Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
File:                     G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json)
Hash identifier:          osUxwP0dI0GnDT9DvFLk5axh4TS8RM1aWyfthXo7buc=
Subject key identifier:   4B:BB:0A:EE:1C:C2:B8:AB:96:0B:73:FE:55:69:22:3A:A4:69:BC:B4
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Certificate issuer:       /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial:       0198D4740B139BCCBBC3703EB0DD1829D299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
Manifest number:          159F
Signing time:             Sat 23 Aug 2025 01:03:51 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:51 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:51 +0000
Files and hashes:         1: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: P3x0qUDbXnnvtWo6HM4SuKX36YFUp4xliZWGFxomKuY=)
                          2: tpcLfnSFe1LhX4JafoXime7wXxw.roa (hash: 5bEgNy5LIfp1SJAYM4F8oQrbGx7UDr0Zn6gyPZH4W9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:0b:13:9b:cc:bb:c3:70:3e:b0:dd:18:29:d2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
        Validity
            Not Before: Aug 23 01:03:51 2025 GMT
            Not After : Aug 24 01:03:51 2025 GMT
        Subject: CN=4bbb0aee1cc2b8ab960b73fe5569223aa469bcb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:75:f0:04:59:8b:08:c5:a3:17:79:a3:df:e2:
                    84:4e:71:72:e4:1b:4a:c9:62:f2:e2:d2:4e:66:bd:
                    65:14:dc:de:40:bf:45:3c:f4:e6:c8:d8:62:80:d2:
                    d5:7f:b6:7d:97:ba:11:1b:a5:5a:f0:8a:94:a7:3a:
                    81:32:d1:52:96:6c:01:68:75:78:3a:0b:4d:33:fd:
                    d3:43:5e:b6:38:1b:94:aa:ea:42:d3:7f:cb:83:79:
                    96:4b:dd:63:10:93:5f:d1:45:c7:e4:6b:04:de:56:
                    4b:cd:23:8d:e4:09:63:06:52:c8:69:e2:88:8e:c4:
                    1e:6b:03:4c:17:d8:ad:9f:42:0e:16:0f:8a:5e:8d:
                    30:2a:53:78:3a:6c:91:5d:54:48:dc:22:e4:98:7b:
                    fa:f3:47:c8:c3:34:79:fa:cf:02:56:44:5b:f0:31:
                    8a:35:bd:1b:66:f7:54:37:61:86:77:2a:25:0a:dc:
                    e9:47:a3:2e:b7:92:fa:4b:d2:a9:4e:92:4a:72:bb:
                    e6:d9:14:81:ef:7a:2a:d5:46:22:90:e7:b1:a1:39:
                    2b:db:44:f4:86:e6:b6:c4:1e:3d:bd:e2:c9:22:16:
                    3e:64:a9:d8:af:61:a2:6d:df:d1:2f:96:b7:45:80:
                    f6:6f:58:fa:77:c5:50:4d:23:9b:fa:41:49:7b:fa:
                    da:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:0A:EE:1C:C2:B8:AB:96:0B:73:FE:55:69:22:3A:A4:69:BC:B4
            X509v3 Authority Key Identifier:
                keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:66:32:5e:c1:ab:1c:c7:73:51:d0:3d:1c:45:3f:14:cd:6f:
         ec:77:af:c5:72:e0:17:53:d2:ae:09:8d:7a:6f:12:c9:c7:fb:
         a5:8d:65:43:79:c8:ab:f3:91:95:2d:66:f2:81:b1:88:41:9c:
         a6:97:7c:ee:80:fc:73:18:c1:1d:f2:b3:16:cd:c9:64:ce:6b:
         1a:1d:85:c1:0c:d2:ba:cf:d2:e8:f4:64:7e:7b:21:30:0a:00:
         3d:47:e6:c6:46:1f:45:57:8e:80:fb:5b:69:06:73:e9:c5:95:
         2c:c6:e6:e1:e5:fa:ff:c2:a8:ed:ab:de:d5:ee:cc:84:fe:91:
         48:31:18:ec:36:86:00:3f:bd:44:fb:40:cb:a0:a7:f5:48:68:
         ed:70:4b:3a:f4:e0:54:11:bb:cf:96:d8:28:6c:be:4b:55:0f:
         9e:99:b9:7c:9b:ff:f1:1d:6d:90:74:e9:42:93:bc:61:33:da:
         ea:ba:ac:38:8c:3e:43:55:cd:4b:63:51:37:1a:aa:f8:6b:64:
         85:c2:19:b9:30:88:59:5a:b9:45:19:34:17:2b:70:46:fd:60:
         92:10:3e:0f:06:6d:61:e4:80:c7:ff:b1:72:8b:1a:a4:4d:41:
         bc:0e:8d:1d:94:ce:21:5c:74:9b:34:05:44:ab:80:a7:81:5e:
         3d:c3:30:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdAsTm8y7w3A+sN0YKdKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNTM0ZDQ3YWQ4ZGI1ODk0YTVmYzkzNDJlNDU1OGY5NGU0
ZjE3ZjEwHhcNMjUwODIzMDEwMzUxWhcNMjUwODI0MDEwMzUxWjAzMTEwLwYDVQQD
Eyg0YmJiMGFlZTFjYzJiOGFiOTYwYjczZmU1NTY5MjIzYWE0NjliY2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHXwBFmLCMWjF3mj3+KETnFy5BtK
yWLy4tJOZr1lFNzeQL9FPPTmyNhigNLVf7Z9l7oRG6Va8IqUpzqBMtFSlmwBaHV4
OgtNM/3TQ162OBuUqupC03/Lg3mWS91jEJNf0UXH5GsE3lZLzSON5AljBlLIaeKI
jsQeawNMF9itn0IOFg+KXo0wKlN4OmyRXVRI3CLkmHv680fIwzR5+s8CVkRb8DGK
Nb0bZvdUN2GGdyolCtzpR6Mut5L6S9KpTpJKcrvm2RSB73oq1UYikOexoTkr20T0
hua2xB49veLJIhY+ZKnYr2Gibd/RL5a3RYD2b1j6d8VQTSOb+kFJe/raXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEu7Cu4cwrirlgtz/lVpIjqkaby0MB8GA1UdIwQY
MBaAFBtTTUetjbWJSl/JNC5FWPlOTxfxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzFOTlI2Mk50WWxLWDhrMExrVlktVTVQRl9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YjQwMjMtYWRlZi00ZTRkLThjZjYt
MzI2Njk3MzdjNTE3LzEvRzFOTlI2Mk50WWxLWDhrMExrVlktVTVQRl9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82YjQwMjMtYWRlZi00ZTRkLThjZjYtMzI2Njk3MzdjNTE3
LzEvRzFOTlI2Mk50WWxLWDhrMExrVlktVTVQRl9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGYyXsGr
HMdzUdA9HEU/FM1v7HevxXLgF1PSrgmNem8Sycf7pY1lQ3nIq/ORlS1m8oGxiEGc
ppd87oD8cxjBHfKzFs3JZM5rGh2FwQzSus/S6PRkfnshMAoAPUfmxkYfRVeOgPtb
aQZz6cWVLMbm4eX6/8Ko7ave1e7MhP6RSDEY7DaGAD+9RPtAy6Cn9Uho7XBLOvTg
VBG7z5bYKGy+S1UPnpm5fJv/8R1tkHTpQpO8YTPa6rqsOIw+Q1XNS2NRNxqq+Gtk
hcIZuTCIWVq5RRk0FytwRv1gkhA+DwZtYeSAx/+xcosapE1BvA6NHZTOIVx0mzQF
RKuAp4FePcMwHQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:52 2025 by rpki-client