Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
File:                     1EdMHAbL_elGFNZcfQX2FKbiOZg.mft (raw, json)
Hash identifier:          k2xNfEu/ZXsEnuvk1y8ZsiZFVRgTKZMDM6voN5KybQw=
Subject key identifier:   C5:BB:31:50:E0:15:0B:F9:5B:21:62:61:09:02:4D:8D:52:3A:2B:68
Authority key identifier: D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98
Certificate issuer:       /CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
Certificate serial:       0198D4A7EBCF03004DA88DDD842D1AFD936E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 02:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:31 +0000
Files and hashes:         1: 1EdMHAbL_elGFNZcfQX2FKbiOZg.crl (hash: PyxY0wvNqvapG51rO+MJvI4qR2AtiYv+tZd24PTxAX0=)
                          2: vHVqwO_nqH9ZrYztprb6WC9Q2ng.roa (hash: hIMtMavbO55tW6Byt6lllDo5443jCsG0h73OMyjZ93A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:eb:cf:03:00:4d:a8:8d:dd:84:2d:1a:fd:93:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
        Validity
            Not Before: Aug 23 02:00:31 2025 GMT
            Not After : Aug 24 02:00:31 2025 GMT
        Subject: CN=c5bb3150e0150bf95b21626109024d8d523a2b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:f2:bf:fb:c3:26:43:89:d7:fc:05:ce:b3:
                    28:19:d4:de:cc:06:1d:76:34:2a:72:54:95:bb:23:
                    d4:91:03:57:47:2b:ba:fd:d8:ac:56:97:42:b1:40:
                    27:9f:88:e0:65:f9:8a:ed:ca:e4:08:1b:86:33:94:
                    3a:f1:82:31:59:86:8d:c4:2b:47:73:8f:31:c7:64:
                    b4:6b:db:a2:4d:6a:31:4f:12:f2:34:be:77:8f:94:
                    e6:f3:b5:bf:f9:d8:69:64:15:12:c0:38:f9:85:ac:
                    cb:99:21:f5:6b:75:a5:fa:01:5a:b9:77:58:06:92:
                    1d:5e:57:08:fc:0d:27:c4:52:9f:4c:ec:94:9b:dc:
                    35:5f:97:c7:9b:04:77:99:4f:ff:58:a5:1e:53:34:
                    8d:db:c6:f2:00:2d:fe:f3:36:97:a4:d0:32:ed:00:
                    f9:47:c3:e9:ba:ec:b7:f7:95:16:d4:ad:28:39:35:
                    3a:bf:8b:9c:25:40:fc:cb:23:a6:ba:3b:05:4c:2e:
                    5b:07:0a:8e:da:6a:59:95:1d:82:ed:7e:5f:91:32:
                    82:18:a0:78:cf:fb:63:37:59:44:03:af:ac:8c:e1:
                    f0:dc:83:5b:83:7a:3f:dd:79:ea:d0:ea:1b:ac:12:
                    7b:31:c7:2a:26:65:3a:29:18:7a:4c:aa:fc:b9:5c:
                    20:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BB:31:50:E0:15:0B:F9:5B:21:62:61:09:02:4D:8D:52:3A:2B:68
            X509v3 Authority Key Identifier:
