Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
File:                     J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json)
Hash identifier:          e/KNQwSklEXb0JAGs0GnNHIOODzP3M82XzBf5JCPi30=
Subject key identifier:   7E:0E:C3:52:B8:2C:FC:08:65:10:B5:6C:FE:A0:7A:CB:2A:8E:C2:32
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Certificate issuer:       /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial:       0198D515B467423E32C4388ED9D2A30970D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
Manifest number:          0BA8
Signing time:             Sat 23 Aug 2025 04:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:26 +0000
Files and hashes:         1: 4Q0OMlDeRzDSOzAw8LxkvQaDF7E.roa (hash: U7GjqbV2dOQXajvpmYRAMgZ0b0HIaEV5bZmn2apsyWk=)
                          2: 8qaANOmA5TyfCX9SSE9fZHxlef0.roa (hash: KplUX/9PtnTld0cowtlt0wGVLtKYx94e6T0lw36I4cc=)
                          3: BhUouDec_qIuL9ykpJ14UlZA-QM.roa (hash: 8yFW2hqVAr5xf6x8b1tEfXwA8rQJPiCbK72VY0EAl8E=)
                          4: EKO2VruIZIopsZRQ3CXHkCE3JSk.roa (hash: qunaTjE+/mwu0fWd/ZfgfDbmRXuR1uxxrrYCXzWEMts=)
                          5: GIpX64dJ6HZBn7pYOJNMhZ7z2Wk.roa (hash: PjZLxgP6snPECokGBM26BsZLn+FL8XwBYAL6/1qDHeI=)
                          6: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: a/5UuTsA61mrQb6rz6ZghBmqrUwEAT90rPvOVWofJ4w=)
                          7: RXaHa7HQXaOor19kJAnyP5kxxU0.roa (hash: 1Jda3owwY018JsVQMIcmSKXtEtxhwgl86WeJsxIjRh4=)
                          8: oQEA3DnBm500dJBYY9a5KgZXmQQ.roa (hash: TzJe0tF7p07+4ocoJWUSx+pyInMnz9/Rqe/WjvQu6+Q=)
                          9: pJx5ZmGpMBzKdhva9TUAsBAh7rI.roa (hash: Uzf9k8Eo4hXFL8bxPdsqvqjBlJo7pRnh10Nmvo1NzMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:b4:67:42:3e:32:c4:38:8e:d9:d2:a3:09:70:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
        Validity
            Not Before: Aug 23 04:00:26 2025 GMT
            Not After : Aug 24 04:00:26 2025 GMT
        Subject: CN=7e0ec352b82cfc086510b56cfea07acb2a8ec232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f7:87:da:ef:16:49:fb:10:18:22:5c:0c:6a:
                    ef:4c:c6:04:8c:cd:09:65:25:7c:5f:96:fc:02:1f:
                    66:4e:a9:41:43:94:94:51:8a:17:da:f3:37:cc:42:
                    00:5c:eb:1d:a4:39:20:99:a3:36:65:09:59:91:fe:
                    1c:7c:2e:76:9e:89:3b:11:66:81:25:8a:d1:b0:b3:
                    e9:ce:6b:f8:24:12:15:d2:d4:99:67:9f:de:d7:f7:
                    69:d9:4d:1e:58:31:3a:59:b8:1a:81:c8:e6:37:41:
                    f1:a9:8f:dc:d3:f1:f9:70:fd:02:b4:44:77:22:56:
                    54:5b:b7:f2:09:b6:2e:4b:86:ab:dd:6a:ff:c1:20:
                    d5:e3:48:34:9b:f1:bd:b2:c6:89:6a:9a:9c:0d:b5:
                    63:a2:43:70:60:02:49:48:22:a4:4c:76:3d:38:50:
