Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
File:                     o8cchkWd50u9NaPMv9iuXZy00tg.mft (raw, json)
Hash identifier:          naPXzODfBEFvGAqWR9bHO1fT7zJvwMeUSieq3Qe8z2Q=
Subject key identifier:   54:5D:C7:FC:5B:A7:00:10:BB:73:30:BD:1E:96:5D:45:3E:0F:40:C4
Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Certificate issuer:       /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Certificate serial:       0198D6614B29F7AD68508D70DD675F8EA5DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
Manifest number:          0EFC
Signing time:             Sat 23 Aug 2025 10:02:37 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:37 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:37 +0000
Files and hashes:         1: UK3kp7DVS-fpdp_PyKKZBPAEkaQ.roa (hash: 8KxM7G0u96R3lRI3p6WhEJjK8omSDAMQXe8llr10HQ8=)
                          2: o8cchkWd50u9NaPMv9iuXZy00tg.crl (hash: 4Zc36u7sNZoYXYmeH3Y7nf1iNcmq8R8/ES8qNuzQYYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:4b:29:f7:ad:68:50:8d:70:dd:67:5f:8e:a5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
        Validity
            Not Before: Aug 23 10:02:37 2025 GMT
            Not After : Aug 24 10:02:37 2025 GMT
        Subject: CN=545dc7fc5ba70010bb7330bd1e965d453e0f40c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:a9:ae:3e:b3:c2:29:9d:1d:3d:e3:0d:44:27:
                    03:38:ed:40:e0:49:38:d6:70:ba:3e:97:4f:ad:c1:
                    df:e9:45:88:17:31:2e:2f:25:b2:d1:17:56:40:90:
                    b1:0b:df:58:bf:18:1f:12:18:bd:c4:fb:c5:ff:6b:
                    a3:5e:65:cd:af:47:dc:bf:1b:02:1b:66:86:3a:28:
                    f3:6f:5b:13:b1:67:ec:f5:48:a5:e3:62:95:44:5a:
                    16:4e:7a:37:e2:7a:8b:03:95:67:12:77:00:88:b1:
                    98:5b:c5:e1:5f:24:9d:bb:ba:5c:16:a7:6c:48:07:
                    fe:08:2c:4e:86:36:11:0a:0f:8f:8e:cb:f6:9e:9e:
                    1b:3d:96:a1:d5:56:f7:2c:95:4d:6e:18:82:5c:92:
                    9d:10:e4:7b:2a:2f:c0:58:f6:ee:fa:35:a3:5b:4d:
                    89:e2:3a:32:29:07:61:06:c0:89:f9:cd:9c:8f:d3:
                    61:3d:5b:f3:73:3b:55:b6:fb:7d:e5:84:b6:82:42:
                    4f:aa:fc:17:2a:41:74:58:08:b8:84:9e:00:a0:6f:
                    c5:f5:a1:eb:64:e9:3c:ca:a3:94:fe:08:77:a0:fa:
                    f5:1a:ff:62:75:7d:93:8f:f0:05:d4:cb:97:01:d1:
                    3e:0e:33:ca:12:20:e3:35:7c:e8:44:8f:3f:9a:69:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5D:C7:FC:5B:A7:00:10:BB:73:30:BD:1E:96:5D:45:3E:0F:40:C4
            X509v3 Authority Key Identifier:
                keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:af:4e:6d:38:88:c1:2f:54:b7:de:4b:79:21:92:46:2e:1b:
         f5:3a:82:9b:14:5a:a9:c3:34:ae:72:45:62:e0:e2:69:2b:90:
         6c:c3:7d:33:0c:eb:1c:d4:1f:5d:6d:55:03:d7:f6:cf:59:3b:
         3c:ac:57:89:1f:9e:ce:68:51:c9:3b:ce:85:e9:cd:60:87:dd:
         0c:f0:7b:b2:5c:3f:9f:c1:24:ca:38:29:fd:81:32:7c:9c:ee:
         3a:b2:36:59:e0:e1:46:58:19:71:19:3e:23:27:72:93:18:a9:
         76:5d:87:28:04:ab:1f:c6:65:c4:6a:f3:e1:ce:3b:ea:8a:9c:
         f9:ea:97:e4:6f:23:1d:e1:d9:a1:7b:6a:0a:d9:34:fb:16:b9:
         f5:a3:39:81:70:3f:82:44:73:20:bd:39:33:c1:0d:41:bd:20:
         cf:9c:30:ea:b3:f8:44:35:ea:9e:1d:4f:ee:b4:2c:d3:1b:92:
         30:93:34:55:69:2a:ec:b0:58:8e:2f:3d:40:1b:6a:b9:5d:16:
         c8:86:cc:63:5f:be:8b:d2:3f:c3:8a:07:ef:c8:06:f6:5a:ee:
         b8:54:a8:6f:ad:3c:c7:cb:03:03:d0:40:f0:03:2a:25:d7:f9:
         42:e5:2b:c5:e6:3d:65:09:a4:24:48:47:8b:52:75:e3:be:a4:
         a1:24:fd:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYUsp961oUI1w3WdfjqXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzcxYzg2NDU5ZGU3NGJiZDM1YTNjY2JmZDhhZTVkOWNi
NGQyZDgwHhcNMjUwODIzMTAwMjM3WhcNMjUwODI0MTAwMjM3WjAzMTEwLwYDVQQD
Eyg1NDVkYzdmYzViYTcwMDEwYmI3MzMwYmQxZTk2NWQ0NTNlMGY0MGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+amuPrPCKZ0dPeMNRCcDOO1A4Ek4
1nC6PpdPrcHf6UWIFzEuLyWy0RdWQJCxC99YvxgfEhi9xPvF/2ujXmXNr0fcvxsC
G2aGOijzb1sTsWfs9Uil42KVRFoWTno34nqLA5VnEncAiLGYW8XhXySdu7pcFqds
SAf+CCxOhjYRCg+Pjsv2np4bPZah1Vb3LJVNbhiCXJKdEOR7Ki/AWPbu+jWjW02J
4joyKQdhBsCJ+c2cj9NhPVvzcztVtvt95YS2gkJPqvwXKkF0WAi4hJ4AoG/F9aHr
ZOk8yqOU/gh3oPr1Gv9idX2Tj/AF1MuXAdE+DjPKEiDjNXzoRI8/mmlafwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRdx/xbpwAQu3MwvR6WXUU+D0DEMB8GA1UdIwQY
MBaAFKPHHIZFnedLvTWjzL/Yrl2ctNLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhjY2hrV2Q1MHU5TmFQTXY5aXVYWnkwMHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jYzhlN2EtZTQxMy00M2ZmLWFhNTkt
MDkxNGFkMjRhM2U0LzEvbzhjY2hrV2Q1MHU5TmFQTXY5aXVYWnkwMHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jYzhlN2EtZTQxMy00M2ZmLWFhNTktMDkxNGFkMjRhM2U0
LzEvbzhjY2hrV2Q1MHU5TmFQTXY5aXVYWnkwMHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL69ObTiI
wS9Ut95LeSGSRi4b9TqCmxRaqcM0rnJFYuDiaSuQbMN9MwzrHNQfXW1VA9f2z1k7
PKxXiR+ezmhRyTvOhenNYIfdDPB7slw/n8Ekyjgp/YEyfJzuOrI2WeDhRlgZcRk+
Iydykxipdl2HKASrH8ZlxGrz4c476oqc+eqX5G8jHeHZoXtqCtk0+xa59aM5gXA/
gkRzIL05M8ENQb0gz5ww6rP4RDXqnh1P7rQs0xuSMJM0VWkq7LBYji89QBtquV0W
yIbMY1++i9I/w4oH78gG9lruuFSob608x8sDA9BA8AMqJdf5QuUrxeY9ZQmkJEhH
i1J1476koST9lQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:22 2025 by rpki-client