Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
File:                     S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft (raw, json)
Hash identifier:          UXJ03jbH9Gnvz5GuLY5sgWtf8qsdASL1Pc+DJQc8RUQ=
Subject key identifier:   99:F1:E2:3B:36:FA:3B:9D:9B:BC:02:69:33:E6:86:B2:89:CB:21:E9
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Certificate issuer:       /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial:       0198D5835445A0631A824726790FE9CEADDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
Manifest number:          040F
Signing time:             Sat 23 Aug 2025 06:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:10 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:10 +0000
Files and hashes:         1: 0_z69Mp8Uq-H2QPlCa0CLWX2coU.roa (hash: wm+6P/OKtHhF/O/CkulyZkvoYkTpsb5odPnFIekRy3I=)
                          2: 38pIrQ1QnBg71pfob_zDIDUIiFQ.roa (hash: U9USjryy/F+R/DZGDivAyocf94409+iay7FO0stAHGw=)
                          3: GxjiQYL-iGOAVHNMg1TX24x4ygU.roa (hash: 4pz3qTPsLPKhzeVhImXnpiGMiT+ZWEpvQAca1AnIER4=)
                          4: S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl (hash: WPcJkEXZf1rn5oImxcMsOVapAgaQbaGRud/CE8Z9KN4=)
                          5: XMt-aoKNBYw2mRgLlCcfOfS37es.roa (hash: G7hUI9W+vjvJqWM1E6n7TXAiBwlaOz/lSk1JZkA8kgc=)
                          6: _Khf-n0vZfCAmh5Kz1BybwMWUtk.roa (hash: kt8gl4Nj76yRL5CdwZbXkVqwHK70gqMfG0Z0kpN+NYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:54:45:a0:63:1a:82:47:26:79:0f:e9:ce:ad:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
        Validity
            Not Before: Aug 23 06:00:10 2025 GMT
            Not After : Aug 24 06:00:10 2025 GMT
        Subject: CN=99f1e23b36fa3b9d9bbc026933e686b289cb21e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f9:32:b7:57:87:7a:d6:72:43:aa:06:b3:40:
                    7d:8b:dd:2f:a8:a2:bd:03:a6:39:48:ef:57:ee:33:
                    20:98:5f:1b:02:41:08:b6:fd:5d:08:d2:14:30:b3:
                    f6:81:71:11:81:3d:0e:73:c1:34:e0:2a:1a:9f:7d:
                    33:1c:f5:cc:39:f8:e8:f9:bf:33:c0:d0:08:0c:04:
                    34:20:9d:2c:92:6f:c2:2b:32:0a:e1:0e:32:5c:43:
                    09:7a:e8:7a:e0:92:5b:64:41:3d:42:5b:15:d9:dd:
                    69:03:fd:8e:fb:18:d9:37:29:37:dd:b2:0e:98:a6:
                    06:29:db:0e:85:4b:20:6e:8c:2f:d4:4f:31:7c:86:
                    a2:8e:df:c1:a2:53:26:d8:e0:0a:08:4c:a9:7a:56:
                    de:45:c3:80:97:f3:92:ab:2a:c1:1c:00:86:9c:e4:
                    76:b9:43:06:09:2c:a4:78:5b:72:75:8f:a9:41:9c:
                    d8:23:64:e7:23:6d:c0:b3:a2:ea:df:55:32:f5:63:
                    c8:b3:54:dc:6b:c6:9b:fa:48:d6:20:30:51:20:b2:
                    5f:e3:19:80:c6:28:de:06:7c:9e:89:5b:6f:1f:8b:
