Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
File:                     F2MhQoAFWkfetVT-nLKNwMF5IwI.mft (raw, json)
Hash identifier:          ZOxtd9ahxAWi1SKlkLrvkSDxzwBedECmPQAv64fcJ8s=
Subject key identifier:   04:44:24:96:F8:6A:CE:8A:11:0B:58:A2:32:00:FD:E2:40:69:ED:40
Authority key identifier: 17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
Certificate issuer:       /CN=1763214280055a47deb554fe9cb28dc0c1792302
Certificate serial:       0198D515F1F5A7352693D6E462D24FC6388D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
Manifest number:          0CDC
Signing time:             Sat 23 Aug 2025 04:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:41 +0000
Files and hashes:         1: F2MhQoAFWkfetVT-nLKNwMF5IwI.crl (hash: IqtQ+GploUNv7nBwqOwSS4uXQP5SK4lgcl/S/XFHMhk=)
                          2: hVP7z7lmWoj5TlYxPEh7DnVK9VA.roa (hash: pMZmMKo2i/xc9OMa6Id6srmN8nXi279oYUGsaAWOPus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:f1:f5:a7:35:26:93:d6:e4:62:d2:4f:c6:38:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1763214280055a47deb554fe9cb28dc0c1792302
        Validity
            Not Before: Aug 23 04:00:41 2025 GMT
            Not After : Aug 24 04:00:41 2025 GMT
        Subject: CN=04442496f86ace8a110b58a23200fde24069ed40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:57:2b:07:0b:de:5a:7e:2f:90:e1:fa:cc:13:
                    a2:c9:4c:e3:52:f3:97:3d:e8:8e:a8:49:dd:e7:8e:
                    89:fb:0c:49:98:29:ba:d6:92:b6:f6:18:7d:44:9d:
                    57:37:26:88:f6:5a:e6:c0:a5:64:0d:f8:63:9e:3a:
                    5e:cc:de:bc:c9:65:7d:2a:a8:8c:40:c4:45:c7:cc:
                    a0:c7:90:33:18:5e:67:3b:b5:24:4d:a2:42:5b:17:
                    9b:d8:a8:8a:cf:90:7f:a3:f1:93:5a:8f:75:ef:27:
                    a6:8d:1a:6f:3b:f6:8d:ea:4c:02:0b:77:5c:ed:03:
                    83:64:64:3d:fb:4a:2d:7a:fb:f4:7a:ea:fc:61:69:
                    b0:f7:47:2b:ae:b7:53:27:5e:68:02:df:38:7c:13:
                    58:26:d5:79:25:a8:82:3a:93:fc:2b:79:fd:80:13:
                    49:73:5a:48:66:25:0e:d5:1a:ce:10:84:dd:09:d8:
                    aa:a2:80:0c:88:2d:20:4c:9c:86:75:85:22:63:1d:
                    93:c9:5d:f2:37:4c:33:84:80:83:c6:35:cc:87:0c:
                    15:e6:88:1a:f1:7a:a2:fe:0e:75:1b:e2:fc:7a:f9:
                    bd:3c:85:61:ad:22:5f:50:49:e7:67:a5:9d:e0:ae:
                    59:17:fe:79:91:28:ec:fe:26:c7:d3:f8:23:7d:c7:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:44:24:96:F8:6A:CE:8A:11:0B:58:A2:32:00:FD:E2:40:69:ED:40