                    4a:04:0e:67:8d:79:18:49:77:c6:a9:63:f3:71:2d:
                    6b:40:aa:ba:92:f4:8e:3e:16:3a:4e:ef:47:1e:b5:
                    2b:ec:d3:b3:e0:6d:1b:40:58:58:74:fd:7c:18:1c:
                    92:1c:fb:d2:00:2c:f7:95:a3:dd:b9:cf:7f:8f:2b:
                    cb:a2:03:21:04:5a:ce:bd:fc:70:1c:97:0b:2f:7d:
                    6e:33:7a:ad:05:1f:28:0e:98:43:af:ac:9a:c7:a6:
                    c3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0E:C3:52:B8:2C:FC:08:65:10:B5:6C:FE:A0:7A:CB:2A:8E:C2:32
            X509v3 Authority Key Identifier:
                keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:68:1c:18:78:d6:71:49:d8:e2:d2:f2:e8:32:0d:4d:78:1a:
         96:3c:e6:98:b1:a5:03:e4:cc:ae:9b:e0:bf:4c:71:89:67:e8:
         4d:22:bd:3b:e9:3a:30:4f:0f:bc:d9:5c:73:9e:c6:08:c8:75:
         d5:f5:b0:8b:76:10:3a:48:21:ff:40:05:73:0e:bc:f7:6a:73:
         ac:a5:b9:41:de:2c:87:83:d3:8e:02:95:ef:a4:36:8e:06:e3:
         e9:dd:24:e3:58:0f:df:d0:5e:4e:3e:78:c9:b5:10:8b:fd:bc:
         85:95:1f:a7:b6:34:4d:39:1a:da:77:48:1a:92:d2:b6:ba:60:
         1d:7e:7d:e9:d8:e2:d1:22:4e:08:41:47:30:a0:50:29:3c:c7:
         33:ab:84:82:b7:0d:57:a0:69:05:2f:15:32:72:85:41:35:72:
         d1:f9:90:f8:b6:cc:db:4f:5f:55:de:b4:d7:74:de:1e:e6:4b:
         62:34:3b:95:cb:39:fc:9d:26:5a:55:92:10:ce:57:57:f3:bf:
         22:53:af:44:f2:11:23:69:88:51:0e:25:ef:67:a6:b6:2d:9a:
         ef:5b:df:25:a2:3c:17:41:8e:73:38:6c:ef:6c:49:8b:aa:a1:
         7e:d2:65:14:67:24:db:04:9d:78:d1:90:17:8a:26:eb:31:e5:
         c6:b0:06:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFbRnQj4yxDiO2dKjCXDYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjUwODIzMDQwMDI2WhcNMjUwODI0MDQwMDI2WjAzMTEwLwYDVQQD
Eyg3ZTBlYzM1MmI4MmNmYzA4NjUxMGI1NmNmZWEwN2FjYjJhOGVjMjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfeH2u8WSfsQGCJcDGrvTMYEjM0J
ZSV8X5b8Ah9mTqlBQ5SUUYoX2vM3zEIAXOsdpDkgmaM2ZQlZkf4cfC52nok7EWaB
JYrRsLPpzmv4JBIV0tSZZ5/e1/dp2U0eWDE6WbgagcjmN0HxqY/c0/H5cP0CtER3
IlZUW7fyCbYuS4ar3Wr/wSDV40g0m/G9ssaJapqcDbVjokNwYAJJSCKkTHY9OFBK
BA5njXkYSXfGqWPzcS1rQKq6kvSOPhY6Tu9HHrUr7NOz4G0bQFhYdP18GBySHPvS
ACz3laPduc9/jyvLogMhBFrOvfxwHJcLL31uM3qtBR8oDphDr6yax6bDJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4Ow1K4LPwIZRC1bP6gessqjsIyMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2gcGHjW
cUnY4tLy6DINTXgaljzmmLGlA+TMrpvgv0xxiWfoTSK9O+k6ME8PvNlcc57GCMh1
1fWwi3YQOkgh/0AFcw6892pzrKW5Qd4sh4PTjgKV76Q2jgbj6d0k41gP39BeTj54
ybUQi/28hZUfp7Y0TTka2ndIGpLStrpgHX596dji0SJOCEFHMKBQKTzHM6uEgrcN
V6BpBS8VMnKFQTVy0fmQ+LbM209fVd6013TeHuZLYjQ7lcs5/J0mWlWSEM5XV/O/
IlOvRPIRI2mIUQ4l72emti2a71vfJaI8F0GOczhs72xJi6qhftJlFGck2wSdeNGQ
F4om6zHlxrAGwg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:58 2025 by rpki-client