Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
File:                     fJ1n8CerKw_yajV1FHOa_ogDesk.mft (raw, json)
Hash identifier:          DBOMrQties7au6FnYl1WzOVHW82/3OkXspwkZZIuvgA=
Subject key identifier:   19:E7:05:DE:43:BC:BD:2E:FB:ED:2F:B3:C4:26:7D:27:58:36:BB:BD
Authority key identifier: 7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9
Certificate issuer:       /CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
Certificate serial:       0199228CF71719AB5197B6AD8E29924E8991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
Manifest number:          1588
Signing time:             Sun 07 Sep 2025 05:01:27 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:27 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:27 +0000
Files and hashes:         1: fJ1n8CerKw_yajV1FHOa_ogDesk.crl (hash: BgkGQlKn5P4so/SfgLlxRS7tc+ngSnFvBFbQ8RbMtgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:f7:17:19:ab:51:97:b6:ad:8e:29:92:4e:89:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
        Validity
            Not Before: Sep  7 05:01:27 2025 GMT
            Not After : Sep  8 05:01:27 2025 GMT
        Subject: CN=19e705de43bcbd2efbed2fb3c4267d275836bbbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:d9:0e:36:e4:30:8c:f3:66:b4:95:e4:c3:
                    7b:85:f3:b2:e1:95:4e:4b:2e:83:02:bb:c1:df:d6:
                    9f:09:2f:f7:7a:8c:c5:59:34:31:d9:70:5c:87:95:
                    35:ab:ac:9d:dc:f1:18:8c:23:6f:af:34:49:69:da:
                    67:2f:33:cc:da:de:ef:01:25:aa:ec:71:c2:d2:bd:
                    01:d3:43:4b:76:62:38:97:83:c0:a4:8b:22:c4:1d:
                    cd:9c:19:67:e7:18:f6:91:48:02:06:fc:1e:86:be:
                    be:75:55:9b:95:cb:b3:af:5a:3b:20:d7:b6:ae:0f:
                    81:3b:70:54:f0:12:3d:32:d0:fd:d5:8e:fb:24:2e:
                    e6:4f:ff:c4:1d:41:cc:5a:42:ab:e7:9d:c5:98:35:
                    77:de:63:ed:6a:53:0e:f2:e1:0c:35:7e:94:06:f9:
                    e6:26:4e:6e:ab:13:6c:51:bd:64:44:5f:93:4e:06:
                    1e:68:01:a0:cd:04:54:83:dd:6a:49:e2:db:45:bc:
                    0b:2e:f9:4d:6f:fc:20:ad:c6:82:da:5d:b5:f1:a0:
                    48:60:dd:01:75:25:80:f2:60:ba:22:5d:b4:6c:40:
                    0e:11:45:71:73:ce:12:3c:2e:80:ef:fa:ac:98:02:
                    0a:cf:31:93:eb:31:c0:48:4e:d7:93:5b:86:86:cc:
                    56:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E7:05:DE:43:BC:BD:2E:FB:ED:2F:B3:C4:26:7D:27:58:36:BB:BD
            X509v3 Authority Key Identifier:
                keyid:7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:cb:da:8b:27:2b:64:36:c1:57:6f:a7:62:a4:43:4e:d1:6a:
         c3:3a:73:ca:6b:d8:82:b8:54:53:b4:46:06:ef:a3:2d:31:65:
         bd:66:ac:df:fb:e4:65:40:e1:0f:3f:b9:48:b2:d7:03:7c:58:
         33:f7:4d:fb:de:ef:94:f1:46:40:40:fa:53:15:f2:6a:57:14:
         bc:fe:10:34:7b:f8:0c:1f:5b:88:2a:f5:8c:ec:55:b7:36:76:
         a7:83:2e:3a:ca:84:66:db:fb:d7:ac:14:91:0f:9e:87:12:6c:
         27:eb:4a:c4:19:94:84:ba:5a:13:d7:a9:06:e3:cf:dc:1d:b2:
         56:82:1e:f3:50:a1:43:4e:21:61:d6:f8:9d:f1:2b:b1:db:5e:
         3b:fe:84:9b:ac:ad:5a:15:e6:b7:2c:83:85:bf:3a:7d:aa:3f:
         17:3b:8e:4e:a8:6a:d3:4b:9c:41:14:32:24:af:7c:b9:bd:fe:
         4f:b2:60:1f:98:6d:ba:b8:83:90:78:d4:ef:b8:2f:83:a0:a5:
         f9:c1:39:5e:be:87:7e:8d:fd:8c:62:81:f2:e8:87:ab:4c:a1:
         07:8d:44:6e:9d:a3:b6:25:ee:03:85:ee:b2:90:c0:ad:8f:ae:
         9f:31:be:3f:93:84:de:81:61:ac:5f:47:fc:1d:45:1e:e6:b8:
         88:57:d7:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijPcXGatRl7atjimSTomRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOWQ2N2YwMjdhYjJiMGZmMjZhMzU3NTE0NzM5YWZlODgw
MzdhYzkwHhcNMjUwOTA3MDUwMTI3WhcNMjUwOTA4MDUwMTI3WjAzMTEwLwYDVQQD
EygxOWU3MDVkZTQzYmNiZDJlZmJlZDJmYjNjNDI2N2QyNzU4MzZiYmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoinZDjbkMIzzZrSV5MN7hfOy4ZVO
Sy6DArvB39afCS/3eozFWTQx2XBch5U1q6yd3PEYjCNvrzRJadpnLzPM2t7vASWq
7HHC0r0B00NLdmI4l4PApIsixB3NnBln5xj2kUgCBvwehr6+dVWblcuzr1o7INe2
rg+BO3BU8BI9MtD91Y77JC7mT//EHUHMWkKr553FmDV33mPtalMO8uEMNX6UBvnm
Jk5uqxNsUb1kRF+TTgYeaAGgzQRUg91qSeLbRbwLLvlNb/wgrcaC2l218aBIYN0B
dSWA8mC6Il20bEAOEUVxc84SPC6A7/qsmAIKzzGT6zHASE7Xk1uGhsxW2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnnBd5DvL0u++0vs8QmfSdYNru9MB8GA1UdIwQY
MBaAFHydZ/AnqysP8mo1dRRzmv6IA3rJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkoxbjhDZXJLd195YWpWMUZIT2Ffb2dEZXNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OThmZTgtNWY2OS00ZDM3LWJkNTgt
NjVlYjFiYTZlMzM3LzEvZkoxbjhDZXJLd195YWpWMUZIT2Ffb2dEZXNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82OThmZTgtNWY2OS00ZDM3LWJkNTgtNjVlYjFiYTZlMzM3
LzEvZkoxbjhDZXJLd195YWpWMUZIT2Ffb2dEZXNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMvaiycr
ZDbBV2+nYqRDTtFqwzpzymvYgrhUU7RGBu+jLTFlvWas3/vkZUDhDz+5SLLXA3xY
M/dN+97vlPFGQED6UxXyalcUvP4QNHv4DB9biCr1jOxVtzZ2p4MuOsqEZtv716wU
kQ+ehxJsJ+tKxBmUhLpaE9epBuPP3B2yVoIe81ChQ04hYdb4nfErsdteO/6Em6yt
WhXmtyyDhb86fao/FzuOTqhq00ucQRQyJK98ub3+T7JgH5hturiDkHjU77gvg6Cl
+cE5Xr6Hfo39jGKB8uiHq0yhB41Ebp2jtiXuA4XuspDArY+unzG+P5OE3oFhrF9H
/B1FHua4iFfX2A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:05 2025 by rpki-client