            X509v3 Authority Key Identifier:
                keyid:17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5e:e4:d1:3a:15:55:2d:6a:45:d3:19:75:08:75:a7:ec:59:
         c7:ef:7d:32:b1:d3:7f:5a:ab:76:fb:db:d0:d6:69:86:78:e6:
         f6:08:87:25:39:27:f5:86:de:c2:51:e4:25:da:59:e1:8b:5b:
         78:8c:33:ac:00:4e:4a:09:84:bb:89:8b:8b:1c:c9:dc:d6:f7:
         10:57:99:3a:b4:e2:01:fb:2f:c8:9f:6e:47:0d:1e:37:9c:3f:
         7a:78:b8:62:81:eb:0d:51:6b:d9:e4:31:a1:2f:fe:e6:f4:25:
         4f:91:1a:f4:87:46:2f:c4:41:3c:dd:df:08:b3:05:85:4a:99:
         b0:5d:04:94:c6:0b:07:f8:dd:93:8d:d3:cc:ee:cc:4d:51:77:
         04:d6:25:ba:27:5c:8c:e4:2b:20:e0:0a:b1:02:ba:48:e6:bb:
         77:91:34:a8:89:86:df:93:6e:65:d4:91:e8:bb:76:95:f6:22:
         4e:a4:33:c6:ce:48:54:cb:85:31:65:aa:07:44:24:85:e1:ba:
         e9:7b:b9:ec:ea:d1:4b:11:07:a5:f2:fd:d1:34:47:03:9d:a5:
         53:cf:61:64:f2:71:54:bf:7b:eb:88:66:79:67:b5:9c:58:dd:
         2b:ff:a6:ad:87:a7:b4:19:2e:04:d2:60:0a:ee:c3:f2:3e:b7:
         0a:d4:3e:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFfH1pzUmk9bkYtJPxjiNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NjMyMTQyODAwNTVhNDdkZWI1NTRmZTljYjI4ZGMwYzE3
OTIzMDIwHhcNMjUwODIzMDQwMDQxWhcNMjUwODI0MDQwMDQxWjAzMTEwLwYDVQQD
EygwNDQ0MjQ5NmY4NmFjZThhMTEwYjU4YTIzMjAwZmRlMjQwNjllZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1crBwveWn4vkOH6zBOiyUzjUvOX
PeiOqEnd546J+wxJmCm61pK29hh9RJ1XNyaI9lrmwKVkDfhjnjpezN68yWV9KqiM
QMRFx8ygx5AzGF5nO7UkTaJCWxeb2KiKz5B/o/GTWo917yemjRpvO/aN6kwCC3dc
7QODZGQ9+0otevv0eur8YWmw90crrrdTJ15oAt84fBNYJtV5JaiCOpP8K3n9gBNJ
c1pIZiUO1RrOEITdCdiqooAMiC0gTJyGdYUiYx2TyV3yN0wzhICDxjXMhwwV5oga
8Xqi/g51G+L8evm9PIVhrSJfUEnnZ6Wd4K5ZF/55kSjs/ibH0/gjfcct/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAREJJb4as6KEQtYojIA/eJAae1AMB8GA1UdIwQY
MBaAFBdjIUKABVpH3rVU/pyyjcDBeSMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jZmJjZmEtODhkYS00ODhlLWFjZTEt
Nzk2Nzk2MmU3Yzc1LzEvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jZmJjZmEtODhkYS00ODhlLWFjZTEtNzk2Nzk2MmU3Yzc1
LzEvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV17k0ToV
VS1qRdMZdQh1p+xZx+99MrHTf1qrdvvb0NZphnjm9giHJTkn9YbewlHkJdpZ4Ytb
eIwzrABOSgmEu4mLixzJ3Nb3EFeZOrTiAfsvyJ9uRw0eN5w/eni4YoHrDVFr2eQx
oS/+5vQlT5Ea9IdGL8RBPN3fCLMFhUqZsF0ElMYLB/jdk43TzO7MTVF3BNYluidc
jOQrIOAKsQK6SOa7d5E0qImG35NuZdSR6Lt2lfYiTqQzxs5IVMuFMWWqB0QkheG6
6Xu57OrRSxEHpfL90TRHA52lU89hZPJxVL9764hmeWe1nFjdK/+mrYentBkuBNJg
Cu7D8j63CtQ+Sw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:43 2025 by rpki-client