Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
File:                     61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json)
Hash identifier:          A9Ru/xePNfZYTJFnJ4pREMh97leoqdcBpDgcvK030Cw=
Subject key identifier:   1E:45:80:AC:6E:AA:53:E3:C7:38:00:1A:27:14:75:C6:35:BA:A8:9B
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       019961341BD55312116E40F4FD22809A800F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
Manifest number:          1028
Signing time:             Fri 19 Sep 2025 09:00:28 +0000
Manifest this update:     Fri 19 Sep 2025 09:00:28 +0000
Manifest next update:     Sat 20 Sep 2025 09:00:28 +0000
Files and hashes:         1: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: eLGLEsrl1Vr19oJhb7kFx5vOVPXwp6NI7sJe8SN5eT8=)
                          2: SR6wkW8Hts7xNoEht6ssGWpzEiE.roa (hash: FIqbSc69f7aOavTuhvVSEnbr7NE6WDUqN3239br8G4w=)
                          3: avVrdRPNFcMtwTGR2Zab9qIvEIs.roa (hash: B8YMI/WajLnQclAWhZ2JVb5JaRJxPn4UkZ5gdPRrKXc=)
                          4: mARrkrwsqa1zI7AhCz1jPRrG0vo.roa (hash: C+xoqI6HQRyi4NnP7UQyN6SMsDYwAgRtq1ezQKEfRkk=)
                          5: rZbO86eytPEeDbetTKr54j6r3Z8.roa (hash: 5exZuL7jEPQWQmctjdNF8XDDonlOlxCAx0iHOR3SFFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:61:34:1b:d5:53:12:11:6e:40:f4:fd:22:80:9a:80:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Sep 19 09:00:28 2025 GMT
            Not After : Sep 20 09:00:28 2025 GMT
        Subject: CN=1e4580ac6eaa53e3c738001a271475c635baa89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:f1:cc:1b:3c:f8:7c:bb:48:a6:3f:47:d4:
                    b9:af:40:c6:b7:44:3d:1c:c4:b5:0f:4a:e0:e5:9c:
                    f0:78:e3:41:4f:d2:d4:2e:39:4c:fe:e6:6c:02:82:
                    f6:8e:a6:5e:f7:ab:19:ad:7e:e7:64:5e:99:35:65:
                    cd:ba:22:e1:a8:e0:da:fe:29:f1:31:b1:87:55:ee:
                    1e:71:b3:48:b8:e7:6d:98:f1:09:e1:36:89:89:7e:
                    dd:ca:02:ff:bb:5f:3f:db:3c:d1:15:54:ac:fe:46:
                    34:22:b6:63:58:97:f3:1a:6b:83:f7:14:2d:06:2c:
                    bb:eb:31:17:10:f1:3a:8b:37:f0:f8:b4:ba:b4:0b:
                    91:2e:c3:13:fc:20:e7:42:23:48:1a:d0:81:da:a2:
                    ae:27:98:4c:a8:e3:dc:b9:00:22:05:2a:47:5c:7b:
                    c2:42:b9:5e:4b:4c:12:50:fa:8c:7a:0d:d5:39:2c:
                    51:b6:64:c2:dd:90:b8:43:14:12:67:d0:d4:3f:67:
                    be:7e:22:a5:35:f0:ca:12:8c:af:17:ce:98:de:3a:
                    cb:94:f2:09:4d:fc:96:8f:81:f1:58:e9:20:40:60:
                    f4:ab:3f:72:ba:3d:f1:bb:4c:5a:4b:2e:0a:6d:d5:
