Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File:                     k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier:          X4ne584fHC9wQd5SBDjo+fjZF8B/UycJ406rWovJuYs=
Subject key identifier:   C6:DA:82:59:33:7A:F9:0B:C8:26:57:04:0C:0C:01:C2:F3:E5:91:40
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer:       /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial:       0199277D5A5299E9EF4CDC2EE2E316884B84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number:          1697
Signing time:             Mon 08 Sep 2025 04:02:30 +0000
Manifest this update:     Mon 08 Sep 2025 04:02:30 +0000
Manifest next update:     Tue 09 Sep 2025 04:02:30 +0000
Files and hashes:         1: EUR3tjFNTdAQ0PDdSrgVT7YlWf0.roa (hash: RNEi8VUaDrk0De742oO4ThiEi9sdWL6KnRT8EqeTr1E=)
                          2: U7MrjrMFOwWnR4h117sJMVUvits.roa (hash: htjbTluQYwPg60synTRHWeZ9MgvIenRnyRzzuYY2Zr4=)
                          3: YzH9FpM8Eg_tqz_L3y3mlHb7ZbY.roa (hash: KjnbFS24f0U0fBm1mqed6e/EL7zir4AQYBp9zdgcLZI=)
                          4: dESzUpMviwtTKAbBmdcEnSrDmb8.roa (hash: t6YDlmbHdL/fLbmXo8sZDgLUB7U10S0kh8xDcseSIRM=)
                          5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: Y68xLzYesmx/LBiZU9CnVGxbJuUdAZjMb0vTVncbBt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:27:7d:5a:52:99:e9:ef:4c:dc:2e:e2:e3:16:88:4b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
        Validity
            Not Before: Sep  8 04:02:30 2025 GMT
            Not After : Sep  9 04:02:30 2025 GMT
        Subject: CN=c6da8259337af90bc82657040c0c01c2f3e59140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:46:b7:11:b4:dc:25:60:95:87:6b:ee:d8:
                    16:aa:38:e0:52:a2:4d:ea:84:09:12:15:4d:c0:3e:
                    d4:d5:70:b5:d3:00:d1:11:0f:42:77:fe:2b:79:a1:
                    27:75:81:10:2d:00:f4:58:14:29:4f:f7:50:ff:02:
                    a0:05:1c:f9:31:b1:90:9f:e5:b5:4b:4a:98:63:11:
                    60:45:01:c1:ed:67:6b:7b:e3:db:b7:80:28:94:b2:
                    ef:bb:ba:4c:e7:02:74:b7:f5:59:bd:76:96:e1:de:
                    4c:72:9b:38:f5:1d:7f:bf:57:b0:88:63:07:e6:0e:
                    0e:be:6b:88:ad:17:2f:f8:0d:d6:2c:4b:ab:36:8c:
                    18:70:6e:07:99:df:4e:cb:c2:c5:61:c0:3a:75:0a:
                    ad:79:fc:4a:3c:4f:8e:68:43:96:f0:82:db:d9:07:
                    55:47:ea:c5:c6:bd:62:4e:77:1c:7b:1a:38:96:29:
                    f5:d6:15:ad:83:ba:1b:01:f0:0a:f8:2b:38:49:b4:
                    a4:44:4c:ca:15:59:f6:0f:54:5c:b7:f8:f1:bb:39:
                    36:b3:2a:64:92:72:51:d7:82:34:55:d3:8c:b5:a7:
                    2f:69:b3:13:a7:cc:8b:f5:a2:98:b1:da:16:62:2f:
