Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
File:                     Obi08Elz83zGn7fCNGj5U_FJQg4.mft (raw, json)
Hash identifier:          GlyakYbp4Sy4IARM7oO01a+lMg1Ckgtx3nWf1PysHuM=
Subject key identifier:   8C:E1:58:4F:34:D1:2F:47:0B:EA:C8:FE:8C:3A:E3:E5:0C:3D:80:5D
Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
Certificate issuer:       /CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Certificate serial:       0198D4E02834490A8C3476DD6A0C5DA86172
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 03:01:56 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:56 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:56 +0000
Files and hashes:         1: K5dYt7lb9gS6Y4bTS8duva31gvM.roa (hash: JfUFTyGmQsKMLzEfnb5KXENtjRP1+B6pBuw/0roQoKU=)
                          2: Obi08Elz83zGn7fCNGj5U_FJQg4.crl (hash: vqbsfsyFQi+qPlf2Jr8jlUS/YRwcAgHBnQUfHhdhtE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:28:34:49:0a:8c:34:76:dd:6a:0c:5d:a8:61:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e
        Validity
            Not Before: Aug 23 03:01:56 2025 GMT
            Not After : Aug 24 03:01:56 2025 GMT
        Subject: CN=8ce1584f34d12f470beac8fe8c3ae3e50c3d805d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d5:89:4e:53:95:80:3b:77:30:92:e9:e5:15:
                    bf:dd:2c:60:f1:a2:87:30:f4:1b:6d:a1:fc:1a:8c:
                    2d:1d:18:cc:09:34:5d:61:1b:b2:c5:ee:8b:bf:16:
                    59:c1:47:51:02:bf:3e:b1:96:0c:ec:46:53:bc:3d:
                    ec:70:10:2f:ac:99:e6:96:7e:ba:ee:d1:2e:6b:37:
                    06:ac:a1:97:a3:d9:2b:95:df:49:54:44:bf:8a:1b:
                    bd:57:86:0b:4c:17:a1:b0:2c:77:da:e2:d1:37:c2:
                    c3:5c:3c:3b:bc:51:cc:94:98:13:59:6e:72:8f:28:
                    8e:2b:54:f7:9f:24:bb:5b:6d:42:d5:d0:3e:59:d1:
                    a4:d1:86:6a:bc:12:c1:85:1d:0d:3d:12:d7:64:59:
                    ef:a1:db:fa:b3:71:d0:ff:a9:82:fd:61:27:e1:ca:
                    89:79:9b:59:1c:5c:7d:bb:e8:ad:88:1e:47:a3:a0:
                    37:d2:36:6b:17:47:c3:71:54:97:56:90:28:6d:61:
                    67:42:67:d6:73:92:89:04:60:47:77:a2:f6:e5:f0:
                    10:b5:c9:39:71:b6:fc:76:7d:c9:be:e0:90:c2:eb:
                    bf:c5:05:fa:93:cb:1a:2b:09:d2:c9:ec:c3:8a:bb:
                    8e:b9:c8:4c:af:3d:14:20:e1:0c:76:e5:f5:5d:16:
                    d1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E1:58:4F:34:D1:2F:47:0B:EA:C8:FE:8C:3A:E3:E5:0C:3D:80:5D
            X509v3 Authority Key Identifier:
                keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f3:c0:3d:83:c1:61:a1:6f:9e:e3:6b:f1:07:0e:83:bb:09:
         3d:6e:25:78:30:4f:9c:29:6d:58:69:a0:d4:3a:50:f9:59:95:
         7e:42:0d:74:eb:03:d3:b8:d9:1d:ed:c2:8f:28:1b:ef:73:e5:
         28:b0:5e:42:f2:f1:35:9f:df:a2:24:19:29:41:a0:b9:31:8f:
         fa:9e:91:57:ff:de:ad:18:71:fc:21:2a:c3:44:72:69:f7:00:
         8a:98:5d:2e:92:2c:b0:ee:bb:4a:18:4b:f3:e9:c1:b6:17:a0:
         41:5f:e1:87:24:2c:ae:73:75:68:43:41:4c:c2:05:fc:f5:24:
         d8:fd:ef:e0:d0:fd:75:0f:91:55:a8:da:56:02:50:b4:a7:8d:
         23:e0:45:8a:6f:38:4d:38:3d:2b:39:9b:dc:f5:99:ad:6b:dd:
         04:a2:58:47:af:0d:5c:1b:5f:d7:af:1f:6b:51:ec:5a:db:ac:
         ca:9d:d3:53:2c:05:62:9b:b5:57:cb:f1:6b:55:70:de:28:94:
         a5:5c:a2:98:61:83:6b:da:dd:f0:72:5b:16:ff:24:dc:77:5d:
         63:f3:be:a0:e5:0c:73:ba:07:ce:d8:89:f7:66:a9:64:30:c5:
         40:5c:33:28:da:39:d6:c2:bc:55:76:a1:aa:37:a9:0b:58:75:
         2f:18:0a:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Cg0SQqMNHbdagxdqGFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YjhiNGYwNDk3M2YzN2NjNjlmYjdjMjM0NjhmOTUzZjE0
OTQyMGUwHhcNMjUwODIzMDMwMTU2WhcNMjUwODI0MDMwMTU2WjAzMTEwLwYDVQQD
Eyg4Y2UxNTg0ZjM0ZDEyZjQ3MGJlYWM4ZmU4YzNhZTNlNTBjM2Q4MDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNWJTlOVgDt3MJLp5RW/3Sxg8aKH
MPQbbaH8GowtHRjMCTRdYRuyxe6LvxZZwUdRAr8+sZYM7EZTvD3scBAvrJnmln66
7tEuazcGrKGXo9krld9JVES/ihu9V4YLTBehsCx32uLRN8LDXDw7vFHMlJgTWW5y
jyiOK1T3nyS7W21C1dA+WdGk0YZqvBLBhR0NPRLXZFnvodv6s3HQ/6mC/WEn4cqJ
eZtZHFx9u+itiB5Ho6A30jZrF0fDcVSXVpAobWFnQmfWc5KJBGBHd6L25fAQtck5
cbb8dn3JvuCQwuu/xQX6k8saKwnSyezDiruOuchMrz0UIOEMduX1XRbRZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzhWE800S9HC+rI/ow64+UMPYBdMB8GA1UdIwQY
MBaAFDm4tPBJc/N8xp+3wjRo+VPxSUIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84YWNjNGItZTBhMi00ZDIxLWI4NjQt
OTkwMzA3ZDIwM2M4LzEvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi84YWNjNGItZTBhMi00ZDIxLWI4NjQtOTkwMzA3ZDIwM2M4
LzEvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/PAPYPB
YaFvnuNr8QcOg7sJPW4leDBPnCltWGmg1DpQ+VmVfkINdOsD07jZHe3Cjygb73Pl
KLBeQvLxNZ/foiQZKUGguTGP+p6RV//erRhx/CEqw0RyafcAiphdLpIssO67ShhL
8+nBthegQV/hhyQsrnN1aENBTMIF/PUk2P3v4ND9dQ+RVajaVgJQtKeNI+BFim84
TTg9Kzmb3PWZrWvdBKJYR68NXBtf168fa1HsWtusyp3TUywFYpu1V8vxa1Vw3iiU
pVyimGGDa9rd8HJbFv8k3HddY/O+oOUMc7oHztiJ92apZDDFQFwzKNo51sK8VXah
qjepC1h1LxgKWA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:26 2025 by rpki-client