                    06:95:ff:ea:35:f6:2d:13:0c:90:83:c9:18:78:b4:
                    f1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:45:80:AC:6E:AA:53:E3:C7:38:00:1A:27:14:75:C6:35:BA:A8:9B
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:31:05:ec:51:8c:bf:b1:59:ce:fe:92:5c:c2:b4:b1:6b:3b:
         27:0b:77:59:56:43:d2:74:b6:df:cf:5b:1f:e7:9c:93:0f:35:
         b5:f1:ff:0b:8d:14:b9:db:39:56:d2:0d:dd:5b:83:22:69:0d:
         75:a2:a8:e4:0f:da:04:ed:f9:91:25:4e:63:57:6d:3d:28:e7:
         63:a9:e1:9d:11:47:8b:69:1a:9e:3a:76:93:d0:b8:cf:39:7b:
         fe:cd:7f:42:57:73:be:d4:17:b2:6e:df:ae:df:87:33:8c:21:
         0c:92:3e:8e:28:e8:0d:9f:9f:66:b6:45:f0:86:74:34:22:15:
         a7:85:69:16:0e:7b:2f:a5:72:43:0f:1a:6f:09:7a:53:16:48:
         dc:23:08:e3:6f:c5:1c:d3:29:36:da:d9:8b:ce:01:53:55:98:
         c8:3a:2f:3b:a6:2e:5e:59:60:04:a5:b1:ff:ae:62:f6:e1:ca:
         e7:fb:ee:be:f1:bb:b2:4a:36:32:b4:01:e1:f0:3e:6e:d5:e9:
         ff:e1:c6:9b:af:94:f1:c0:28:da:67:96:d6:7e:b4:c3:be:64:
         a8:ab:7d:ec:35:a1:0e:3d:85:3b:8b:08:d6:3f:06:86:0f:08:
         1c:46:88:e8:3d:72:03:b2:97:8f:9d:8e:61:69:2d:b0:bb:53:
         3b:05:1b:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlhNBvVUxIRbkD0/SKAmoAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTEzNTljOTk4OWI5NjNlOTU5NGMxOTI5YzgyMDM2N2Rl
MzIyZGQwHhcNMjUwOTE5MDkwMDI4WhcNMjUwOTIwMDkwMDI4WjAzMTEwLwYDVQQD
EygxZTQ1ODBhYzZlYWE1M2UzYzczODAwMWEyNzE0NzVjNjM1YmFhODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJvxzBs8+Hy7SKY/R9S5r0DGt0Q9
HMS1D0rg5ZzweONBT9LULjlM/uZsAoL2jqZe96sZrX7nZF6ZNWXNuiLhqODa/inx
MbGHVe4ecbNIuOdtmPEJ4TaJiX7dygL/u18/2zzRFVSs/kY0IrZjWJfzGmuD9xQt
Biy76zEXEPE6izfw+LS6tAuRLsMT/CDnQiNIGtCB2qKuJ5hMqOPcuQAiBSpHXHvC
QrleS0wSUPqMeg3VOSxRtmTC3ZC4QxQSZ9DUP2e+fiKlNfDKEoyvF86Y3jrLlPIJ
TfyWj4HxWOkgQGD0qz9yuj3xu0xaSy4KbdUGlf/qNfYtEwyQg8kYeLTx1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5FgKxuqlPjxzgAGicUdcY1uqibMB8GA1UdIwQY
MBaAFOtRNZyZiblj6VlMGSnIIDZ94yLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAt
NTlmYzczZDYwMzIyLzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAtNTlmYzczZDYwMzIy
LzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtjEF7FGM
v7FZzv6SXMK0sWs7Jwt3WVZD0nS2389bH+eckw81tfH/C40Uuds5VtIN3VuDImkN
daKo5A/aBO35kSVOY1dtPSjnY6nhnRFHi2kanjp2k9C4zzl7/s1/QldzvtQXsm7f
rt+HM4whDJI+jijoDZ+fZrZF8IZ0NCIVp4VpFg57L6VyQw8abwl6UxZI3CMI42/F
HNMpNtrZi84BU1WYyDovO6YuXllgBKWx/65i9uHK5/vuvvG7sko2MrQB4fA+btXp
/+HGm6+U8cAo2meW1n60w75kqKt97DWhDj2FO4sI1j8Ghg8IHEaI6D1yA7KXj52O
YWktsLtTOwUbcQ==
-----END CERTIFICATE-----
Generated at Fri Sep 19 17:00:41 2025 by rpki-client