                    45:96:9e:80:46:29:49:ab:6b:f9:25:b8:4a:14:44:
                    b3:52:e9:3b:00:5d:56:61:24:f0:ea:28:a9:23:c5:
                    f8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F1:E2:3B:36:FA:3B:9D:9B:BC:02:69:33:E6:86:B2:89:CB:21:E9
            X509v3 Authority Key Identifier:
                keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b6:c7:f2:97:4b:d0:a0:16:51:f6:7e:2b:5a:3b:50:91:76:
         0b:60:0b:e5:53:06:25:9d:7e:4c:6f:a3:13:a2:01:2a:d6:aa:
         d8:07:37:e9:7c:a7:ef:55:70:fe:63:3e:6c:56:55:8b:36:c1:
         25:a7:ef:6d:90:8a:be:a6:5e:5d:f2:6a:89:e2:43:6b:04:ef:
         cc:65:39:ba:65:e6:c6:4a:14:f8:e8:5a:fd:60:9e:93:fa:47:
         2e:06:8f:f8:ab:1a:4e:ef:d4:f3:12:c8:c7:a5:e9:a6:07:72:
         18:37:ad:93:ed:03:79:dd:f6:48:7f:5c:37:a2:62:0f:64:e2:
         ea:5c:63:e5:6a:e1:c3:8a:1c:bf:6c:63:9b:63:e9:3f:3c:24:
         72:43:f7:48:06:8d:5b:c6:bd:7e:89:3e:60:6f:57:1c:5c:ca:
         bf:f5:c5:b5:72:dd:a0:0a:4a:25:df:ca:67:06:11:70:3b:d3:
         83:d7:dc:b6:4a:6c:97:92:91:8f:69:62:8b:fe:29:74:f4:28:
         ab:05:84:d7:e2:a5:27:de:8b:9e:e3:76:83:2e:5e:ac:2b:06:
         36:26:a9:b6:f5:98:d3:85:87:2b:5a:4e:e5:e6:47:9a:b4:03:
         03:4b:67:90:ed:64:be:cd:40:f8:42:3f:69:8b:31:d0:83:75:
         94:01:8a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg1RFoGMagkcmeQ/pzq3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTMzMWZhN2JlNDcwZGMxNzllMTZjMzA2ZTk4YzZjNzMx
YTU3NWMwHhcNMjUwODIzMDYwMDEwWhcNMjUwODI0MDYwMDEwWjAzMTEwLwYDVQQD
Eyg5OWYxZTIzYjM2ZmEzYjlkOWJiYzAyNjkzM2U2ODZiMjg5Y2IyMWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Pkyt1eHetZyQ6oGs0B9i90vqKK9
A6Y5SO9X7jMgmF8bAkEItv1dCNIUMLP2gXERgT0Oc8E04Coan30zHPXMOfjo+b8z
wNAIDAQ0IJ0skm/CKzIK4Q4yXEMJeuh64JJbZEE9QlsV2d1pA/2O+xjZNyk33bIO
mKYGKdsOhUsgbowv1E8xfIaijt/BolMm2OAKCEypelbeRcOAl/OSqyrBHACGnOR2
uUMGCSykeFtydY+pQZzYI2TnI23As6Lq31Uy9WPIs1Tca8ab+kjWIDBRILJf4xmA
xijeBnyeiVtvH4tFlp6ARilJq2v5JbhKFESzUuk7AF1WYSTw6iipI8X4MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnx4js2+judm7wCaTPmhrKJyyHpMB8GA1UdIwQY
MBaAFEuTMfp75HDcF54WwwbpjGxzGldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjIt
OGIyYjQ3MzhiMWNjLzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjItOGIyYjQ3MzhiMWNj
LzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7bH8pdL
0KAWUfZ+K1o7UJF2C2AL5VMGJZ1+TG+jE6IBKtaq2Ac36Xyn71Vw/mM+bFZVizbB
JafvbZCKvqZeXfJqieJDawTvzGU5umXmxkoU+Oha/WCek/pHLgaP+KsaTu/U8xLI
x6XppgdyGDetk+0Ded32SH9cN6JiD2Ti6lxj5Wrhw4ocv2xjm2PpPzwkckP3SAaN
W8a9fok+YG9XHFzKv/XFtXLdoApKJd/KZwYRcDvTg9fctkpsl5KRj2lii/4pdPQo
qwWE1+KlJ96LnuN2gy5erCsGNiaptvWY04WHK1pO5eZHmrQDA0tnkO1kvs1A+EI/
aYsx0IN1lAGKAw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:17 2025 by rpki-client