Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
File:                     jAz2W63ZqIrMwydQC1_ynR_wkZY.mft (raw, json)
Hash identifier:          16gMarWiz8ugo28lruLvAa8TmfmsqTL67byo0saYRZY=
Subject key identifier:   9A:8B:4A:B7:F7:6E:B9:E3:5E:D4:50:F3:45:FF:9F:35:B9:13:58:37
Authority key identifier: 8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96
Certificate issuer:       /CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
Certificate serial:       0198D5835C1558D11096304AFF537D848C70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
Manifest number:          FC
Signing time:             Sat 23 Aug 2025 06:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:12 +0000
Files and hashes:         1: Odu_8Z8wYQ4rAwGBZ2rfmaKWPvY.roa (hash: G+0rnOlwTF853BxAQkBgLndsmH7cjPaqnqIy5TqAej8=)
                          2: jAz2W63ZqIrMwydQC1_ynR_wkZY.crl (hash: MbDzAgg8EA1lQIu9rhXL4US4+9Z5GOddAAtktDhzVHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:5c:15:58:d1:10:96:30:4a:ff:53:7d:84:8c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
        Validity
            Not Before: Aug 23 06:00:12 2025 GMT
            Not After : Aug 24 06:00:12 2025 GMT
        Subject: CN=9a8b4ab7f76eb9e35ed450f345ff9f35b9135837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:35:01:0b:81:c1:bf:e7:60:f8:ec:79:3f:
                    56:ac:ad:bb:ad:0c:64:0d:18:89:ab:ce:cf:5a:aa:
                    e5:a9:94:8f:87:c3:f6:2c:d0:c4:ef:b9:5a:f5:89:
                    c0:67:ee:50:c8:3d:0b:13:36:df:0f:9a:37:16:ec:
                    87:4a:4f:9f:fa:c8:47:16:d9:28:68:50:e3:50:6d:
                    e8:59:51:01:b2:0a:14:c8:60:d3:1d:00:94:64:73:
                    a5:f6:48:58:14:01:ad:3c:fe:58:e4:4c:75:33:9f:
                    d2:bd:56:db:48:f7:58:b1:40:c0:bf:8b:0b:c9:13:
                    31:e5:0a:2b:65:d7:db:ee:45:25:29:6d:65:8d:ab:
                    b2:80:ee:f3:dc:8a:3b:61:f1:83:62:ba:92:dd:14:
                    8e:a4:eb:e8:3e:42:e5:e2:07:20:5e:e9:0d:92:c7:
                    4d:47:ac:2b:cb:c4:12:02:d5:75:27:ce:10:3f:8b:
                    6b:3b:01:b0:9a:83:d6:db:6d:ca:8d:59:1b:da:e4:
                    78:e8:d5:95:11:6d:85:b4:6c:b4:cd:21:b4:ef:8d:
                    4b:39:16:79:6b:fa:6e:ab:d4:a2:ce:4b:57:1b:ff:
                    db:d9:ff:74:45:10:27:25:c8:cb:8f:08:0b:da:9a:
                    b1:be:9a:75:1a:1c:e3:e3:7c:5f:63:28:06:d9:a4:
                    f7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8B:4A:B7:F7:6E:B9:E3:5E:D4:50:F3:45:FF:9F:35:B9:13:58:37
            X509v3 Authority Key Identifier:
                keyid:8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:4b:f2:4c:d1:26:84:e8:41:36:57:39:57:94:c5:76:4a:22:
         00:a8:04:32:9c:74:79:5d:69:0f:9a:7e:ab:71:b4:cc:0b:e5:
         06:91:7f:c7:6e:d1:f9:a5:b4:92:37:4f:40:4a:93:6b:a1:14:
         b7:ef:28:a3:37:d6:51:84:60:67:44:98:a7:86:04:f9:39:c1:
         91:c1:03:b9:dc:72:69:f2:3e:d2:3b:85:80:7a:52:44:51:0f:
         bb:5a:29:87:d3:b8:2f:7d:40:e4:de:d2:f8:87:14:e5:31:ec:
         d7:38:6b:fb:ab:b2:77:ef:5e:51:8d:7d:d3:7b:c9:33:75:84:
         24:85:14:28:ca:35:c7:de:97:7a:8e:25:4d:7a:38:f6:7c:82:
         12:43:79:0c:55:eb:0a:4c:ff:76:bf:cd:80:06:ab:4a:2c:31:
         d0:0a:ab:c0:aa:28:cc:ea:02:c1:9a:ff:b6:15:0f:9c:64:8d:
         1f:8f:16:55:3d:1e:2d:c9:60:de:35:5e:b7:70:d3:43:33:24:
         23:0b:2a:b8:cf:c1:6f:4b:02:9a:41:c4:33:98:dd:7a:10:5c:
         3f:85:b5:33:a9:58:64:8b:61:9c:b0:1d:ea:be:a6:ed:91:a7:
         54:88:82:fe:1d:69:2f:e5:6b:f6:43:a2:eb:11:23:5c:2e:81:
         6b:e8:d8:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg1wVWNEQljBK/1N9hIxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMGNmNjViYWRkOWE4OGFjY2MzMjc1MDBiNWZmMjlkMWZm
MDkxOTYwHhcNMjUwODIzMDYwMDEyWhcNMjUwODI0MDYwMDEyWjAzMTEwLwYDVQQD
Eyg5YThiNGFiN2Y3NmViOWUzNWVkNDUwZjM0NWZmOWYzNWI5MTM1ODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdY1AQuBwb/nYPjseT9WrK27rQxk
DRiJq87PWqrlqZSPh8P2LNDE77la9YnAZ+5QyD0LEzbfD5o3FuyHSk+f+shHFtko
aFDjUG3oWVEBsgoUyGDTHQCUZHOl9khYFAGtPP5Y5Ex1M5/SvVbbSPdYsUDAv4sL
yRMx5QorZdfb7kUlKW1ljauygO7z3Io7YfGDYrqS3RSOpOvoPkLl4gcgXukNksdN
R6wry8QSAtV1J84QP4trOwGwmoPW223KjVkb2uR46NWVEW2FtGy0zSG0741LORZ5
a/puq9SizktXG//b2f90RRAnJcjLjwgL2pqxvpp1Ghzj43xfYygG2aT3KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqLSrf3brnjXtRQ80X/nzW5E1g3MB8GA1UdIwQY
MBaAFIwM9lut2aiKzMMnUAtf8p0f8JGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmQ4YzAtZDdhZi00ZGIxLTllMDQt
OTc1YTgwZDBkOTNmLzEvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kZmQ4YzAtZDdhZi00ZGIxLTllMDQtOTc1YTgwZDBkOTNm
LzEvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUvyTNEm
hOhBNlc5V5TFdkoiAKgEMpx0eV1pD5p+q3G0zAvlBpF/x27R+aW0kjdPQEqTa6EU
t+8oozfWUYRgZ0SYp4YE+TnBkcEDudxyafI+0juFgHpSRFEPu1oph9O4L31A5N7S
+IcU5THs1zhr+6uyd+9eUY1903vJM3WEJIUUKMo1x96Xeo4lTXo49nyCEkN5DFXr
Ckz/dr/NgAarSiwx0AqrwKoozOoCwZr/thUPnGSNH48WVT0eLclg3jVet3DTQzMk
IwsquM/Bb0sCmkHEM5jdehBcP4W1M6lYZIthnLAd6r6m7ZGnVIiC/h1pL+Vr9kOi
6xEjXC6Ba+jYQQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:37 2025 by rpki-client