Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
File:                     k1x7dikZzzbcFCY_XllV6P-jXTs.mft (raw, json)
Hash identifier:          FKvpbW/10MVVJaN6J1zmaXZuLV0dNEpOzSHnUwQfDeQ=
Subject key identifier:   FA:66:4D:67:DA:60:01:E4:97:19:08:11:FF:93:E8:0E:9B:F9:13:B1
Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
Certificate issuer:       /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Certificate serial:       0198D4734FD9F79DD077E361C790D600A84A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 01:03:03 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:03 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:03 +0000
Files and hashes:         1: k1x7dikZzzbcFCY_XllV6P-jXTs.crl (hash: Ps2Bm4EP05pzNUaabIRwbmzRXBV4eI8geokW3R3XMGo=)
                          2: mPtwMPDBjS-jkWgS9uuTF9_ZOaw.roa (hash: 2rJnzrY1kifgjd6LuERI+YOBEpbALMoWfYZ9TooQij0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:4f:d9:f7:9d:d0:77:e3:61:c7:90:d6:00:a8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
        Validity
            Not Before: Aug 23 01:03:03 2025 GMT
            Not After : Aug 24 01:03:03 2025 GMT
        Subject: CN=fa664d67da6001e497190811ff93e80e9bf913b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d2:e1:b2:ca:15:6e:f8:f2:08:d9:a2:62:b8:
                    eb:de:fa:9d:63:7d:f7:62:bd:08:3f:18:1f:fe:75:
                    0c:3e:2c:8d:b0:6c:a5:d4:2b:c7:ce:6c:dd:2a:ab:
                    79:17:92:17:1e:de:28:de:81:6a:b7:0e:ad:28:e9:
                    58:fa:6b:82:ac:4c:7d:a8:1e:ea:ba:89:f3:bd:75:
                    b4:52:79:8a:b3:9b:91:68:16:63:20:80:fd:1b:de:
                    7d:29:0e:b3:14:69:4f:23:8b:ab:13:70:3e:43:da:
                    ec:1d:7e:d8:4e:4d:a6:0e:f4:26:58:e0:ab:50:64:
                    cf:46:b6:82:a1:0f:98:26:5b:e7:66:03:cc:63:b1:
                    81:a3:31:46:67:fd:c2:4e:da:48:67:dd:7b:27:0c:
                    7c:29:25:f7:b2:91:bd:ed:85:b2:06:89:ee:8c:f4:
                    00:d0:c1:c1:ea:4a:30:9d:c4:4e:57:e8:28:c8:af:
                    e6:72:91:de:47:73:f9:6f:d0:52:4e:d0:73:d0:c1:
                    8a:30:43:ff:b3:89:86:50:7b:32:61:89:29:8e:82:
                    f1:61:a0:dd:7b:62:10:c0:3f:7b:51:03:ee:b5:4d:
                    29:7f:9a:f4:f5:ce:73:0d:3f:41:00:e3:87:ba:54:
                    6a:71:a0:d1:dd:28:ac:13:31:53:d7:32:6b:8b:ab:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:66:4D:67:DA:60:01:E4:97:19:08:11:FF:93:E8:0E:9B:F9:13:B1
            X509v3 Authority Key Identifier:
                keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:99:4c:bb:14:56:98:f9:97:d3:a5:a2:93:e3:e6:bc:33:c3:
         c6:1e:61:3a:18:23:18:1e:f8:1e:cf:f9:6d:28:da:f4:c7:32:
         bc:31:9f:c3:ac:90:22:23:b8:4e:42:b3:0a:4f:d5:c9:32:91:
         ae:89:27:b3:26:f5:4e:0d:54:92:86:fe:fd:5b:16:7c:80:99:
         8f:06:c0:96:60:c8:47:d3:39:59:70:6a:88:50:fb:d1:2b:fb:
         d0:32:ad:45:81:07:2a:d4:4c:c7:85:04:20:ee:d4:97:c4:d9:
         78:e4:21:a8:59:7b:62:0d:94:4b:fe:10:dd:6b:8a:3e:71:4d:
         cf:9b:35:b7:2c:cd:26:c5:24:6f:d4:ca:25:ec:08:ce:a2:6f:
         3f:e4:f5:d2:74:be:d4:df:ed:8c:80:e7:42:9e:13:18:90:20:
         aa:0c:f5:5e:d3:59:1a:15:c4:fa:73:ba:6b:e7:8a:1e:02:27:
         f0:ce:63:97:da:bf:7e:fe:5f:81:d3:d9:16:18:f7:84:f5:4c:
         4d:3d:3a:ea:df:a8:77:73:81:f2:ee:4e:87:c6:63:36:d9:27:
         23:7f:fc:4f:33:54:f0:80:3e:9d:82:c6:c0:31:e3:8c:99:a9:
         03:1e:c1:3b:08:a0:9b:6e:56:d3:f6:ee:6e:00:ed:25:bb:a4:
         c2:3a:a5:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc0/Z953Qd+Nhx5DWAKhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWM3Yjc2MjkxOWNmMzZkYzE0MjYzZjVlNTk1NWU4ZmZh
MzVkM2IwHhcNMjUwODIzMDEwMzAzWhcNMjUwODI0MDEwMzAzWjAzMTEwLwYDVQQD
EyhmYTY2NGQ2N2RhNjAwMWU0OTcxOTA4MTFmZjkzZTgwZTliZjkxM2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNLhssoVbvjyCNmiYrjr3vqdY333
Yr0IPxgf/nUMPiyNsGyl1CvHzmzdKqt5F5IXHt4o3oFqtw6tKOlY+muCrEx9qB7q
uonzvXW0UnmKs5uRaBZjIID9G959KQ6zFGlPI4urE3A+Q9rsHX7YTk2mDvQmWOCr
UGTPRraCoQ+YJlvnZgPMY7GBozFGZ/3CTtpIZ917Jwx8KSX3spG97YWyBonujPQA
0MHB6kowncROV+goyK/mcpHeR3P5b9BSTtBz0MGKMEP/s4mGUHsyYYkpjoLxYaDd
e2IQwD97UQPutU0pf5r09c5zDT9BAOOHulRqcaDR3SisEzFT1zJri6tlgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpmTWfaYAHklxkIEf+T6A6b+ROxMB8GA1UdIwQY
MBaAFJNce3YpGc823BQmP15ZVej/o107MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjct
YWVkMTY0ODMyYThiLzEvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjctYWVkMTY0ODMyYThi
LzEvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVplMuxRW
mPmX06Wik+PmvDPDxh5hOhgjGB74Hs/5bSja9McyvDGfw6yQIiO4TkKzCk/VyTKR
roknsyb1Tg1Ukob+/VsWfICZjwbAlmDIR9M5WXBqiFD70Sv70DKtRYEHKtRMx4UE
IO7Ul8TZeOQhqFl7Yg2US/4Q3WuKPnFNz5s1tyzNJsUkb9TKJewIzqJvP+T10nS+
1N/tjIDnQp4TGJAgqgz1XtNZGhXE+nO6a+eKHgIn8M5jl9q/fv5fgdPZFhj3hPVM
TT066t+od3OB8u5Oh8ZjNtknI3/8TzNU8IA+nYLGwDHjjJmpAx7BOwigm25W0/bu
bgDtJbukwjqlUA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:20 2025 by rpki-client