Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
File:                     g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft (raw, json)
Hash identifier:          QG39Zi3RtyiOZfNoe4Jw7+XVzq2YcZXeM2ggK+u3B2k=
Subject key identifier:   E2:E5:84:01:9D:2C:9E:99:30:E2:67:0D:54:77:DE:34:DB:6B:E6:70
Authority key identifier: 83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
Certificate issuer:       /CN=83c8d01caf2b0751d035c537566f45627925e4f6
Certificate serial:       0198D65F46925AC3FB0C58585FF7E4B0A585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
Manifest number:          118F
Signing time:             Sat 23 Aug 2025 10:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:24 +0000
Files and hashes:         1: J4HW2mYS6aU6LfQRgOlYRDbLp5k.roa (hash: Bt4aDKGWyvEeRSoxrjAjHWSOknnKJY9L9kMvMSuInRo=)
                          2: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl (hash: eHp4vUf8EVmMqtI1znPSccwQVwQ6J822gzBGD2yx0cc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:46:92:5a:c3:fb:0c:58:58:5f:f7:e4:b0:a5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c8d01caf2b0751d035c537566f45627925e4f6
        Validity
            Not Before: Aug 23 10:00:24 2025 GMT
            Not After : Aug 24 10:00:24 2025 GMT
        Subject: CN=e2e584019d2c9e9930e2670d5477de34db6be670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:f0:2a:e4:06:84:d3:2f:8d:66:3f:ef:cd:
                    95:79:2b:5a:43:57:5d:43:51:bc:59:ba:f6:cb:8e:
                    bc:8b:b8:d6:a6:f6:2d:3e:19:59:ab:40:c5:21:ba:
                    c8:11:18:b5:9d:63:1d:5e:27:1c:b3:86:57:0c:c0:
                    e6:c5:61:21:6e:36:db:a4:e9:61:b8:2d:75:e2:e1:
                    c2:c2:00:40:d8:a8:90:ee:26:79:d8:0b:6b:6d:ed:
                    27:55:c5:ee:c2:c7:1e:6a:84:70:6c:4b:86:4b:b2:
                    3e:67:67:c7:2f:e3:57:c5:3b:e2:a9:2c:6a:d9:b6:
                    16:bb:ff:94:b5:b8:0b:8e:cb:74:84:6f:7f:16:ab:
                    b6:68:c6:c3:9e:99:54:49:b9:4f:cc:ed:ec:54:32:
                    b5:90:80:a7:bd:de:48:32:a1:57:00:65:e9:a5:72:
                    95:67:c6:53:c6:be:4a:6d:7d:82:cf:08:66:e3:ee:
                    42:73:de:0c:95:8e:d0:e2:d0:88:ac:8b:b7:56:1b:
                    2f:84:e7:0f:71:fa:38:95:ad:25:6e:5c:a0:f1:5e:
                    af:6f:5d:f9:a6:01:18:5e:23:72:16:84:d1:6b:07:
                    32:ef:df:2d:c1:6b:9f:dd:57:1d:6d:46:51:1a:d0:
                    c7:e5:df:aa:ef:78:f0:ea:12:db:50:c5:2d:e0:04:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E5:84:01:9D:2C:9E:99:30:E2:67:0D:54:77:DE:34:DB:6B:E6:70
            X509v3 Authority Key Identifier:
