Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File:                     1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier:          mScT7NZLfM68m9Rztox/fCB+c69izIzPF+V/gEYfSbg=
Subject key identifier:   18:2F:63:BA:07:5A:8D:79:B6:38:85:20:F4:A8:A5:ED:0D:64:3E:F9
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer:       /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial:       0198D66121D99B14BBC0E7194F863CAB3DBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number:          05A9
Signing time:             Sat 23 Aug 2025 10:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:26 +0000
Files and hashes:         1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: y28KUrnG8J1eOATZwuV1mm4ox10WiVNpdgEmeRf7p98=)
                          2: AuXo05ybv8icHHWqDyU8sDSnZ1Y.roa (hash: UxOR6qET+hxOD3wGEyopUX9auNkRzvxhrEq1sLIBOVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:21:d9:9b:14:bb:c0:e7:19:4f:86:3c:ab:3d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
        Validity
            Not Before: Aug 23 10:02:26 2025 GMT
            Not After : Aug 24 10:02:26 2025 GMT
        Subject: CN=182f63ba075a8d79b6388520f4a8a5ed0d643ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:b8:37:05:b3:b6:b0:df:91:67:1b:22:28:
                    2c:38:c1:f7:96:38:cb:98:0d:30:70:b4:07:6d:a7:
                    6d:cf:7f:34:ad:e5:ab:ab:94:b5:e0:ac:5d:5b:e8:
                    59:c4:20:aa:95:da:92:7e:ac:7c:12:c9:b7:cf:5b:
                    86:2e:1c:d6:85:64:cc:22:48:5f:95:67:48:ef:ec:
                    06:3e:1f:20:1f:08:85:5b:21:76:dd:30:1a:77:a8:
                    8c:72:78:cf:cc:37:50:6e:57:44:74:b0:21:77:51:
                    dd:59:8c:8a:8b:e9:4b:88:2b:4e:30:ff:c6:12:14:
                    a1:f9:4f:66:4a:ce:bf:f4:7b:db:f9:5a:cc:ec:f4:
                    9f:78:c9:24:b4:f4:eb:4c:ac:7e:3b:9b:d3:c2:99:
                    13:1e:b6:cd:c6:5d:37:3d:83:ab:83:4b:7b:8f:2a:
                    60:1b:22:ad:07:4b:55:53:e0:eb:21:dd:7a:42:1b:
                    e5:03:b6:8b:1a:41:3b:88:03:db:a4:ab:a1:49:f2:
                    5c:6c:15:de:35:56:9a:71:03:5a:dd:48:b0:2e:ea:
                    9c:31:78:d0:fd:06:8d:11:58:4c:ac:46:7b:fa:02:
                    d3:45:70:af:3f:a1:fa:5b:a6:b8:e9:1e:ef:1c:87:
                    0b:5a:37:a9:35:ff:5d:71:0c:64:f6:dd:05:31:c1:
                    72:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2F:63:BA:07:5A:8D:79:B6:38:85:20:F4:A8:A5:ED:0D:64:3E:F9
            X509v3 Authority Key Identifier:
                keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:83:bf:ea:c7:bd:9d:60:db:4e:e8:41:b3:7c:1a:ae:67:94:
         79:91:86:e7:ca:b3:ee:af:77:5c:ef:f1:44:7c:4e:72:e4:f3:
         76:3f:25:6b:86:3e:3b:d3:7b:0a:1c:df:2b:60:81:b8:00:ca:
         b9:82:ee:83:94:27:ff:bc:74:46:26:d7:1c:11:c5:d2:83:07:
         01:d0:7a:a2:8e:86:37:16:08:f1:9d:d4:8b:c9:a7:b4:fc:45:
         f3:36:e0:4b:a6:1f:44:5a:d4:9b:13:9a:1e:08:12:1e:d7:14:
         66:8e:43:3f:cb:4b:2c:64:0e:83:00:6a:6f:81:e7:22:1a:5d:
         43:0f:0e:a0:67:15:32:c7:22:d0:e1:80:11:37:2f:99:88:fd:
         28:45:94:c8:44:7d:38:67:8f:9e:94:ae:a5:b1:61:2b:e2:cc:
         51:33:a2:a0:0f:41:17:14:08:29:5b:10:24:65:78:c3:a7:45:
         af:df:69:0e:98:c9:83:83:4e:18:16:55:64:33:d7:36:bd:1e:
         4e:09:57:ea:0e:ef:9c:b5:bf:5a:cd:e4:c9:ab:9d:cc:41:ae:
         6e:9f:67:45:1a:2d:93:a0:37:60:cf:2f:de:3a:dd:8b:09:53:
         8d:ae:26:c6:b8:a6:65:ad:e5:9a:ab:d8:25:b9:8d:56:f4:17:
         17:32:ed:32
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjWYSHZmxS7wOcZT4Y8qz27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NzliYWE4OWUyMTQxMzNjY2Y2NDYwZjI0MjA2YWQyYzg2
NjcwZWIwHhcNMjUwODIzMTAwMjI2WhcNMjUwODI0MTAwMjI2WjAzMTEwLwYDVQQD
EygxODJmNjNiYTA3NWE4ZDc5YjYzODg1MjBmNGE4YTVlZDBkNjQzZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOK4NwWztrDfkWcbIigsOMH3ljjL
mA0wcLQHbadtz380reWrq5S14KxdW+hZxCCqldqSfqx8Esm3z1uGLhzWhWTMIkhf
lWdI7+wGPh8gHwiFWyF23TAad6iMcnjPzDdQbldEdLAhd1HdWYyKi+lLiCtOMP/G
EhSh+U9mSs6/9Hvb+VrM7PSfeMkktPTrTKx+O5vTwpkTHrbNxl03PYOrg0t7jypg
GyKtB0tVU+DrId16QhvlA7aLGkE7iAPbpKuhSfJcbBXeNVaacQNa3UiwLuqcMXjQ
/QaNEVhMrEZ7+gLTRXCvP6H6W6a46R7vHIcLWjepNf9dcQxk9t0FMcFy3wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBgvY7oHWo15tjiFIPSope0NZD75MB8GA1UdIwQY
MBaAFPh5uqieIUEzzPZGDyQgatLIZnDrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IbTZxSjRoUVRQTTlrWVBKQ0JxMHNobWNPcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvNGNlZmFiLTQ3NzUtNDI1OC1iOTcx
LTRmY2Y4NGM4NWI2My8xLzEtSG02cUo0aFFUUE05a1lQSkNCcTBzaG1jT3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E3LzRjZWZhYi00Nzc1LTQyNTgtYjk3MS00ZmNmODRjODVi
NjMvMS8xLUhtNnFKNGhRVFBNOWtZUEpDQnEwc2htY09zLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoO/
6se9nWDbTuhBs3warmeUeZGG58qz7q93XO/xRHxOcuTzdj8la4Y+O9N7ChzfK2CB
uADKuYLug5Qn/7x0RibXHBHF0oMHAdB6oo6GNxYI8Z3Ui8mntPxF8zbgS6YfRFrU
mxOaHggSHtcUZo5DP8tLLGQOgwBqb4HnIhpdQw8OoGcVMsci0OGAETcvmYj9KEWU
yER9OGePnpSupbFhK+LMUTOioA9BFxQIKVsQJGV4w6dFr99pDpjJg4NOGBZVZDPX
Nr0eTglX6g7vnLW/Ws3kyaudzEGubp9nRRotk6A3YM8v3jrdiwlTja4mxrimZa3l
mqvYJbmNVvQXFzLtMg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:43 2025 by rpki-client