Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File:                     SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier:          oUErQXnSaMWBkv+TfnOkUY/TPxr9OJx6PXGtLU0+RTU=
Subject key identifier:   F6:A9:FE:2B:14:69:A2:18:58:82:2F:95:69:BE:5F:83:DA:F3:BE:7E
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer:       /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial:       0198D473BA0D899C4BF5A9E398B799D76202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number:          02FA
Signing time:             Sat 23 Aug 2025 01:03:30 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:30 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:30 +0000
Files and hashes:         1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=)
                          2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: IMvBJtKqobKg36iqpPVYWAaYX/KpwYTRXyPNpIRTldM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:ba:0d:89:9c:4b:f5:a9:e3:98:b7:99:d7:62:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
        Validity
            Not Before: Aug 23 01:03:30 2025 GMT
            Not After : Aug 24 01:03:30 2025 GMT
        Subject: CN=f6a9fe2b1469a21858822f9569be5f83daf3be7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:85:1f:35:a9:f9:f3:00:7f:9a:56:2a:76:2a:
                    ce:5c:df:63:4a:2b:06:46:d9:8c:ae:e1:aa:9f:fa:
                    29:7c:26:1f:e8:81:c0:8c:cf:69:7a:82:ff:69:23:
                    61:5d:4f:73:33:b4:fe:1d:cb:35:c1:77:10:36:10:
                    38:3b:28:d0:d1:74:c8:29:3f:8c:41:ae:9c:31:c1:
                    58:63:a6:a0:21:f6:05:0c:ab:cb:62:8d:5d:59:f8:
                    14:13:25:58:39:7b:bd:65:29:4b:98:17:c2:e9:64:
                    ed:a0:9a:cc:97:5a:03:c2:b7:a1:a8:bd:43:1e:e3:
                    c3:f0:fc:3e:d1:15:6f:2a:4e:d5:b9:62:51:68:52:
                    61:7c:1e:2b:de:3c:92:8f:a2:14:5f:9f:a4:89:66:
                    31:77:68:e4:3a:e2:80:7e:e3:0e:59:d9:9a:9c:e3:
                    69:24:db:ff:91:ac:98:cc:e0:b2:c8:0e:eb:bb:dd:
                    43:7e:e2:fb:5b:9f:c8:83:33:96:31:c5:11:52:46:
                    f2:62:5c:56:73:d2:83:49:68:4d:eb:7b:9d:86:5c:
                    d7:7b:30:ec:f2:4b:f9:8e:a7:f7:6c:4d:05:c2:b7:
                    f1:87:da:e6:6a:15:89:36:ea:7a:91:ba:6d:8a:e8:
                    8c:36:5f:f3:d3:40:3c:ef:38:a0:e8:40:24:e2:3f:
                    e2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A9:FE:2B:14:69:A2:18:58:82:2F:95:69:BE:5F:83:DA:F3:BE:7E
            X509v3 Authority Key Identifier:
                keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:bb:47:e8:e2:6b:e9:f8:1f:1d:8a:bf:9a:55:08:3b:8c:24:
         71:6a:ad:51:fa:8a:f1:34:4b:2b:4c:3d:48:b3:66:e1:14:14:
         51:70:96:7a:81:ca:ae:59:c0:70:a6:88:50:b7:65:a1:27:fd:
         ec:5a:a5:cc:ee:29:86:be:42:87:62:75:c5:2d:ed:93:cb:46:
         0c:6d:04:90:3a:dc:e3:ca:ec:b7:05:6c:a8:2e:e7:42:5c:13:
         62:45:bc:de:d5:96:82:bd:c9:fb:96:29:71:61:38:36:96:ba:
         ea:5e:73:af:26:a0:fd:c7:ec:5b:07:5f:b0:01:56:c2:fa:63:
         6b:0b:e6:e8:4b:04:0c:7c:e8:3d:f5:37:d4:54:25:df:32:52:
         1a:96:a3:c5:31:c0:76:45:1a:7e:55:28:b8:c7:30:01:6e:45:
         20:42:65:07:4d:99:cd:22:29:8f:d3:6d:fe:f8:e3:94:8d:e9:
         b0:65:9b:dd:a5:e8:c3:17:10:40:2f:d3:bc:cc:29:64:65:3c:
         d6:b6:c8:5f:73:03:1a:22:30:61:60:45:18:2b:9c:13:fe:80:
         4d:85:24:da:48:23:7b:f0:24:59:a5:08:0d:fa:e8:e4:38:f3:
         06:bb:48:8d:4f:45:8b:c0:fc:ab:ac:d3:b0:8e:e7:fe:58:7b:
         68:c5:14:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc7oNiZxL9anjmLeZ12ICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4M2ZiMzdkMWZiMGNjZDIxNmRhZGVjNDAwMDk1NjFhODQ0
YWE4M2IwHhcNMjUwODIzMDEwMzMwWhcNMjUwODI0MDEwMzMwWjAzMTEwLwYDVQQD
EyhmNmE5ZmUyYjE0NjlhMjE4NTg4MjJmOTU2OWJlNWY4M2RhZjNiZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04UfNan58wB/mlYqdirOXN9jSisG
RtmMruGqn/opfCYf6IHAjM9peoL/aSNhXU9zM7T+Hcs1wXcQNhA4OyjQ0XTIKT+M
Qa6cMcFYY6agIfYFDKvLYo1dWfgUEyVYOXu9ZSlLmBfC6WTtoJrMl1oDwrehqL1D
HuPD8Pw+0RVvKk7VuWJRaFJhfB4r3jySj6IUX5+kiWYxd2jkOuKAfuMOWdmanONp
JNv/kayYzOCyyA7ru91DfuL7W5/IgzOWMcURUkbyYlxWc9KDSWhN63udhlzXezDs
8kv5jqf3bE0Fwrfxh9rmahWJNup6kbptiuiMNl/z00A87zig6EAk4j/iyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPap/isUaaIYWIIvlWm+X4Pa875+MB8GA1UdIwQY
MBaAFEg/s30fsMzSFtrexAAJVhqESqg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMWViNjYtY2M4Ny00YTkwLTljNWQt
ZWUzY2E3NGJiYjc5LzEvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hMWViNjYtY2M4Ny00YTkwLTljNWQtZWUzY2E3NGJiYjc5
LzEvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprtH6OJr
6fgfHYq/mlUIO4wkcWqtUfqK8TRLK0w9SLNm4RQUUXCWeoHKrlnAcKaIULdloSf9
7FqlzO4phr5Ch2J1xS3tk8tGDG0EkDrc48rstwVsqC7nQlwTYkW83tWWgr3J+5Yp
cWE4Npa66l5zryag/cfsWwdfsAFWwvpjawvm6EsEDHzoPfU31FQl3zJSGpajxTHA
dkUaflUouMcwAW5FIEJlB02ZzSIpj9Nt/vjjlI3psGWb3aXowxcQQC/TvMwpZGU8
1rbIX3MDGiIwYWBFGCucE/6ATYUk2kgje/AkWaUIDfro5DjzBrtIjU9Fi8D8q6zT
sI7n/lh7aMUUIA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:09 2025 by rpki-client