmM5M2NhNjc5ZTFmLzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm
LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPnF1fB9
i2Ax682UojJiBsEt3A6VF6NKfKCwCvBI+h4vf23XpMjkrNwEIFv4xaTiRuVV2N7v
+CloEvsEozPjCxNYsS0f3q0vs2az70QOmtqC4R5pYxhXSrZdOC1HCLm/mcD31ppG
g0REcnya+Pv4EyjL9/suma5IwMJeCQvr29aQVlvBd2GyLR8vz9OSgltOFIbqdtS9
x7pI36rgFivjDQPyIh7ltKCOFLGJiwTPDFQA/bQyDrDkmxDKtjzVQJDISmzwOdIn
dtdakFGzfkX0wR7WSRzRdB5ZfyIsB4eDwiP7CQUcNq574/I3B7Dihupp3ifou4tp
FuleFuyxXPwL1Q==
-----END CERTIFICATE-----
Generated at Tue Sep 9 10:35:46 2025 by rpki-client