Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
File:                     mAPED3e8iPryCfMdNh67q1yurEo.mft (raw, json)
Hash identifier:          d070dCzZ+lit9QgBmL89nhwXQFB0n2KJok24MHHtipA=
Subject key identifier:   12:E6:2E:82:41:42:9F:E2:01:9A:3F:1C:51:01:32:82:94:35:4C:72
Authority key identifier: 98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
Certificate issuer:       /CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Certificate serial:       019921B28F1709A66763C9AF4C5283CCFA95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 01:02:54 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:54 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:54 +0000
Files and hashes:         1: FofuUHCsYy2TWoAryzf8NlyduYw.roa (hash: R69ugPfWWsxLjShfG0VPEFk8EHkq5i3Md6nRP/x8COw=)
                          2: TjOWAn9m61FkB31GdiLBvzbAI7U.roa (hash: aG8sOh3CvIOag2ln0Tel0Fs9xc2JzXQ51lpXRk6Hp0I=)
                          3: mAPED3e8iPryCfMdNh67q1yurEo.crl (hash: Sa/5zf/I/o40U90uXYtSh9weBE8CMNu2cAfk5UFCjpU=)
                          4: xxDRFOTla8N7tGZn7evy3dACgq4.roa (hash: TgmRLmPdu38ZIfbUlnhFYOpaX8B5Morn7URlc3ZpGIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:8f:17:09:a6:67:63:c9:af:4c:52:83:cc:fa:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
        Validity
            Not Before: Sep  7 01:02:54 2025 GMT
            Not After : Sep  8 01:02:54 2025 GMT
        Subject: CN=12e62e8241429fe2019a3f1c5101328294354c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:24:ae:80:b7:59:ee:eb:11:69:5e:2b:d4:38:
                    34:c1:08:d9:30:ac:bc:e3:a7:87:2a:8d:34:05:d3:
                    fa:94:5f:11:a0:ea:cb:2e:14:a7:27:24:f8:c9:72:
                    6b:c2:17:c4:5e:29:78:84:ff:2e:5e:e2:18:d7:48:
                    0d:66:4d:2c:e0:b3:fe:7c:5c:83:ec:f2:2b:32:1b:
                    de:d0:81:72:30:6a:66:dc:bb:6b:af:46:eb:e3:13:
                    d3:7b:e6:ca:74:60:20:bb:aa:37:b6:5e:ac:46:f7:
                    02:c4:37:18:e4:4e:e0:e1:35:e8:3d:1c:fa:a7:32:
                    bb:b6:af:eb:7a:40:18:5a:f4:a4:d9:37:3b:77:bc:
                    19:6c:e3:ea:f2:98:f5:60:bd:31:cd:74:b2:ff:dd:
                    16:41:23:b9:73:95:63:3f:3f:0d:da:c1:ad:6c:ca:
                    3a:e5:e9:f6:cb:96:fa:36:8c:27:4f:b3:cf:b6:dd:
                    9b:48:93:01:7c:c1:32:cd:e0:54:3f:a3:84:fe:03:
                    ad:8b:18:cd:d3:2d:c2:16:9f:c4:40:c0:09:22:e2:
                    5f:e6:68:50:a2:57:fd:af:47:5f:98:c5:fa:ca:7b:
                    cd:ef:10:04:34:e0:19:1f:4d:20:14:5d:01:90:a2:
                    e9:95:ef:94:3a:53:e1:cf:c0:eb:12:15:98:92:e4:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E6:2E:82:41:42:9F:E2:01:9A:3F:1C:51:01:32:82:94:35:4C:72