                keyid:83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f0:6c:f9:6a:3d:16:86:8a:37:6c:18:ad:ec:30:bc:b4:7c:
         e4:be:aa:b7:87:14:a7:7f:6a:eb:aa:a9:64:35:07:20:3a:e7:
         35:07:68:76:fd:7d:b6:27:e6:58:d7:e4:ad:af:ea:6d:1a:85:
         95:46:2f:90:51:04:28:e9:25:2c:14:03:4c:65:89:86:bf:85:
         7d:19:a0:cd:8b:bc:80:fb:db:45:7c:ff:a7:df:72:a7:be:05:
         00:33:29:3a:dc:64:12:6b:14:fc:2c:e3:a7:7d:05:ae:5d:f4:
         23:0c:25:c4:76:0d:66:f1:68:2c:22:b7:f3:fe:b9:6b:10:a1:
         4e:41:2e:8d:5d:35:13:3e:e1:44:15:a6:88:4f:8c:75:18:36:
         f0:f1:df:87:97:fe:60:fb:1d:26:56:b9:6b:99:3c:17:c8:60:
         15:8b:4f:f5:43:db:11:15:12:ec:ac:ab:0b:9c:10:7b:0e:70:
         70:7e:ab:73:4f:18:d6:c0:f8:79:94:90:66:99:13:b9:61:c0:
         36:73:20:11:02:4a:e9:c3:90:8d:85:e0:6a:6f:e0:4f:2c:40:
         5d:25:25:f6:a3:41:6e:0b:0b:58:ca:52:48:61:ea:2c:65:c6:
         b4:e1:3c:9e:2f:eb:d7:74:a9:e8:73:77:8b:97:b8:75:61:f1:
         66:f7:ca:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX0aSWsP7DFhYX/fksKWFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzhkMDFjYWYyYjA3NTFkMDM1YzUzNzU2NmY0NTYyNzky
NWU0ZjYwHhcNMjUwODIzMTAwMDI0WhcNMjUwODI0MTAwMDI0WjAzMTEwLwYDVQQD
EyhlMmU1ODQwMTlkMmM5ZTk5MzBlMjY3MGQ1NDc3ZGUzNGRiNmJlNjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMLwKuQGhNMvjWY/782VeStaQ1dd
Q1G8Wbr2y468i7jWpvYtPhlZq0DFIbrIERi1nWMdXiccs4ZXDMDmxWEhbjbbpOlh
uC114uHCwgBA2KiQ7iZ52Atrbe0nVcXuwsceaoRwbEuGS7I+Z2fHL+NXxTviqSxq
2bYWu/+UtbgLjst0hG9/Fqu2aMbDnplUSblPzO3sVDK1kICnvd5IMqFXAGXppXKV
Z8ZTxr5KbX2Czwhm4+5Cc94MlY7Q4tCIrIu3VhsvhOcPcfo4la0lblyg8V6vb135
pgEYXiNyFoTRawcy798twWuf3VcdbUZRGtDH5d+q73jw6hLbUMUt4AQUMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLlhAGdLJ6ZMOJnDVR33jTba+ZwMB8GA1UdIwQY
MBaAFIPI0ByvKwdR0DXFN1ZvRWJ5JeT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhqUUhLOHJCMUhRTmNVM1ZtOUZZbmtsNVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jZmE3YzMtZjBjOC00NjIyLThhNDct
OWFiMjZiMjY2YWE3LzEvZzhqUUhLOHJCMUhRTmNVM1ZtOUZZbmtsNVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jZmE3YzMtZjBjOC00NjIyLThhNDctOWFiMjZiMjY2YWE3
LzEvZzhqUUhLOHJCMUhRTmNVM1ZtOUZZbmtsNVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvBs+Wo9
FoaKN2wYrewwvLR85L6qt4cUp39q66qpZDUHIDrnNQdodv19tifmWNfkra/qbRqF
lUYvkFEEKOklLBQDTGWJhr+FfRmgzYu8gPvbRXz/p99yp74FADMpOtxkEmsU/Czj
p30Frl30IwwlxHYNZvFoLCK38/65axChTkEujV01Ez7hRBWmiE+MdRg28PHfh5f+
YPsdJla5a5k8F8hgFYtP9UPbERUS7KyrC5wQew5wcH6rc08Y1sD4eZSQZpkTuWHA
NnMgEQJK6cOQjYXgam/gTyxAXSUl9qNBbgsLWMpSSGHqLGXGtOE8ni/r13Sp6HN3
i5e4dWHxZvfKBg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:15:04 2025 by rpki-client