Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
File:                     _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json)
Hash identifier:          j4THbygqpO7gzrZ6MnVE4U/6qQEZzojGipj3ShY5ihs=
Subject key identifier:   57:85:8D:1E:90:1F:92:85:63:67:76:67:18:08:07:9D:95:0C:72:07
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Certificate issuer:       /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial:       0198D4E0E51D825F3B25E83A98C6452007DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
Manifest number:          1490
Signing time:             Sat 23 Aug 2025 03:02:45 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:45 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:45 +0000
Files and hashes:         1: D477qKV-aPF2n8oBjSmgcuod2kE.roa (hash: pyW25bQPJKBFO/7F+t0bHE29cloxJ5T2+KSGVCTHaws=)
                          2: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: 3F6MbCZBaSWL3mrP/jdscgHU1GBUpmBI3DfDMEuDszM=)
                          3: f81q0GaGTCIHgaFVlHTHYXL7SEQ.roa (hash: Gw3xzXZPKuGmrAR2PrIl2quzqApN9VDz3sjokAQjW1Y=)
                          4: pVTqCR0peatjWSp4Jxs9VZ9aHR0.roa (hash: yjFFs3Sic83blHCl+jWhjWUGXXoo+/pXsN4k7VdljkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:e5:1d:82:5f:3b:25:e8:3a:98:c6:45:20:07:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
        Validity
            Not Before: Aug 23 03:02:45 2025 GMT
            Not After : Aug 24 03:02:45 2025 GMT
        Subject: CN=57858d1e901f9285636776671808079d950c7207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:d7:38:58:f1:9d:45:4b:f8:1d:04:c5:91:
                    db:61:86:c7:3b:a3:7d:ce:59:ee:a1:63:05:e9:46:
                    c5:a2:ff:9e:4c:83:29:75:dc:11:01:63:87:35:84:
                    85:cc:4e:cc:35:00:d2:ae:8c:90:c1:c8:f5:40:f7:
                    6a:46:4f:82:b5:ae:47:ad:05:ea:fb:80:5d:5d:f1:
                    63:8e:bf:a7:f8:0b:c3:f0:95:d5:3d:67:53:17:e6:
                    22:ca:ec:58:a9:32:52:ba:27:64:20:a2:66:7d:94:
                    49:da:d6:72:77:92:57:46:c1:35:f2:06:f0:26:bd:
                    b1:3d:97:18:d1:9c:32:ee:13:1d:41:3c:0a:4c:3d:
                    c6:ab:d6:7d:ae:c1:48:0e:27:98:3a:b4:5c:17:e0:
                    ca:56:9f:d9:58:bf:13:b4:0b:90:17:c8:d2:35:ec:
                    a0:d2:76:15:8d:e6:68:76:41:85:5a:f9:f4:92:1f:
                    77:48:d8:27:cf:5a:91:09:02:52:c1:f1:f6:9f:cb:
                    fb:9c:a8:92:44:47:13:aa:89:3e:4a:01:1f:97:1a:
                    01:22:2e:32:7a:40:01:b9:30:95:e6:41:ae:ae:fc:
                    80:83:78:f1:ab:5a:05:d5:1e:14:7f:61:d3:a1:84:
                    31:55:7b:2d:87:2e:be:19:72:7c:bb:54:c3:bb:72:
                    ed:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:85:8D:1E:90:1F:92:85:63:67:76:67:18:08:07:9D:95:0C:72:07
            X509v3 Authority Key Identifier:
                keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:38:44:11:be:d2:40:62:3a:86:a3:51:3c:6e:fe:af:af:d2:
         7a:ba:cd:4b:37:16:9b:19:b9:37:b9:f6:36:c8:90:f8:e5:92:
         2a:29:c2:25:0f:1e:20:96:fb:52:62:1f:eb:68:8f:e2:84:1a:
         00:16:b5:0f:1b:95:fc:60:6d:c8:77:38:8b:97:78:87:ac:8f:
         24:10:01:eb:5b:a4:cb:09:1d:e5:77:cd:69:a7:1b:12:b0:8f:
         b6:10:9e:c8:48:17:b2:10:14:35:5e:4e:75:db:82:a1:c7:57:
         9d:3e:17:67:75:cf:0c:6e:9c:b3:5f:ae:9e:34:db:60:ce:3a:
         49:cd:88:23:1d:6a:10:78:4b:cc:d0:50:f8:7a:6a:63:58:7a:
         44:32:52:04:31:66:86:2e:c1:4f:4b:9e:dd:92:0e:e5:ca:e6:
         80:23:94:2b:29:72:9a:a6:f3:5d:6a:c2:d4:29:21:cc:0c:2c:
         11:44:c5:d7:7e:9c:6a:18:17:9c:47:aa:e7:49:25:f3:b0:43:
         29:18:04:c6:69:e1:95:6b:dd:d3:7b:0c:0a:b8:41:c9:f5:bf:
         46:70:c0:a9:25:53:a6:ee:b6:9f:65:5b:e1:02:33:4a:78:d5:
         51:a8:79:69:a8:3c:5e:f0:2d:9c:0c:aa:3d:c4:20:d6:23:1a:
         ff:f9:eb:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4OUdgl87Jeg6mMZFIAfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMzU4NzdjYzAzOGJmZmRiOTdiYjNkNmVhMjE2YWI1MmIz
YTA1ODIwHhcNMjUwODIzMDMwMjQ1WhcNMjUwODI0MDMwMjQ1WjAzMTEwLwYDVQQD
Eyg1Nzg1OGQxZTkwMWY5Mjg1NjM2Nzc2NjcxODA4MDc5ZDk1MGM3MjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstrXOFjxnUVL+B0ExZHbYYbHO6N9
zlnuoWMF6UbFov+eTIMpddwRAWOHNYSFzE7MNQDSroyQwcj1QPdqRk+Cta5HrQXq
+4BdXfFjjr+n+AvD8JXVPWdTF+YiyuxYqTJSuidkIKJmfZRJ2tZyd5JXRsE18gbw
Jr2xPZcY0Zwy7hMdQTwKTD3Gq9Z9rsFIDieYOrRcF+DKVp/ZWL8TtAuQF8jSNeyg
0nYVjeZodkGFWvn0kh93SNgnz1qRCQJSwfH2n8v7nKiSREcTqok+SgEflxoBIi4y
ekABuTCV5kGurvyAg3jxq1oF1R4Uf2HToYQxVXsthy6+GXJ8u1TDu3LtaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeFjR6QH5KFY2d2ZxgIB52VDHIHMB8GA1UdIwQY
MBaAFPw1h3zAOL/9uXuz1uoharUrOgWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMt
OGU2NWIzNDdmMjE4LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMtOGU2NWIzNDdmMjE4
LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjhEEb7S
QGI6hqNRPG7+r6/SerrNSzcWmxm5N7n2NsiQ+OWSKinCJQ8eIJb7UmIf62iP4oQa
ABa1DxuV/GBtyHc4i5d4h6yPJBAB61ukywkd5XfNaacbErCPthCeyEgXshAUNV5O
dduCocdXnT4XZ3XPDG6cs1+unjTbYM46Sc2IIx1qEHhLzNBQ+HpqY1h6RDJSBDFm
hi7BT0ue3ZIO5crmgCOUKylymqbzXWrC1CkhzAwsEUTF136cahgXnEeq50kl87BD
KRgExmnhlWvd03sMCrhByfW/RnDAqSVTpu62n2Vb4QIzSnjVUah5aag8XvAtnAyq
PcQg1iMa//nrig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:00 2025 by rpki-client