Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
File:                     S_2cFAbIyhL_UAsf1MgAQUai2ks.mft (raw, json)
Hash identifier:          Jj9EPvFPNLFKCn6WUYgvKg+ydlN9EMM2v/0kSfF8P0Q=
Subject key identifier:   24:7C:75:CD:FB:6A:2E:10:0D:A9:FF:31:ED:CD:74:DB:21:73:C3:19
Authority key identifier: 4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
Certificate issuer:       /CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Certificate serial:       0198D4A7D06B896AEF425053D2EF658628BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
Manifest number:          01CE
Signing time:             Sat 23 Aug 2025 02:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:24 +0000
Files and hashes:         1: S_2cFAbIyhL_UAsf1MgAQUai2ks.crl (hash: qw8s/eWK0zVJPzqi1JDSUzdf5Pq5WMuHJ8p3igliVzM=)
                          2: nMfaA-8pTlQ2Ik01XjOzaXsz8S4.roa (hash: 9j/+zG1+gdxJdHggAHxvXOVulCvMT9Y+f9TRZ3Vf7+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:d0:6b:89:6a:ef:42:50:53:d2:ef:65:86:28:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
        Validity
            Not Before: Aug 23 02:00:24 2025 GMT
            Not After : Aug 24 02:00:24 2025 GMT
        Subject: CN=247c75cdfb6a2e100da9ff31edcd74db2173c319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8b:b3:77:37:d5:81:1d:21:ef:b3:f2:33:cf:
                    cd:45:87:66:be:eb:b8:1f:0c:22:91:3d:75:b2:c3:
                    b7:30:c1:0f:f6:f4:d4:70:ac:33:43:7c:95:27:6e:
                    fc:36:42:e9:79:d9:9c:a2:98:31:56:39:86:39:07:
                    75:51:e6:c1:6f:c4:a9:bb:de:be:ef:33:36:5e:74:
                    b5:a6:13:dd:c5:0b:b9:d9:02:61:f8:88:b1:6b:79:
                    15:3b:0e:cb:e8:04:0d:78:68:0c:f1:ed:e8:00:4c:
                    b2:a4:da:c7:b6:83:49:86:7d:09:60:f0:12:b9:5e:
                    1d:2c:26:3f:cd:a3:d4:85:11:87:07:ec:4a:14:2c:
                    81:8f:04:e9:0d:60:fe:4c:92:56:e6:a4:42:bc:54:
                    48:cc:cf:5d:5a:95:13:e4:01:11:d6:de:a6:b3:95:
                    e2:0c:09:53:47:4e:32:74:05:a9:92:aa:5a:3c:4c:
                    8f:e4:7d:70:b9:dc:80:24:f7:da:4a:20:37:68:47:
                    79:0d:1c:cd:43:5c:dc:bc:85:91:ae:36:35:6a:49:
                    fb:36:75:28:cb:28:e7:49:4f:cf:23:d4:7e:bc:da:
                    bb:be:3e:da:61:0e:6d:5a:74:3b:41:e8:bd:d0:99:
                    48:4b:1b:c4:61:e4:1b:25:94:ae:0b:12:e5:58:7e:
                    e1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7C:75:CD:FB:6A:2E:10:0D:A9:FF:31:ED:CD:74:DB:21:73:C3:19
            X509v3 Authority Key Identifier:
                keyid:4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:bf:98:4e:bb:9d:c8:19:c6:ec:54:e5:25:ae:7c:73:91:63:
         8b:a6:71:68:f8:9f:7e:08:4e:97:02:90:fe:fa:f1:be:da:75:
         f7:64:ce:62:2b:bf:48:e1:e7:b2:03:9b:9a:5a:ce:e4:ff:a2:
         a7:f8:d4:5a:0e:ca:b7:25:5a:be:4a:78:13:d0:e9:78:86:d1:
         d0:ed:e9:63:62:f6:31:2c:94:6f:ce:3f:ec:f9:81:ef:f1:eb:
         4d:0c:12:be:74:8c:50:d7:8e:88:29:76:f8:d2:3a:04:bd:b0:
         45:b7:ed:ab:31:e6:ca:04:e3:b1:59:9e:8e:c7:f8:18:4b:95:
         15:37:42:f8:16:78:8e:c7:fa:a9:85:b6:11:f7:81:49:82:3d:
         7d:f5:d1:e5:f2:2b:e8:16:95:5e:a9:bf:25:a2:c6:09:95:3f:
         be:71:95:8b:f5:21:0f:ea:fa:21:21:bd:d1:67:12:37:d9:3c:
         47:bd:15:e8:1f:f6:b4:46:99:73:87:56:fb:72:b5:14:4c:a5:
         34:53:97:79:d3:25:a3:9e:6c:9e:97:17:75:ea:b8:69:22:74:
         33:2c:a4:9d:5a:65:34:ae:ac:aa:a2:8b:ad:e3:a9:4a:5f:de:
         75:61:df:72:d9:00:3f:ab:1e:ba:71:83:8f:56:65:e6:70:e7:
         6a:22:34:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp9BriWrvQlBT0u9lhii6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZmQ5YzE0MDZjOGNhMTJmZjUwMGIxZmQ0YzgwMDQxNDZh
MmRhNGIwHhcNMjUwODIzMDIwMDI0WhcNMjUwODI0MDIwMDI0WjAzMTEwLwYDVQQD
EygyNDdjNzVjZGZiNmEyZTEwMGRhOWZmMzFlZGNkNzRkYjIxNzNjMzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwouzdzfVgR0h77PyM8/NRYdmvuu4
HwwikT11ssO3MMEP9vTUcKwzQ3yVJ278NkLpedmcopgxVjmGOQd1UebBb8Spu96+
7zM2XnS1phPdxQu52QJh+Iixa3kVOw7L6AQNeGgM8e3oAEyypNrHtoNJhn0JYPAS
uV4dLCY/zaPUhRGHB+xKFCyBjwTpDWD+TJJW5qRCvFRIzM9dWpUT5AER1t6ms5Xi
DAlTR04ydAWpkqpaPEyP5H1wudyAJPfaSiA3aEd5DRzNQ1zcvIWRrjY1akn7NnUo
yyjnSU/PI9R+vNq7vj7aYQ5tWnQ7Qei90JlISxvEYeQbJZSuCxLlWH7h0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR8dc37ai4QDan/Me3NdNshc8MZMB8GA1UdIwQY
MBaAFEv9nBQGyMoS/1ALH9TIAEFGotpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWNiYjQtYWQwNi00ZDJlLThlNWQt
NDgzNDY1YjBjOGY1LzEvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84YWNiYjQtYWQwNi00ZDJlLThlNWQtNDgzNDY1YjBjOGY1
LzEvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgL+YTrud
yBnG7FTlJa58c5Fji6ZxaPiffghOlwKQ/vrxvtp192TOYiu/SOHnsgObmlrO5P+i
p/jUWg7KtyVavkp4E9DpeIbR0O3pY2L2MSyUb84/7PmB7/HrTQwSvnSMUNeOiCl2
+NI6BL2wRbftqzHmygTjsVmejsf4GEuVFTdC+BZ4jsf6qYW2EfeBSYI9ffXR5fIr
6BaVXqm/JaLGCZU/vnGVi/UhD+r6ISG90WcSN9k8R70V6B/2tEaZc4dW+3K1FEyl
NFOXedMlo55snpcXdeq4aSJ0MyyknVplNK6sqqKLreOpSl/edWHfctkAP6seunGD
j1Zl5nDnaiI02A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:57 2025 by rpki-client