Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
File:                     fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft (raw, json)
Hash identifier:          sbptzQVXlW/vLBpD/9RqV/w6CRGTvHJR8ZtZy+nPmRE=
Subject key identifier:   92:0D:C0:A1:A2:99:DF:58:F9:E7:CB:0E:1A:6B:9C:EE:6D:0B:F7:5B
Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
Certificate issuer:       /CN=7e9360205b48af4954566314230e6b1296d9aec4
Certificate serial:       0198D5840309E394C6EDA0B44272F6D77A6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
Manifest number:          0508
Signing time:             Sat 23 Aug 2025 06:00:55 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:55 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:55 +0000
Files and hashes:         1: 6Hs21ZDEU36A7XzHFbni9nG1_gs.roa (hash: uHRCtaCqTT6lc9BE9eOvMv5KtMPToXYAuWUFVX2JuWU=)
                          2: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl (hash: 8yUdlvzjgh9xazKz6pkWh/11VcB2Oi4eFY3/TrAeqvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:84:03:09:e3:94:c6:ed:a0:b4:42:72:f6:d7:7a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4
        Validity
            Not Before: Aug 23 06:00:55 2025 GMT
            Not After : Aug 24 06:00:55 2025 GMT
        Subject: CN=920dc0a1a299df58f9e7cb0e1a6b9cee6d0bf75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:4b:86:39:76:a2:15:ed:58:21:07:f3:65:
                    78:fe:87:0b:b2:b4:58:64:99:f2:f5:ea:05:c8:ec:
                    32:96:46:3e:86:35:b1:7d:48:d8:be:10:41:1a:68:
                    23:c6:fb:2d:84:90:ba:d7:bc:6f:47:2c:80:9c:af:
                    66:aa:ef:76:59:cb:59:78:a1:0e:48:61:87:c5:c0:
                    c5:da:25:36:a9:01:7c:34:24:a8:1a:f2:ad:de:29:
                    23:cf:2a:26:75:f2:8f:22:c3:a2:64:1a:32:55:f6:
                    c8:dd:7f:a1:04:d7:45:5a:dc:f4:95:45:7f:3a:9b:
                    57:98:41:60:b3:f4:c6:1e:3f:ba:a5:50:d0:49:ac:
                    77:18:6d:14:a1:1e:9b:a9:d7:6d:9e:6e:2c:a4:3c:
                    43:58:74:c5:5e:0a:8f:1d:ff:0d:ee:c0:65:18:6d:
                    19:4f:dd:03:49:d4:e8:08:cb:8e:64:37:2c:75:11:
                    bb:61:76:16:c3:d0:28:8c:82:47:66:51:8a:ca:40:
                    47:ed:e2:3e:e6:e5:9c:e6:a0:e5:de:9d:9b:3e:ee:
                    4f:ac:c3:92:a6:59:36:3e:7b:e9:c6:c9:fc:f8:04:
                    de:39:74:1c:db:c8:76:d3:98:b6:72:05:e1:fd:88:
                    b3:54:12:cc:1f:46:6e:05:2c:87:9f:d3:fd:6c:b8:
                    64:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0D:C0:A1:A2:99:DF:58:F9:E7:CB:0E:1A:6B:9C:EE:6D:0B:F7:5B
            X509v3 Authority Key Identifier:
                keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b8:58:47:d6:fa:2d:44:19:f2:be:55:c1:b0:8f:8a:48:e0:
         17:2d:75:fe:e9:37:aa:8e:3d:41:63:0d:33:a3:89:8e:27:dd:
         2b:b5:bd:d7:c1:5e:3a:43:d4:d2:97:c7:84:46:7a:c9:28:67:
         2a:c3:31:0f:ea:39:3e:41:17:64:9b:e3:1b:d0:a0:e9:80:46:
         09:f9:eb:6a:68:ec:94:2d:31:79:18:ba:c6:36:d1:bc:92:e9:
         64:63:6b:5f:36:d1:64:ef:26:73:f2:13:80:10:12:f5:3d:90:
         c4:f8:53:b8:70:bd:20:e1:cc:2f:4f:9e:79:ea:08:06:78:f6:
         3b:3e:bf:5d:67:18:11:e5:39:46:49:eb:53:bc:24:39:11:8c:
         ae:6b:ac:e1:2c:43:76:1e:53:70:88:7e:74:ac:49:40:bb:e3:
         31:45:ec:05:64:de:73:41:67:2c:32:fe:b9:2e:87:13:ea:f7:
         04:5e:53:90:e4:08:5a:c0:f9:bc:a1:91:8d:ab:1b:6f:de:bd:
         bf:a7:21:af:f9:19:9e:4b:63:7d:fe:23:a2:9f:3d:2c:fb:52:
         4c:da:c2:76:e2:8d:ec:5b:dd:74:5e:39:68:4a:98:d6:d4:29:
         8f:60:35:f3:75:7a:00:a5:de:80:1e:d4:22:9e:4d:9c:fb:cb:
         94:c1:43:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVhAMJ45TG7aC0QnL213prMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOTM2MDIwNWI0OGFmNDk1NDU2NjMxNDIzMGU2YjEyOTZk
OWFlYzQwHhcNMjUwODIzMDYwMDU1WhcNMjUwODI0MDYwMDU1WjAzMTEwLwYDVQQD
Eyg5MjBkYzBhMWEyOTlkZjU4ZjllN2NiMGUxYTZiOWNlZTZkMGJmNzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjNLhjl2ohXtWCEH82V4/ocLsrRY
ZJny9eoFyOwylkY+hjWxfUjYvhBBGmgjxvsthJC617xvRyyAnK9mqu92WctZeKEO
SGGHxcDF2iU2qQF8NCSoGvKt3ikjzyomdfKPIsOiZBoyVfbI3X+hBNdFWtz0lUV/
OptXmEFgs/TGHj+6pVDQSax3GG0UoR6bqddtnm4spDxDWHTFXgqPHf8N7sBlGG0Z
T90DSdToCMuOZDcsdRG7YXYWw9AojIJHZlGKykBH7eI+5uWc5qDl3p2bPu5PrMOS
plk2Pnvpxsn8+ATeOXQc28h205i2cgXh/YizVBLMH0ZuBSyHn9P9bLhk+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJINwKGimd9Y+efLDhprnO5tC/dbMB8GA1UdIwQY
MBaAFH6TYCBbSK9JVFZjFCMOaxKW2a7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84YTIyZjEtZTRmZi00NDY5LTgyZWIt
ZDMwZWE5NjhiZmE3LzEvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84YTIyZjEtZTRmZi00NDY5LTgyZWItZDMwZWE5NjhiZmE3
LzEvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrhYR9b6
LUQZ8r5VwbCPikjgFy11/uk3qo49QWMNM6OJjifdK7W918FeOkPU0pfHhEZ6yShn
KsMxD+o5PkEXZJvjG9Cg6YBGCfnramjslC0xeRi6xjbRvJLpZGNrXzbRZO8mc/IT
gBAS9T2QxPhTuHC9IOHML0+eeeoIBnj2Oz6/XWcYEeU5RknrU7wkORGMrmus4SxD
dh5TcIh+dKxJQLvjMUXsBWTec0FnLDL+uS6HE+r3BF5TkOQIWsD5vKGRjasbb969
v6chr/kZnktjff4jop89LPtSTNrCduKN7FvddF45aEqY1tQpj2A183V6AKXegB7U
Ip5NnPvLlMFDDQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:26:58 2025 by rpki-client