            X509v3 Authority Key Identifier:
                keyid:98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:02:44:a2:7a:f3:84:bc:6f:1e:b0:04:ea:29:62:53:ee:0a:
         09:b4:30:a8:4f:68:8d:f1:66:dd:a6:b4:88:61:21:08:e3:77:
         0a:dd:a4:e4:a7:d4:bd:5e:bb:63:bc:9d:66:51:9b:38:b2:74:
         e6:8b:d5:ae:ac:5e:81:93:3a:4f:9a:7c:ea:59:bd:64:97:24:
         c8:17:24:4b:ca:42:87:b0:32:24:ab:2e:1b:41:d1:db:89:44:
         f8:67:d6:ad:56:8d:3f:84:9d:ae:20:40:05:74:86:a2:c5:63:
         7f:2a:23:9a:8d:8b:85:e9:97:42:0a:6e:49:9b:92:f9:40:2e:
         7d:e9:d8:37:96:93:49:27:72:c6:ff:92:08:5c:a1:e3:73:d3:
         f7:47:c8:60:6e:8e:bc:e3:24:88:2a:0e:4a:2b:20:f5:5b:4a:
         1d:e0:e5:b1:a9:1e:0e:98:7d:6e:1e:e5:ee:63:73:07:eb:1c:
         ad:af:c0:60:2a:c0:4f:9a:70:a0:77:aa:c8:bc:9b:fb:3b:b1:
         32:9e:82:60:c9:48:9e:65:0e:80:20:43:b5:b9:4e:5f:e1:31:
         c9:7e:d7:1e:c8:b1:1e:ad:39:25:62:53:83:90:17:53:3b:b5:
         a3:60:e7:3c:56:e4:63:33:1b:c5:79:b5:20:ec:71:60:5a:a6:
         92:47:cf:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhso8XCaZnY8mvTFKDzPqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MDNjNDBmNzdiYzg4ZmFmMjA5ZjMxZDM2MWViYmFiNWNh
ZWFjNGEwHhcNMjUwOTA3MDEwMjU0WhcNMjUwOTA4MDEwMjU0WjAzMTEwLwYDVQQD
EygxMmU2MmU4MjQxNDI5ZmUyMDE5YTNmMWM1MTAxMzI4Mjk0MzU0YzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ySugLdZ7usRaV4r1Dg0wQjZMKy8
46eHKo00BdP6lF8RoOrLLhSnJyT4yXJrwhfEXil4hP8uXuIY10gNZk0s4LP+fFyD
7PIrMhve0IFyMGpm3Ltrr0br4xPTe+bKdGAgu6o3tl6sRvcCxDcY5E7g4TXoPRz6
pzK7tq/rekAYWvSk2Tc7d7wZbOPq8pj1YL0xzXSy/90WQSO5c5VjPz8N2sGtbMo6
5en2y5b6NownT7PPtt2bSJMBfMEyzeBUP6OE/gOtixjN0y3CFp/EQMAJIuJf5mhQ
olf9r0dfmMX6ynvN7xAENOAZH00gFF0BkKLple+UOlPhz8DrEhWYkuSn6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLmLoJBQp/iAZo/HFEBMoKUNUxyMB8GA1UdIwQY
MBaAFJgDxA93vIj68gnzHTYeu6tcrqxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUFQRUQzZThpUHJ5Q2ZNZE5oNjdxMXl1ckVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iYWQ0YTAtM2U5Yi00NzY0LThhMjQt
ZjNhMjZmMDU1ZjRlLzEvbUFQRUQzZThpUHJ5Q2ZNZE5oNjdxMXl1ckVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iYWQ0YTAtM2U5Yi00NzY0LThhMjQtZjNhMjZmMDU1ZjRl
LzEvbUFQRUQzZThpUHJ5Q2ZNZE5oNjdxMXl1ckVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQJEonrz
hLxvHrAE6iliU+4KCbQwqE9ojfFm3aa0iGEhCON3Ct2k5KfUvV67Y7ydZlGbOLJ0
5ovVrqxegZM6T5p86lm9ZJckyBckS8pCh7AyJKsuG0HR24lE+GfWrVaNP4SdriBA
BXSGosVjfyojmo2LhemXQgpuSZuS+UAufenYN5aTSSdyxv+SCFyh43PT90fIYG6O
vOMkiCoOSisg9VtKHeDlsakeDph9bh7l7mNzB+scra/AYCrAT5pwoHeqyLyb+zux
Mp6CYMlInmUOgCBDtblOX+ExyX7XHsixHq05JWJTg5AXUzu1o2DnPFbkYzMbxXm1
IOxxYFqmkkfP1w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:38 2025 by rpki-client