Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
File:                     8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft (raw, json)
Hash identifier:          dt/vmvNS5k4bH3NU7LNzZhyDGlC65PNE/UulJ7GW2Rs=
Subject key identifier:   4A:15:1E:88:C5:7D:17:77:4F:28:3F:22:B6:99:DF:3F:16:E9:E4:F9
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Certificate issuer:       /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial:       0198D54E62F2833895E9983514F9BBFF7C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
Manifest number:          1520
Signing time:             Sat 23 Aug 2025 05:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:20 +0000
Files and hashes:         1: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl (hash: h/aFrmvoXjuADEryUm2Qbo6hx80WazTCWVgP3UKmBP4=)
                          2: kvZo-BdFpFiAumpYOAN_8hogK54.roa (hash: B0ogmfmwZkernYmKh+SkwXZzEeGWetiV/fs+CFuZhi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:62:f2:83:38:95:e9:98:35:14:f9:bb:ff:7c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
        Validity
            Not Before: Aug 23 05:02:20 2025 GMT
            Not After : Aug 24 05:02:20 2025 GMT
        Subject: CN=4a151e88c57d17774f283f22b699df3f16e9e4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:9d:40:04:ae:35:99:af:89:41:a3:5e:f3:
                    4f:0a:bc:81:67:0b:ee:22:db:a9:62:f5:98:0e:e4:
                    62:4d:7d:ad:e9:45:fa:9d:17:bb:7b:64:44:36:12:
                    98:08:4d:1b:25:2a:26:28:ed:de:69:1a:e7:95:2f:
                    c6:e7:16:8d:ec:df:08:90:d9:7e:7e:af:14:35:e0:
                    7e:bc:77:f1:fa:0e:fd:50:5f:04:74:cb:5a:9e:62:
                    94:44:a0:3d:84:c7:00:f5:e8:34:b5:70:4b:17:03:
                    e1:86:80:cc:1f:3b:b0:d7:8a:0b:a5:47:0f:61:cc:
                    62:56:f3:f4:2d:2a:53:c4:8d:e0:05:8c:54:6c:70:
                    f3:a7:c8:13:40:bb:30:60:85:67:e4:e4:21:6e:7e:
                    3c:3d:e8:64:83:76:98:4f:16:59:0f:1e:3e:fe:44:
                    d1:19:a8:37:52:58:63:6f:12:d1:72:b4:8c:5d:b4:
                    53:84:81:ff:c0:8e:5f:dd:94:72:a5:26:77:00:5d:
                    46:06:35:4e:da:8f:2f:34:07:33:16:e9:81:70:81:
                    ce:65:df:01:9b:68:b2:00:71:2a:f6:a5:c1:95:f8:
                    63:57:c5:50:ec:4f:74:9d:46:43:79:7b:52:c6:8b:
                    f4:c3:91:e0:26:76:10:b4:f9:d3:5a:d3:4d:67:ba:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:15:1E:88:C5:7D:17:77:4F:28:3F:22:B6:99:DF:3F:16:E9:E4:F9
            X509v3 Authority Key Identifier:
                keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:79:c7:04:4d:7b:9d:1b:87:ee:6a:69:5a:73:c6:3f:1c:3d:
         24:95:ca:c1:c1:34:95:ff:06:22:8e:fc:91:2d:5d:97:0a:f7:
         52:6d:a5:de:e4:07:ff:4b:08:52:c4:c1:98:cc:00:36:6f:d9:
         40:4e:6d:c1:71:f8:59:32:a7:eb:16:9e:8f:91:92:93:c1:73:
         5e:bd:14:17:11:92:4b:2b:17:3b:a4:2c:aa:83:a8:3c:3c:a9:
         a5:c3:d4:18:8c:8a:fe:70:0b:13:69:5e:a2:9f:64:35:a3:e3:
         09:46:8b:4d:a6:d2:37:67:af:fc:8f:e1:f3:05:6e:5f:d6:63:
         13:c0:0f:d0:3c:30:4f:70:27:f4:89:37:bc:37:cc:3a:b8:4a:
         06:6b:d9:79:70:e2:57:0c:d6:34:b1:61:a3:8c:ee:25:29:b6:
         9d:22:52:c7:4a:2b:94:f4:fb:19:d1:f4:49:0c:4c:ec:72:34:
         51:ee:83:c3:2b:4a:00:93:16:d8:8a:d4:76:dd:dc:a6:b0:a1:
         67:06:f3:57:fe:25:c1:c5:b1:65:72:67:90:14:a1:ef:76:d5:
         6b:7d:60:a5:1b:d9:ac:33:18:1b:2e:04:fe:da:f9:98:c5:a5:
         2b:83:df:77:23:19:0c:b8:6e:69:a9:4d:09:49:4e:15:db:6c:
         c4:d3:01:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTmLygziV6Zg1FPm7/3xWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxN2Y2OTU3ZmMyM2I4ZDQ2YjlkM2RjOGJjN2RiMTIyODU5
ODc2ZjAwHhcNMjUwODIzMDUwMjIwWhcNMjUwODI0MDUwMjIwWjAzMTEwLwYDVQQD
Eyg0YTE1MWU4OGM1N2QxNzc3NGYyODNmMjJiNjk5ZGYzZjE2ZTllNGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY6dQASuNZmviUGjXvNPCryBZwvu
ItupYvWYDuRiTX2t6UX6nRe7e2RENhKYCE0bJSomKO3eaRrnlS/G5xaN7N8IkNl+
fq8UNeB+vHfx+g79UF8EdMtanmKURKA9hMcA9eg0tXBLFwPhhoDMHzuw14oLpUcP
YcxiVvP0LSpTxI3gBYxUbHDzp8gTQLswYIVn5OQhbn48Pehkg3aYTxZZDx4+/kTR
Gag3UlhjbxLRcrSMXbRThIH/wI5f3ZRypSZ3AF1GBjVO2o8vNAczFumBcIHOZd8B
m2iyAHEq9qXBlfhjV8VQ7E90nUZDeXtSxov0w5HgJnYQtPnTWtNNZ7qnWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoVHojFfRd3Tyg/IraZ3z8W6eT5MB8GA1UdIwQY
MBaAFPF/aVf8I7jUa509yLx9sSKFmHbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFg5cFZfd2p1TlJyblQzSXZIMnhJb1dZZHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMDI2ZDMtOWYzMy00NjNlLTg0MTAt
NzI2ZGE0ZTkzODZiLzEvOFg5cFZfd2p1TlJyblQzSXZIMnhJb1dZZHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yMDI2ZDMtOWYzMy00NjNlLTg0MTAtNzI2ZGE0ZTkzODZi
LzEvOFg5cFZfd2p1TlJyblQzSXZIMnhJb1dZZHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3nHBE17
nRuH7mppWnPGPxw9JJXKwcE0lf8GIo78kS1dlwr3Um2l3uQH/0sIUsTBmMwANm/Z
QE5twXH4WTKn6xaej5GSk8FzXr0UFxGSSysXO6QsqoOoPDyppcPUGIyK/nALE2le
op9kNaPjCUaLTabSN2ev/I/h8wVuX9ZjE8AP0DwwT3An9Ik3vDfMOrhKBmvZeXDi
VwzWNLFho4zuJSm2nSJSx0orlPT7GdH0SQxM7HI0Ue6DwytKAJMW2IrUdt3cprCh
ZwbzV/4lwcWxZXJnkBSh73bVa31gpRvZrDMYGy4E/tr5mMWlK4PfdyMZDLhuaalN
CUlOFdtsxNMBgQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:48 2025 by rpki-client