Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File:                     CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier:          L5+ZxKCRH6MHp7+df49N1vHFfo04rJ08Tlb1iCpVSEA=
Subject key identifier:   54:48:A0:2B:87:9F:41:FC:2D:2F:ED:E0:C0:03:3B:5D:83:0E:2F:AB
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer:       /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial:       0198D705A8FFDD588E6DF403D0E188A59F1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number:          1604
Signing time:             Sat 23 Aug 2025 13:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:09 +0000
Files and hashes:         1: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: /BCC2kOPFeLpb8FV2u77r6ncgK4LqYWXhTGqVlgk4iY=)
                          2: Wy1LhCK9kxP-C2UiE5R2K8JtffM.roa (hash: DYS7fnBaD9Os9bSnRtbqX/rsXfSVI5HQGNbOlzCHNGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:a8:ff:dd:58:8e:6d:f4:03:d0:e1:88:a5:9f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
        Validity
            Not Before: Aug 23 13:02:09 2025 GMT
            Not After : Aug 24 13:02:09 2025 GMT
        Subject: CN=5448a02b879f41fc2d2fede0c0033b5d830e2fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:cb:68:88:5a:89:37:9c:85:6b:98:9e:e5:
                    dc:3b:65:d5:d4:39:58:0d:44:c3:25:1f:25:6f:c9:
                    12:59:98:f4:29:f9:80:f6:a2:07:c7:6d:66:0c:bd:
                    8d:8b:8a:92:b8:21:81:cb:9b:cd:2d:9a:d0:57:0c:
                    c1:60:4d:d9:44:ed:c8:83:ec:b1:b8:b1:2c:a0:a0:
                    85:ac:98:75:a9:01:1a:46:d4:87:bb:08:cd:43:19:
                    33:f9:06:ff:ef:f3:49:3c:c2:47:f6:72:72:ea:ed:
                    bd:1e:40:2e:6d:90:00:3f:b1:c9:fb:f3:b6:4a:ef:
                    ba:55:9d:5b:35:7b:ba:4d:cb:30:d8:4a:d2:e3:82:
                    0f:de:18:87:28:c4:61:dc:47:4d:37:3d:cf:1e:48:
                    b4:65:92:4a:00:ff:35:c6:44:08:66:41:4c:c8:76:
                    45:74:bf:1f:bd:3e:e0:b4:13:d8:3a:8d:b1:1f:50:
                    dd:2c:0e:2c:59:af:6d:d2:e8:6e:ba:0e:3d:ef:c5:
                    f9:f6:10:6f:4d:d2:e0:bd:a6:6a:15:21:60:3f:ae:
                    fb:57:e6:5f:cd:77:1c:3d:61:33:01:5f:08:0c:31:
                    92:f8:f3:08:ac:47:94:b1:b1:f8:36:47:a4:75:a1:
                    1b:38:65:d7:61:9f:48:2d:ca:21:7d:78:9a:4c:5d:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:48:A0:2B:87:9F:41:FC:2D:2F:ED:E0:C0:03:3B:5D:83:0E:2F:AB
            X509v3 Authority Key Identifier:
                keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9a:47:5e:53:ce:3d:90:85:f3:c6:60:6b:25:25:d5:fd:b1:
         6c:ea:1c:59:83:49:61:4a:76:d0:33:f7:03:26:d3:1c:be:50:
         10:41:d7:6a:28:83:57:17:b6:41:ad:69:53:62:6d:9e:76:6a:
         10:a5:9b:f6:8d:5c:33:e5:9d:a3:b1:02:67:f7:dc:4b:0d:97:
         9e:16:6f:a8:ad:b1:e3:31:61:52:19:ef:e6:9b:60:f8:bb:bc:
         b9:68:a9:1f:2b:06:5a:86:ef:97:78:e9:b3:4e:e2:b0:58:e6:
         15:14:39:79:69:7a:e6:49:0d:2f:f2:2e:b4:54:19:55:eb:e5:
         e7:ac:b0:36:47:87:3d:ed:60:5e:f6:69:48:fe:f8:dc:99:7a:
         71:25:9e:b1:75:9a:bc:ba:20:fd:3c:f3:28:2a:fd:e2:d7:db:
         65:8b:77:55:ef:24:42:f8:d4:3c:90:e1:fd:c6:14:db:92:01:
         90:a9:a7:af:62:cf:8a:c3:33:35:8c:07:7a:ac:79:e8:ad:71:
         10:03:f1:e2:e7:1c:96:ed:52:b2:7f:40:ff:0c:d2:87:ca:2d:
         c7:14:02:09:b0:a7:5c:32:ac:5c:b0:be:fd:7f:2a:6c:3a:a9:
         f2:93:00:e8:f8:e0:ca:69:2b:36:62:cf:73:2e:d3:b4:01:8b:
         59:aa:49:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBaj/3ViObfQD0OGIpZ8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGE3MDJmNjc3ZjMzNmQ5YjNlMzZjMzg0ZWJjOGM5ZmQ4
ODU5ZjQwHhcNMjUwODIzMTMwMjA5WhcNMjUwODI0MTMwMjA5WjAzMTEwLwYDVQQD
Eyg1NDQ4YTAyYjg3OWY0MWZjMmQyZmVkZTBjMDAzM2I1ZDgzMGUyZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLPLaIhaiTechWuYnuXcO2XV1DlY
DUTDJR8lb8kSWZj0KfmA9qIHx21mDL2Ni4qSuCGBy5vNLZrQVwzBYE3ZRO3Ig+yx
uLEsoKCFrJh1qQEaRtSHuwjNQxkz+Qb/7/NJPMJH9nJy6u29HkAubZAAP7HJ+/O2
Su+6VZ1bNXu6Tcsw2ErS44IP3hiHKMRh3EdNNz3PHki0ZZJKAP81xkQIZkFMyHZF
dL8fvT7gtBPYOo2xH1DdLA4sWa9t0uhuug4978X59hBvTdLgvaZqFSFgP677V+Zf
zXccPWEzAV8IDDGS+PMIrEeUsbH4NkekdaEbOGXXYZ9ILcohfXiaTF0EDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRIoCuHn0H8LS/t4MADO12DDi+rMB8GA1UdIwQY
MBaAFApKcC9nfzNtmz42w4TryMn9iFn0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2twd0wyZF9NMjJiUGpiRGhPdkl5ZjJJV2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kYTViMzItMjBhNy00ZTBhLWI4MzQt
ZWYzMTcxNTYxMWFhLzEvQ2twd0wyZF9NMjJiUGpiRGhPdkl5ZjJJV2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kYTViMzItMjBhNy00ZTBhLWI4MzQtZWYzMTcxNTYxMWFh
LzEvQ2twd0wyZF9NMjJiUGpiRGhPdkl5ZjJJV2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJpHXlPO
PZCF88ZgayUl1f2xbOocWYNJYUp20DP3AybTHL5QEEHXaiiDVxe2Qa1pU2JtnnZq
EKWb9o1cM+Wdo7ECZ/fcSw2XnhZvqK2x4zFhUhnv5ptg+Lu8uWipHysGWobvl3jp
s07isFjmFRQ5eWl65kkNL/IutFQZVevl56ywNkeHPe1gXvZpSP743Jl6cSWesXWa
vLog/TzzKCr94tfbZYt3Ve8kQvjUPJDh/cYU25IBkKmnr2LPisMzNYwHeqx56K1x
EAPx4ucclu1Ssn9A/wzSh8otxxQCCbCnXDKsXLC+/X8qbDqp8pMA6PjgymkrNmLP
cy7TtAGLWapJEQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:49:13 2025 by rpki-client