Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File:                     C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier:          i9IMOB0Rx3mSR99TzfVbq+4SemNaZyNNOl+gblA1pVU=
Subject key identifier:   B6:ED:77:5D:E3:AC:D0:91:B7:E5:13:A9:8F:5E:E1:D6:C7:BC:25:AD
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer:       /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial:       0198D54E8C8AFA5CA2C8385DE1CF48C689D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number:          0AB6
Signing time:             Sat 23 Aug 2025 05:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:31 +0000
Files and hashes:         1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: MgcZPS1+MSV87qp5LJdzfN0iCCu+MqM17gMABH6M7jo=)
                          2: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (hash: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:8c:8a:fa:5c:a2:c8:38:5d:e1:cf:48:c6:89:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
        Validity
            Not Before: Aug 23 05:02:31 2025 GMT
            Not After : Aug 24 05:02:31 2025 GMT
        Subject: CN=b6ed775de3acd091b7e513a98f5ee1d6c7bc25ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:e1:da:ef:2f:bc:da:56:1b:84:30:de:ce:
                    23:96:a8:e2:2f:3a:e7:a5:3c:67:24:8d:ee:f7:8d:
                    98:47:21:72:ba:6f:90:ac:50:62:82:af:73:e3:b0:
                    3e:f4:8d:81:45:78:1c:3a:a1:9b:b0:97:df:f5:e9:
                    0c:cd:e5:c9:02:b6:08:b8:e7:50:a4:32:c7:ef:6b:
                    97:48:1c:51:d1:6e:86:98:83:b5:8d:a0:3b:75:3f:
                    0d:30:21:05:67:ba:f0:7a:3c:1a:51:35:22:15:b6:
                    e2:f0:0e:0f:dc:e1:10:f1:87:4e:f7:41:33:9e:96:
                    89:87:3f:c0:6f:0c:c4:cb:ee:a7:fd:f2:7b:17:c2:
                    99:e1:44:74:9d:d9:cb:41:da:3b:71:0c:66:0e:2e:
                    a2:df:d8:7d:66:2b:bf:a6:0f:cc:18:e4:90:c2:84:
                    4e:f6:cf:5a:44:aa:d1:b5:bb:ee:f6:3d:22:34:99:
                    22:2a:08:f1:b5:f1:02:3c:86:2f:a3:b6:5d:bc:aa:
                    ec:1e:4f:4a:02:c8:83:ae:81:87:3c:3a:c3:b1:11:
                    da:c4:2e:db:19:cd:2a:65:27:d0:08:c3:99:b0:5a:
                    f1:15:90:eb:9e:13:d0:c6:db:05:89:dd:ef:2c:53:
                    ff:3d:27:6b:c1:51:13:d6:64:3f:7b:91:f2:14:ac:
                    31:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:ED:77:5D:E3:AC:D0:91:B7:E5:13:A9:8F:5E:E1:D6:C7:BC:25:AD
            X509v3 Authority Key Identifier:
                keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:35:32:13:bf:89:c7:7c:47:5a:11:14:38:d8:b9:67:93:b7:
         4c:7b:11:85:ad:83:ed:e6:c8:5d:49:71:a7:c3:71:8b:47:3a:
         f3:cd:15:6c:7b:c1:26:e9:a4:4d:bd:79:ce:fc:f8:68:a8:34:
         03:21:9b:32:4a:5b:a1:ca:ed:7a:ac:db:49:bc:12:a1:01:91:
         6c:28:4e:6e:7f:06:f6:37:00:df:80:49:fa:bd:d1:fe:12:25:
         e4:73:19:44:9c:55:d9:20:83:40:a5:71:9b:0a:92:42:40:de:
         de:8d:96:5f:ac:10:e2:b6:37:62:e4:dc:9f:05:a6:7d:47:fa:
         1d:fe:34:9a:d9:4e:f2:bb:37:43:76:a4:d8:c0:bf:ed:23:bc:
         64:27:c7:09:cd:14:8a:60:4a:1c:da:df:09:8a:9c:4a:15:55:
         fa:f8:2a:fc:c1:97:e3:5c:25:e8:42:21:ef:2a:73:ad:5e:c1:
         c3:c3:97:83:53:2d:ce:93:99:82:58:e6:d9:65:1b:90:f8:04:
         71:c8:b4:c5:93:90:7e:ef:49:e5:b7:5c:35:c1:18:ef:65:ed:
         b7:72:45:48:16:c2:73:03:5d:00:11:0c:9a:26:02:28:07:fe:
         23:fb:27:1d:83:10:15:0c:a5:3b:f9:cb:ca:ae:ac:bc:87:cf:
         ec:75:80:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVToyK+lyiyDhd4c9IxonTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzcxZGYxNmRkMGI0N2NkMGFmOTcxZjE0ZDFkY2E2ZDgy
MDZiYjEwHhcNMjUwODIzMDUwMjMxWhcNMjUwODI0MDUwMjMxWjAzMTEwLwYDVQQD
EyhiNmVkNzc1ZGUzYWNkMDkxYjdlNTEzYTk4ZjVlZTFkNmM3YmMyNWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt43h2u8vvNpWG4Qw3s4jlqjiLzrn
pTxnJI3u942YRyFyum+QrFBigq9z47A+9I2BRXgcOqGbsJff9ekMzeXJArYIuOdQ
pDLH72uXSBxR0W6GmIO1jaA7dT8NMCEFZ7rwejwaUTUiFbbi8A4P3OEQ8YdO90Ez
npaJhz/AbwzEy+6n/fJ7F8KZ4UR0ndnLQdo7cQxmDi6i39h9Ziu/pg/MGOSQwoRO
9s9aRKrRtbvu9j0iNJkiKgjxtfECPIYvo7ZdvKrsHk9KAsiDroGHPDrDsRHaxC7b
Gc0qZSfQCMOZsFrxFZDrnhPQxtsFid3vLFP/PSdrwVET1mQ/e5HyFKwxywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbtd13jrNCRt+UTqY9e4dbHvCWtMB8GA1UdIwQY
MBaAFAvHHfFt0LR80K+XHxTR3KbYIGuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2It
NWI0OTNhYTA3MjY4LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2ItNWI0OTNhYTA3MjY4
LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTUyE7+J
x3xHWhEUONi5Z5O3THsRha2D7ebIXUlxp8Nxi0c6880VbHvBJumkTb15zvz4aKg0
AyGbMkpbocrteqzbSbwSoQGRbChObn8G9jcA34BJ+r3R/hIl5HMZRJxV2SCDQKVx
mwqSQkDe3o2WX6wQ4rY3YuTcnwWmfUf6Hf40mtlO8rs3Q3ak2MC/7SO8ZCfHCc0U
imBKHNrfCYqcShVV+vgq/MGX41wl6EIh7ypzrV7Bw8OXg1MtzpOZgljm2WUbkPgE
cci0xZOQfu9J5bdcNcEY72Xtt3JFSBbCcwNdABEMmiYCKAf+I/snHYMQFQylO/nL
yq6svIfP7HWAxQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:06 2025 by rpki-client