                    db:23:48:da:8e:18:19:1b:e0:66:f0:11:b4:2f:5d:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DA:82:59:33:7A:F9:0B:C8:26:57:04:0C:0C:01:C2:F3:E5:91:40
            X509v3 Authority Key Identifier:
                keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fd:98:eb:f3:61:ac:5c:3f:17:e4:ef:99:5e:a9:8e:9d:05:
         d6:e7:ab:02:c3:c4:3e:3a:17:fb:b4:81:64:70:02:ed:f9:28:
         a6:55:e6:02:92:db:7d:2d:e1:7c:2a:81:0f:16:03:ef:8b:65:
         35:25:85:a5:85:04:58:50:84:35:eb:94:69:e4:e5:37:a9:47:
         a5:a1:21:d1:14:af:aa:2b:23:cb:39:c8:a8:4a:83:21:e0:a7:
         50:cd:05:23:72:77:e4:5c:5f:9f:3a:e3:2a:3b:0f:e2:15:12:
         94:4d:64:43:2b:72:cb:ce:67:ee:df:a9:6f:ce:cb:8b:e4:9e:
         f4:d6:97:e9:d9:6d:02:17:01:6c:09:31:36:e3:81:1f:0c:d2:
         8c:9f:cc:07:d9:82:0e:d2:a2:42:b4:c3:29:a8:9e:52:43:e5:
         f2:48:73:60:b5:76:be:5c:6a:1c:97:c1:d1:0e:f2:80:ec:8d:
         6a:3b:29:dd:e2:c5:f6:d5:d4:8d:d1:8e:d7:c3:45:ee:c0:d0:
         d4:9b:b4:00:e2:89:3e:53:28:7a:98:80:4a:ac:7c:bb:98:08:
         c3:d6:42:05:69:47:c4:19:1c:b4:74:10:d2:e4:7e:bc:ea:06:
         9b:87:a4:d5:fa:60:8b:3f:9c:07:69:48:78:49:e6:5d:21:77:
         69:4f:57:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZknfVpSmenvTNwu4uMWiEuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjc2YWM5ZjdhODRhZDc5MGFkNTdjODgwYmM5Zjg2MmFk
NGM5ZTcwHhcNMjUwOTA4MDQwMjMwWhcNMjUwOTA5MDQwMjMwWjAzMTEwLwYDVQQD
EyhjNmRhODI1OTMzN2FmOTBiYzgyNjU3MDQwYzBjMDFjMmYzZTU5MTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4pGtxG03CVglYdr7tgWqjjgUqJN
6oQJEhVNwD7U1XC10wDREQ9Cd/4reaEndYEQLQD0WBQpT/dQ/wKgBRz5MbGQn+W1
S0qYYxFgRQHB7Wdre+Pbt4AolLLvu7pM5wJ0t/VZvXaW4d5Mcps49R1/v1ewiGMH
5g4OvmuIrRcv+A3WLEurNowYcG4Hmd9Oy8LFYcA6dQqtefxKPE+OaEOW8ILb2QdV
R+rFxr1iTnccexo4lin11hWtg7obAfAK+Cs4SbSkREzKFVn2D1Rct/jxuzk2sypk
knJR14I0VdOMtacvabMTp8yL9aKYsdoWYi/bI0jajhgZG+Bm8BG0L10g9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbaglkzevkLyCZXBAwMAcLz5ZFAMB8GA1UdIwQY
MBaAFJO3asn3qErXkK1XyIC8n4Yq1MnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzkt
OTk4Mjc4ZjRmYmIyLzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzktOTk4Mjc4ZjRmYmIy
LzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/2Y6/Nh
rFw/F+TvmV6pjp0F1uerAsPEPjoX+7SBZHAC7fkoplXmApLbfS3hfCqBDxYD74tl
NSWFpYUEWFCENeuUaeTlN6lHpaEh0RSvqisjyznIqEqDIeCnUM0FI3J35Fxfnzrj
KjsP4hUSlE1kQytyy85n7t+pb87Li+Se9NaX6dltAhcBbAkxNuOBHwzSjJ/MB9mC
DtKiQrTDKaieUkPl8khzYLV2vlxqHJfB0Q7ygOyNajsp3eLF9tXUjdGO18NF7sDQ
1Ju0AOKJPlMoepiASqx8u5gIw9ZCBWlHxBkctHQQ0uR+vOoGm4ek1fpgiz+cB2lI
eEnmXSF3aU9XZg==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:50:21 2025 by rpki-client