Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
File:                     _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json)
Hash identifier:          NCkCL4iiuwXAUiaRoTMmUdOtAwsq3Q7xATzfhn1qfBc=
Subject key identifier:   4A:88:AB:E2:2E:A3:02:87:78:A8:D2:B1:69:61:E5:68:EE:7F:0A:FF
Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
Certificate issuer:       /CN=fe72124b6d321463e9f10be1fb422b892462e89f
Certificate serial:       0199228CAC3ABDDBFBBED86F89CE24701387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
Manifest number:          0484
Signing time:             Sun 07 Sep 2025 05:01:08 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:08 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:08 +0000
Files and hashes:         1: UsHLucR3rIttQE-i6TwlR7HDoxs.roa (hash: DUCr1+Yi08xU6F2DSZeSJmVDu/Cs1KLSUmKk04+9Ejs=)
                          2: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: phgvGb+IIS4ZstltzUBAzXfGtbL2OoRd0fOE0JgihVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:ac:3a:bd:db:fb:be:d8:6f:89:ce:24:70:13:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f
        Validity
            Not Before: Sep  7 05:01:08 2025 GMT
            Not After : Sep  8 05:01:08 2025 GMT
        Subject: CN=4a88abe22ea3028778a8d2b16961e568ee7f0aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4f:92:8e:f1:6b:7b:df:db:2e:15:fd:b9:65:
                    6d:43:33:d7:01:31:1c:6f:ef:18:e2:6a:b2:df:8b:
                    0e:e5:de:ec:ce:87:e9:ab:7b:91:4d:11:7d:ae:e7:
                    e9:97:b7:c2:a4:21:dd:76:bd:7d:66:3f:8b:e1:fa:
                    c6:99:7a:2a:1b:9a:19:42:5b:4c:44:92:03:69:aa:
                    61:65:14:f3:b6:f7:38:7c:a7:94:8c:ae:d5:60:d8:
                    40:1f:8d:0a:8f:05:d1:66:75:34:45:62:43:4c:e7:
                    e8:40:22:95:08:a8:22:12:f5:60:f3:8e:ba:04:87:
                    98:b3:a3:4b:74:80:ec:70:fb:e7:0b:d9:d9:19:01:
                    39:49:1d:8f:f2:3a:af:a8:cc:87:00:23:20:4f:0d:
                    88:33:8d:ef:3c:73:64:9c:57:5e:d4:bf:30:99:eb:
                    04:ff:a2:56:6d:59:38:18:c6:50:98:a8:02:69:8c:
                    09:30:63:93:8d:f7:ed:df:92:c1:cf:00:ff:08:43:
                    33:ad:15:9b:a7:fd:13:b3:d3:e6:fc:9f:c6:05:cd:
                    4c:80:56:c5:78:74:cf:07:d1:50:e9:7c:62:57:03:
                    f8:11:5f:53:99:d1:c9:11:a5:75:c0:84:67:cc:a4:
                    19:93:8b:8d:d4:ca:fa:1c:7e:a6:0e:bf:a9:73:b0:
                    30:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:88:AB:E2:2E:A3:02:87:78:A8:D2:B1:69:61:E5:68:EE:7F:0A:FF
            X509v3 Authority Key Identifier:
                keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5c:8c:c9:de:c2:d5:7d:ac:ca:a8:65:e2:a2:e8:dc:09:18:
         c6:83:b1:f6:48:7a:10:f9:8c:a3:cd:51:36:fe:c4:28:df:7e:
         4e:67:aa:02:e6:f8:bc:fd:39:af:33:5e:ad:6e:c6:17:f7:f1:
         a9:fe:f2:33:fc:39:98:12:a7:f4:75:29:36:2f:21:c1:c6:73:
         95:af:48:8b:d1:84:20:28:d9:c8:00:2e:91:cb:d3:d2:48:f5:
         4b:2a:14:ed:a9:49:6f:9e:91:32:61:68:87:73:51:2c:1f:6d:
         84:8b:e4:c7:08:d3:e1:ed:10:e2:95:a6:f0:cd:50:96:87:3d:
         7c:96:4d:bf:c5:81:ac:ec:d3:f2:ad:4e:d4:c7:36:19:f3:66:
         45:40:29:ec:74:ad:92:75:9d:81:a8:86:5b:af:b2:fd:ab:f8:
         06:8e:c7:ce:9f:bc:12:ef:ad:6b:10:10:96:c7:b1:cc:98:13:
         8d:37:7e:b5:9c:eb:d5:d5:74:89:bc:96:5d:a1:9b:d0:8a:be:
         a6:66:6f:0a:4e:fa:13:c6:50:e6:83:d0:37:4e:9d:5c:2c:03:
         79:1b:55:3b:9a:bc:47:d7:41:f0:1c:0a:63:0e:f7:22:06:2e:
         84:07:de:a1:0f:8d:97:f4:f7:e9:d9:e5:2d:25:3e:a1:52:e4:
         44:e9:9f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijKw6vdv7vthvic4kcBOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzIxMjRiNmQzMjE0NjNlOWYxMGJlMWZiNDIyYjg5MjQ2
MmU4OWYwHhcNMjUwOTA3MDUwMTA4WhcNMjUwOTA4MDUwMTA4WjAzMTEwLwYDVQQD
Eyg0YTg4YWJlMjJlYTMwMjg3NzhhOGQyYjE2OTYxZTU2OGVlN2YwYWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k+SjvFre9/bLhX9uWVtQzPXATEc
b+8Y4mqy34sO5d7szofpq3uRTRF9rufpl7fCpCHddr19Zj+L4frGmXoqG5oZQltM
RJIDaaphZRTztvc4fKeUjK7VYNhAH40KjwXRZnU0RWJDTOfoQCKVCKgiEvVg8466
BIeYs6NLdIDscPvnC9nZGQE5SR2P8jqvqMyHACMgTw2IM43vPHNknFde1L8wmesE
/6JWbVk4GMZQmKgCaYwJMGOTjfft35LBzwD/CEMzrRWbp/0Ts9Pm/J/GBc1MgFbF
eHTPB9FQ6XxiVwP4EV9TmdHJEaV1wIRnzKQZk4uN1Mr6HH6mDr+pc7AwFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqIq+IuowKHeKjSsWlh5Wjufwr/MB8GA1UdIwQY
MBaAFP5yEkttMhRj6fEL4ftCK4kkYuifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYt
N2JiODIwNDBlNWVlLzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYtN2JiODIwNDBlNWVl
LzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlyMyd7C
1X2syqhl4qLo3AkYxoOx9kh6EPmMo81RNv7EKN9+TmeqAub4vP05rzNerW7GF/fx
qf7yM/w5mBKn9HUpNi8hwcZzla9Ii9GEICjZyAAukcvT0kj1SyoU7alJb56RMmFo
h3NRLB9thIvkxwjT4e0Q4pWm8M1Qloc9fJZNv8WBrOzT8q1O1Mc2GfNmRUAp7HSt
knWdgaiGW6+y/av4Bo7Hzp+8Eu+taxAQlsexzJgTjTd+tZzr1dV0ibyWXaGb0Iq+
pmZvCk76E8ZQ5oPQN06dXCwDeRtVO5q8R9dB8BwKYw73IgYuhAfeoQ+Nl/T36dnl
LSU+oVLkROmfAw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:40 2025 by rpki-client