Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
File:                     I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft (raw, json)
Hash identifier:          VRs7onE8Igyj6bAxiGGNS6C6VovmCvNiz+bCkdnCGX0=
Subject key identifier:   CE:D1:30:D6:30:D9:D3:B7:B5:34:92:8D:16:28:69:C1:68:EA:40:B1
Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
Certificate issuer:       /CN=23f8c999b30ce248e6c468c784d64d72f963e938
Certificate serial:       019923A0C0631F40479791105AA4E5D3E1FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
Manifest number:          0DC5
Signing time:             Sun 07 Sep 2025 10:02:41 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:41 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:41 +0000
Files and hashes:         1: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl (hash: vHsSQ1SZI79bFNrs2o7/umG4SNYG4Oylx70bYb1hlBQ=)
                          2: lMtd9Et7sCIMnXubrUAx71SKNrE.roa (hash: m1edH+G4XaQspTL3esib0CDSyQxr91JPxRsi1poYwKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:c0:63:1f:40:47:97:91:10:5a:a4:e5:d3:e1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938
        Validity
            Not Before: Sep  7 10:02:41 2025 GMT
            Not After : Sep  8 10:02:41 2025 GMT
        Subject: CN=ced130d630d9d3b7b534928d162869c168ea40b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:81:16:67:09:fc:c3:6b:ea:fb:c3:1f:68:
                    4f:fe:3c:12:1a:20:ef:f1:f3:e9:a2:83:33:8c:40:
                    8c:b1:49:00:b7:e1:27:11:b1:c6:7c:0a:be:3e:31:
                    7a:fd:8f:97:53:fd:cc:56:07:8b:5c:90:8a:22:57:
                    4f:ce:51:a4:c6:3e:eb:c1:46:45:50:d4:a0:2b:98:
                    94:a8:d0:18:f5:46:3d:e4:b2:2c:ab:c7:fb:ca:15:
                    6b:c8:e5:61:22:0d:26:d6:58:21:8b:7a:f0:98:45:
                    9b:cd:ce:2f:0e:87:a1:60:7a:5b:ed:ef:1a:65:a8:
                    1a:71:21:6b:ca:27:db:03:63:25:c4:be:da:3d:1a:
                    b8:bb:86:cf:37:e0:de:41:ca:45:90:1e:fb:69:8f:
                    a3:da:cd:d5:f7:b2:d0:51:c7:0c:05:f1:e0:c6:24:
                    81:1b:d1:48:06:54:7c:9b:c2:93:94:67:ae:5b:40:
                    52:41:f1:46:26:58:27:10:ee:9a:da:f7:af:62:d3:
                    b4:d9:0c:0e:fd:1a:14:b3:4b:38:de:fd:fa:a1:62:
                    b9:ad:ee:02:e6:4a:18:83:b3:36:6a:e1:75:f4:74:
                    c9:b4:53:84:a5:a8:4f:33:4a:2b:c1:b9:c5:bf:b9:
                    b4:4b:d4:02:1e:2a:38:fe:77:51:52:f8:ae:bb:aa:
                    ad:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D1:30:D6:30:D9:D3:B7:B5:34:92:8D:16:28:69:C1:68:EA:40:B1
            X509v3 Authority Key Identifier:
                keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:15:b4:36:5c:e0:84:c8:86:55:17:71:e9:86:70:97:78:45:
         5e:6b:ae:51:c9:33:15:98:6f:82:e8:5c:2b:93:e7:ff:7c:2c:
         95:a0:7f:e8:cc:f2:9c:d1:eb:58:f5:f9:f3:db:f6:b6:3b:bc:
         b7:35:63:f7:18:bd:c8:14:fa:cf:e0:7f:a4:4f:fe:ce:61:b4:
         d8:81:bd:8b:3e:7f:1e:47:24:00:c2:83:03:90:ef:93:44:05:
         9a:14:07:48:4c:96:16:f6:f4:c0:0e:90:03:da:95:79:bf:dd:
         f2:d5:8f:2b:b8:70:d8:14:85:24:7e:75:e7:af:db:65:7c:58:
         03:2e:62:6c:d9:b4:96:06:27:05:06:1d:20:0d:10:a3:ea:ca:
         da:da:0f:ed:64:22:a6:7d:42:41:0d:81:7d:af:e4:78:a7:2e:
         18:3c:61:eb:66:c4:fe:cd:e2:d8:80:35:11:96:cd:5d:fe:1a:
         cf:03:d3:5e:24:85:3e:99:4b:65:7f:fd:59:7c:63:eb:8b:71:
         a8:86:00:3c:50:9c:e0:75:82:a4:ef:a8:be:f2:4d:b9:ff:fa:
         b9:b3:73:97:df:e1:54:1c:15:ad:b5:01:56:6b:38:bf:e1:50:
         da:66:64:1c:5f:12:9c:1e:cb:c9:9b:26:8a:c4:09:28:f2:97:
         97:5b:d7:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoMBjH0BHl5EQWqTl0+H+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjhjOTk5YjMwY2UyNDhlNmM0NjhjNzg0ZDY0ZDcyZjk2
M2U5MzgwHhcNMjUwOTA3MTAwMjQxWhcNMjUwOTA4MTAwMjQxWjAzMTEwLwYDVQQD
EyhjZWQxMzBkNjMwZDlkM2I3YjUzNDkyOGQxNjI4NjljMTY4ZWE0MGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n2BFmcJ/MNr6vvDH2hP/jwSGiDv
8fPpooMzjECMsUkAt+EnEbHGfAq+PjF6/Y+XU/3MVgeLXJCKIldPzlGkxj7rwUZF
UNSgK5iUqNAY9UY95LIsq8f7yhVryOVhIg0m1lghi3rwmEWbzc4vDoehYHpb7e8a
ZagacSFryifbA2MlxL7aPRq4u4bPN+DeQcpFkB77aY+j2s3V97LQUccMBfHgxiSB
G9FIBlR8m8KTlGeuW0BSQfFGJlgnEO6a2vevYtO02QwO/RoUs0s43v36oWK5re4C
5koYg7M2auF19HTJtFOEpahPM0orwbnFv7m0S9QCHio4/ndRUviuu6qtAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7RMNYw2dO3tTSSjRYoacFo6kCxMB8GA1UdIwQY
MBaAFCP4yZmzDOJI5sRox4TWTXL5Y+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9qSm1iTU00a2pteEdqSGhOWk5jdmxqNlRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84NTMyMTgtYWM2ZS00ZjljLWE5NTkt
M2RmNTQ5YTA2ZDViLzEvSV9qSm1iTU00a2pteEdqSGhOWk5jdmxqNlRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84NTMyMTgtYWM2ZS00ZjljLWE5NTktM2RmNTQ5YTA2ZDVi
LzEvSV9qSm1iTU00a2pteEdqSGhOWk5jdmxqNlRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxW0Nlzg
hMiGVRdx6YZwl3hFXmuuUckzFZhvguhcK5Pn/3wslaB/6MzynNHrWPX589v2tju8
tzVj9xi9yBT6z+B/pE/+zmG02IG9iz5/HkckAMKDA5Dvk0QFmhQHSEyWFvb0wA6Q
A9qVeb/d8tWPK7hw2BSFJH5156/bZXxYAy5ibNm0lgYnBQYdIA0Qo+rK2toP7WQi
pn1CQQ2Bfa/keKcuGDxh62bE/s3i2IA1EZbNXf4azwPTXiSFPplLZX/9WXxj64tx
qIYAPFCc4HWCpO+ovvJNuf/6ubNzl9/hVBwVrbUBVms4v+FQ2mZkHF8SnB7LyZsm
isQJKPKXl1vXfQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:04:39 2025 by rpki-client