Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
File:                     mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft (raw, json)
Hash identifier:          V7XxCQKTCO+FsJKF8E2B3G0pDcl8TsJ4aEj3H7XO5Wc=
Subject key identifier:   8E:59:B5:F9:1E:80:DA:89:1F:74:78:00:27:B8:E8:11:1D:28:6A:CE
Authority key identifier: 9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8
Certificate issuer:       /CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8
Certificate serial:       0198D6CDF0055CE97097CEFBE5211A591402
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
Manifest number:          0185
Signing time:             Sat 23 Aug 2025 12:01:17 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:17 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:17 +0000
Files and hashes:         1: W8iTYjU2Evc2p5yDOFlKPLpAZr0.roa (hash: +1HDTD3+F6qn6zfwt9WbeLBT9ppZuriPW/cOhjwp96g=)
                          2: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl (hash: dMplniM6VxfVzJtjagRaCVWYxeoBAO29UQd7gYHOeN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:f0:05:5c:e9:70:97:ce:fb:e5:21:1a:59:14:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8
        Validity
            Not Before: Aug 23 12:01:17 2025 GMT
            Not After : Aug 24 12:01:17 2025 GMT
        Subject: CN=8e59b5f91e80da891f74780027b8e8111d286ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:80:bf:4d:e1:73:92:81:50:6b:79:e0:04:
                    fd:0c:57:33:46:1f:de:05:34:a9:f7:00:d6:46:0b:
                    41:f8:3f:a5:97:56:b2:db:40:19:b3:e7:e4:2b:ad:
                    6a:66:a3:cc:df:83:e7:7d:fa:7b:58:31:d8:19:69:
                    eb:bf:f4:fc:b9:2d:5e:0f:cb:6a:8d:a6:de:c0:70:
                    91:a2:84:77:65:e9:52:9e:66:a3:0f:22:03:0a:f4:
                    d9:d1:56:fb:f7:8a:38:e0:1f:56:cf:3f:7d:79:18:
                    7e:4a:c3:cc:57:e0:54:37:ee:4d:ab:b1:37:73:0d:
                    5b:ae:2a:79:88:cf:7f:d9:cd:4f:74:f6:7a:83:49:
                    61:c4:b2:22:78:00:c8:67:9a:9b:ab:3c:0f:8d:93:
                    02:59:ff:a3:09:7f:d7:85:8b:d1:43:8f:70:94:3a:
                    c1:e8:ec:ed:f2:d0:92:13:7a:18:cc:a4:06:07:16:
                    95:0c:87:78:8a:4d:91:18:6e:3e:96:73:43:6f:6b:
                    e1:7e:e7:6e:57:c0:31:49:da:35:3b:24:63:d9:c5:
                    e1:a4:80:7d:be:61:bd:c1:56:65:58:c6:9d:0c:3d:
                    8d:74:00:85:76:07:33:0e:ff:65:6e:a5:74:68:cf:
                    c1:76:48:44:fc:18:b7:d0:8a:cb:a1:a5:da:30:79:
                    7f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:59:B5:F9:1E:80:DA:89:1F:74:78:00:27:B8:E8:11:1D:28:6A:CE
            X509v3 Authority Key Identifier:
                keyid:9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:a9:55:69:79:b8:82:d1:9c:91:df:1f:90:7d:7d:fc:cc:
         6c:5a:d0:cd:f8:4a:1c:e5:31:b5:29:01:05:8b:06:a6:1c:14:
         74:f5:26:dd:6c:44:df:a5:e0:d3:af:59:36:31:3b:07:90:f4:
         1b:ef:80:26:e2:98:9e:e8:57:99:ba:91:a1:30:97:5f:13:2a:
         37:1b:85:3a:66:3f:25:f5:78:c8:ee:80:85:81:60:87:ee:29:
         35:ce:b4:59:6f:18:b6:24:99:43:15:87:e7:5e:cb:5c:0f:27:
         23:b4:35:a1:66:23:78:21:8c:17:3e:ae:bd:7b:9b:19:eb:29:
         aa:9d:54:b9:f0:ec:fa:0f:7c:a9:6f:2d:03:d1:4a:f6:e2:34:
         72:a7:c8:54:69:0a:b2:78:1a:9a:c2:9c:af:65:08:aa:5a:f4:
         a1:fb:23:d8:5b:ae:e8:94:61:fd:1a:46:a9:0b:0a:86:e8:3f:
         95:6a:4e:2e:39:cd:07:7e:54:8b:6f:4d:f9:2a:84:71:1c:4e:
         17:a7:83:6d:e6:03:49:b0:c5:49:70:71:5a:bf:5a:7e:da:fc:
         3a:7f:07:88:9e:35:4c:83:de:6b:9c:8f:bc:73:18:d6:68:31:
         79:7e:f0:2a:28:8f:03:14:b7:01:78:fe:18:3d:fa:9a:d4:57:
         a0:eb:0c:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzfAFXOlwl8775SEaWRQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzAwNGZkYmMxZDllM2EzYzFlN2UwNjU5MWFjYTRiOTRi
NmMyZjgwHhcNMjUwODIzMTIwMTE3WhcNMjUwODI0MTIwMTE3WjAzMTEwLwYDVQQD
Eyg4ZTU5YjVmOTFlODBkYTg5MWY3NDc4MDAyN2I4ZTgxMTFkMjg2YWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMOAv03hc5KBUGt54AT9DFczRh/e
BTSp9wDWRgtB+D+ll1ay20AZs+fkK61qZqPM34Pnffp7WDHYGWnrv/T8uS1eD8tq
jabewHCRooR3ZelSnmajDyIDCvTZ0Vb794o44B9Wzz99eRh+SsPMV+BUN+5Nq7E3
cw1brip5iM9/2c1PdPZ6g0lhxLIieADIZ5qbqzwPjZMCWf+jCX/XhYvRQ49wlDrB
6Ozt8tCSE3oYzKQGBxaVDId4ik2RGG4+lnNDb2vhfuduV8AxSdo1OyRj2cXhpIB9
vmG9wVZlWMadDD2NdACFdgczDv9lbqV0aM/BdkhE/Bi30IrLoaXaMHl/hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5ZtfkegNqJH3R4ACe46BEdKGrOMB8GA1UdIwQY
MBaAFJpwBP28HZ46PB5+BlkaykuUtsL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mY2E4MWQtMzhhNS00YzMyLWIxNjMt
YjdmYTM5M2RiMWQxLzEvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mY2E4MWQtMzhhNS00YzMyLWIxNjMtYjdmYTM5M2RiMWQx
LzEvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/SpVWl5
uILRnJHfH5B9ffzMbFrQzfhKHOUxtSkBBYsGphwUdPUm3WxE36Xg069ZNjE7B5D0
G++AJuKYnuhXmbqRoTCXXxMqNxuFOmY/JfV4yO6AhYFgh+4pNc60WW8YtiSZQxWH
517LXA8nI7Q1oWYjeCGMFz6uvXubGespqp1UufDs+g98qW8tA9FK9uI0cqfIVGkK
sngamsKcr2UIqlr0ofsj2Fuu6JRh/RpGqQsKhug/lWpOLjnNB35Ui29N+SqEcRxO
F6eDbeYDSbDFSXBxWr9aftr8On8HiJ41TIPea5yPvHMY1mgxeX7wKiiPAxS3AXj+
GD36mtRXoOsMvw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:54 2025 by rpki-client