                keyid:D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b8:e2:e4:2d:30:08:56:5b:d2:76:bf:bf:2f:21:81:f3:ce:
         42:f6:c0:f1:54:df:85:b6:90:81:ce:26:1e:52:7c:1c:75:a3:
         88:c6:35:b1:4f:9e:d6:a3:2d:5e:69:76:fd:b8:da:ce:a8:8c:
         ab:40:69:91:6d:c3:fb:e7:f3:00:d1:4e:b3:aa:ee:fd:b0:41:
         c7:a4:b5:e0:b7:2c:68:b9:82:3a:82:98:24:e0:15:b2:41:08:
         76:f4:07:13:aa:a2:89:a4:c2:f2:28:fa:b3:8e:8f:c3:c4:e0:
         e4:28:6f:b8:d0:77:61:b9:04:59:a4:ca:f4:6e:87:0f:a3:20:
         5c:08:97:17:c2:b6:3b:14:f0:5a:68:05:01:48:79:f6:08:d3:
         06:48:e7:d2:a5:f0:ec:26:bc:e1:87:c1:5f:fe:ea:f8:77:85:
         6e:6a:7c:11:09:b1:58:b8:0a:79:3e:40:67:e8:ac:14:10:d3:
         95:51:7d:44:f9:e2:d0:53:ef:c9:33:6b:1c:c3:98:6a:a2:2d:
         a4:42:cc:b9:52:c5:e7:ec:a0:a0:1e:57:a9:9e:56:65:64:bb:
         68:ae:e9:27:b9:62:cd:24:2a:bf:46:ce:1d:b8:c5:a4:9c:c8:
         d3:6c:41:ac:cc:d1:ee:ed:4a:c2:d9:5b:1a:ad:1b:7a:18:4e:
         95:a0:2b:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp+vPAwBNqI3dhC0a/ZNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDc0YzFjMDZjYmZkZTk0NjE0ZDY1YzdkMDVmNjE0YTZl
MjM5OTgwHhcNMjUwODIzMDIwMDMxWhcNMjUwODI0MDIwMDMxWjAzMTEwLwYDVQQD
EyhjNWJiMzE1MGUwMTUwYmY5NWIyMTYyNjEwOTAyNGQ4ZDUyM2EyYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlLyv/vDJkOJ1/wFzrMoGdTezAYd
djQqclSVuyPUkQNXRyu6/disVpdCsUAnn4jgZfmK7crkCBuGM5Q68YIxWYaNxCtH
c48xx2S0a9uiTWoxTxLyNL53j5Tm87W/+dhpZBUSwDj5hazLmSH1a3Wl+gFauXdY
BpIdXlcI/A0nxFKfTOyUm9w1X5fHmwR3mU//WKUeUzSN28byAC3+8zaXpNAy7QD5
R8Ppuuy395UW1K0oOTU6v4ucJUD8yyOmujsFTC5bBwqO2mpZlR2C7X5fkTKCGKB4
z/tjN1lEA6+sjOHw3INbg3o/3Xnq0OobrBJ7MccqJmU6KRh6TKr8uVwgTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMW7MVDgFQv5WyFiYQkCTY1SOitoMB8GA1UdIwQY
MBaAFNRHTBwGy/3pRhTWXH0F9hSm4jmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVkTUhBYkxfZWxHRk5aY2ZRWDJGS2JpT1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kNzU3NTktOGRjYi00NTMyLThiZmUt
NWI2ODhhY2RiNjc2LzEvMUVkTUhBYkxfZWxHRk5aY2ZRWDJGS2JpT1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9kNzU3NTktOGRjYi00NTMyLThiZmUtNWI2ODhhY2RiNjc2
LzEvMUVkTUhBYkxfZWxHRk5aY2ZRWDJGS2JpT1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibji5C0w
CFZb0na/vy8hgfPOQvbA8VTfhbaQgc4mHlJ8HHWjiMY1sU+e1qMtXml2/bjazqiM
q0BpkW3D++fzANFOs6ru/bBBx6S14LcsaLmCOoKYJOAVskEIdvQHE6qiiaTC8ij6
s46Pw8Tg5ChvuNB3YbkEWaTK9G6HD6MgXAiXF8K2OxTwWmgFAUh59gjTBkjn0qXw
7Ca84YfBX/7q+HeFbmp8EQmxWLgKeT5AZ+isFBDTlVF9RPni0FPvyTNrHMOYaqIt
pELMuVLF5+ygoB5XqZ5WZWS7aK7pJ7lizSQqv0bOHbjFpJzI02xBrMzR7u1Kwtlb
Gq0behhOlaArCQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:34 2025 by rpki-client