Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File:                     pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier:          zSczlqDmqY/776kwvV1mIlRPflYGgo8L5fKD1yGmar0=
Subject key identifier:   28:EF:56:C2:93:FF:5F:4A:30:E9:7A:1F:74:ED:4D:6D:77:DC:8B:14
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer:       /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial:       0198D4DFF975D8C9DF1A1EC7B307BB9444B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number:          0F5E
Signing time:             Sat 23 Aug 2025 03:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:44 +0000
Files and hashes:         1: FMd4ncvFc0vMJ63ZqH_KhMZqr00.roa (hash: GAIpznWNN7ttQuk7XL5JgmFjADI10rnA9JaXxJOak4g=)
                          2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: 3/gNFz79LAsBPNl10FB+qVUMMui9BzxejjgVa4aMQQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:f9:75:d8:c9:df:1a:1e:c7:b3:07:bb:94:44:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
        Validity
            Not Before: Aug 23 03:01:44 2025 GMT
            Not After : Aug 24 03:01:44 2025 GMT
        Subject: CN=28ef56c293ff5f4a30e97a1f74ed4d6d77dc8b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ac:ed:e7:ec:c7:ca:67:8a:8f:84:11:1f:98:
                    81:76:b7:b1:d2:8b:8c:f2:f1:e5:d6:ec:c0:88:7b:
                    fe:cf:24:94:73:5d:50:1e:76:f2:04:c0:d2:21:39:
                    0b:5f:9e:c7:45:00:08:8c:c5:d6:90:5e:dd:31:84:
                    2c:18:05:44:76:67:37:a7:7e:cc:30:f3:21:1b:6b:
                    a7:44:3b:99:9f:79:51:78:bb:92:ae:43:6e:42:00:
                    74:86:5b:78:75:5f:b3:fb:21:a8:28:da:75:80:7c:
                    d9:62:d6:e4:6c:db:3b:c3:ea:65:43:ff:3d:91:bc:
                    47:3a:67:bd:8b:98:e4:e3:af:ec:1d:ea:db:7c:d5:
                    a9:db:ed:47:fd:d8:71:45:e7:f0:d4:bc:28:55:e3:
                    05:b4:39:76:df:73:9c:99:7a:84:39:eb:cf:2a:bf:
                    d1:4c:53:df:03:21:4f:fb:ed:b9:f5:aa:f3:6f:bb:
                    ef:44:53:84:74:9c:f7:d8:0f:e5:8d:11:44:67:c7:
                    c3:7b:c5:51:da:65:d3:30:e5:7e:38:82:65:d0:ce:
                    40:18:d6:3e:37:2f:60:a1:96:1f:20:22:3e:03:d9:
                    3c:e0:f5:e6:07:fc:12:47:33:d2:c9:0a:f1:d6:8e:
                    08:83:18:42:80:b3:9b:ed:ff:f6:dd:d1:3b:51:0f:
                    e2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EF:56:C2:93:FF:5F:4A:30:E9:7A:1F:74:ED:4D:6D:77:DC:8B:14
            X509v3 Authority Key Identifier:
                keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3c:0f:7d:57:b7:30:21:3e:6d:34:74:e8:56:e0:52:e2:7a:
         10:f3:67:f1:a4:7f:ed:6b:fb:cf:e2:65:85:32:2e:26:e4:dc:
         04:64:b6:e5:55:9a:06:9b:d5:af:80:78:c9:89:7c:2f:53:3f:
         7c:75:19:81:10:43:6c:fa:56:f5:e6:71:c0:34:1f:b6:cb:74:
         07:6e:06:a6:2a:5d:c8:3b:5b:f2:c4:6b:0d:a7:91:96:ef:e6:
         99:dc:4c:b3:99:83:4b:4d:ee:a5:49:ff:f1:e3:39:73:86:cd:
         32:5a:9b:fd:d8:21:6c:6a:cb:21:92:dc:25:d0:c9:5b:99:40:
         a2:3e:b7:b7:eb:3b:7f:22:2a:bf:4b:e8:fc:88:99:3c:48:aa:
         6a:94:22:88:f7:cb:67:6f:a2:32:33:f1:18:b3:3c:a5:fd:ab:
         6d:43:27:af:11:bb:b1:50:db:57:0f:8d:ff:c1:07:26:30:92:
         8b:84:f6:e6:b2:80:c2:b9:34:03:c6:64:f4:65:71:c6:fa:a6:
         1c:9e:6e:5d:51:8d:34:ac:e4:5e:e2:23:ff:f3:d8:c8:19:d1:
         a1:6b:b5:bb:68:65:22:3a:77:83:87:8d:19:bc:2f:10:9a:a8:
         99:82:9f:00:3e:94:1d:0c:47:43:b9:de:6e:6b:35:fd:b2:cd:
         ad:b9:3c:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/l12MnfGh7Hswe7lESyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTI5ZmNkNjFkYzY5ZGNjZmJlMDFkNWZmMDAzNWI0MWFj
OTUyNjAwHhcNMjUwODIzMDMwMTQ0WhcNMjUwODI0MDMwMTQ0WjAzMTEwLwYDVQQD
EygyOGVmNTZjMjkzZmY1ZjRhMzBlOTdhMWY3NGVkNGQ2ZDc3ZGM4YjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Kzt5+zHymeKj4QRH5iBdrex0ouM
8vHl1uzAiHv+zySUc11QHnbyBMDSITkLX57HRQAIjMXWkF7dMYQsGAVEdmc3p37M
MPMhG2unRDuZn3lReLuSrkNuQgB0hlt4dV+z+yGoKNp1gHzZYtbkbNs7w+plQ/89
kbxHOme9i5jk46/sHerbfNWp2+1H/dhxRefw1LwoVeMFtDl233OcmXqEOevPKr/R
TFPfAyFP++259arzb7vvRFOEdJz32A/ljRFEZ8fDe8VR2mXTMOV+OIJl0M5AGNY+
Ny9goZYfICI+A9k84PXmB/wSRzPSyQrx1o4IgxhCgLOb7f/23dE7UQ/iGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjvVsKT/19KMOl6H3TtTW133IsUMB8GA1UdIwQY
MBaAFKSSn81h3Gncz74B1f8ANbQayVJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUt
ZWJhOWM1Y2IzMmQwLzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUtZWJhOWM1Y2IzMmQw
LzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITwPfVe3
MCE+bTR06FbgUuJ6EPNn8aR/7Wv7z+JlhTIuJuTcBGS25VWaBpvVr4B4yYl8L1M/
fHUZgRBDbPpW9eZxwDQftst0B24GpipdyDtb8sRrDaeRlu/mmdxMs5mDS03upUn/
8eM5c4bNMlqb/dghbGrLIZLcJdDJW5lAoj63t+s7fyIqv0vo/IiZPEiqapQiiPfL
Z2+iMjPxGLM8pf2rbUMnrxG7sVDbVw+N/8EHJjCSi4T25rKAwrk0A8Zk9GVxxvqm
HJ5uXVGNNKzkXuIj//PYyBnRoWu1u2hlIjp3g4eNGbwvEJqomYKfAD6UHQxHQ7ne
bms1/bLNrbk8RA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:11 2025 by rpki-client