Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft
File:                     8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft (raw, json)
Hash identifier:          M8Wb89WViisRTq/6HvA01VOVth8bMq3ehG2tVnucgHc=
Subject key identifier:   D8:28:FE:42:08:94:84:45:76:48:6E:EF:90:C7:87:95:CE:C6:2B:E6
Authority key identifier: F2:F4:A6:C0:B3:C2:B0:C0:32:DE:DD:CD:23:D4:21:FF:B9:62:00:FC
Certificate issuer:       /CN=f2f4a6c0b3c2b0c032deddcd23d421ffb96200fc
Certificate serial:       0198D54EA25CF1B97E20D78070F7306EC50F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft
Manifest number:          0670
Signing time:             Sat 23 Aug 2025 05:02:37 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:37 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:37 +0000
Files and hashes:         1: 8vSmwLPCsMAy3t3NI9Qh_7liAPw.crl (hash: HXK+SnVfstHO6ZaHGaVTDdZ1G1mOKOQRKvVNuUZRkr4=)
                          2: TJhuA5qI7EN9HDyV96WXGF2JSfo.roa (hash: 5D865Bd9WMBm3Lfxl+Be0ercoZWZG3ocPw41PojFMmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:a2:5c:f1:b9:7e:20:d7:80:70:f7:30:6e:c5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f4a6c0b3c2b0c032deddcd23d421ffb96200fc
        Validity
            Not Before: Aug 23 05:02:37 2025 GMT
            Not After : Aug 24 05:02:37 2025 GMT
        Subject: CN=d828fe420894844576486eef90c78795cec62be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:56:b3:81:25:15:72:68:46:36:36:25:d1:
                    4a:49:2d:b3:3b:70:7d:e6:6e:6d:35:c8:9e:53:2b:
                    4b:be:5e:fd:fa:05:44:b5:20:55:d1:c3:28:bd:26:
                    e4:c5:df:eb:54:b1:ab:06:a8:73:c2:db:5a:bb:23:
                    27:ec:f1:e0:98:d7:f7:38:4d:89:9b:04:7d:b2:be:
                    2c:a9:ec:5b:d2:fa:1f:3a:68:3c:bf:36:9b:9d:fb:
                    7c:79:a0:a5:62:eb:39:ba:35:14:78:1a:77:fc:68:
                    25:fe:f9:79:b8:04:5f:b3:60:e3:96:a7:9e:3a:4b:
                    c2:5d:9b:03:cd:b1:ce:63:f7:a2:77:b0:b3:74:c3:
                    9c:16:4a:c8:94:6f:f1:7b:28:ff:96:4f:66:6f:5c:
                    44:0a:fa:70:33:21:7d:8c:8f:aa:f0:57:e1:ea:cb:
                    8f:a3:46:2e:bf:31:61:cd:29:d3:67:06:6e:e2:f5:
                    8c:94:10:4a:6d:57:5e:b8:9c:c9:f2:1d:db:0c:8e:
                    c2:4c:31:10:34:e8:23:d7:54:32:08:89:3c:48:f9:
                    b6:d0:03:f3:1e:93:68:cf:4e:26:c9:72:01:ec:b8:
                    13:43:4d:f2:a2:f4:20:23:00:aa:3c:2d:25:ea:45:
                    9f:a7:55:0e:da:c2:fd:8f:e8:bb:2c:39:b9:47:1b:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:28:FE:42:08:94:84:45:76:48:6E:EF:90:C7:87:95:CE:C6:2B:E6
            X509v3 Authority Key Identifier:
                keyid:F2:F4:A6:C0:B3:C2:B0:C0:32:DE:DD:CD:23:D4:21:FF:B9:62:00:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9e:c1:af:28:8a:f6:e4:fb:02:f2:70:8e:12:6a:b9:42:bd:
         f3:db:e7:45:d6:07:ea:56:0f:b3:c5:2e:37:ea:51:8d:d7:d6:
         68:b5:97:6e:10:d5:70:f7:46:df:d4:cd:70:19:8a:83:86:22:
         73:63:c1:22:f4:9c:57:a1:90:38:78:16:b0:1c:72:b2:48:42:
         20:5d:2f:02:d9:66:0f:51:39:0c:b6:f5:dc:cb:3d:f2:b1:6d:
         cc:ae:df:f1:be:30:f8:98:65:ae:3f:5c:c3:2d:ba:da:57:9b:
         78:17:67:6c:a5:d7:79:e7:cc:5f:f4:9a:0b:36:05:50:1d:8b:
         b7:83:e4:2d:f6:7f:44:a5:ee:21:b8:23:dd:fb:46:7c:f2:c9:
         f7:01:15:95:45:93:16:8c:b8:19:69:59:18:4c:66:1f:c2:2c:
         42:e6:7c:c9:81:08:0d:fd:cc:6d:6d:b0:61:11:8c:9b:2e:71:
         a4:09:13:f9:ac:72:72:57:d1:89:e4:f4:cc:75:0f:61:fb:c8:
         08:af:aa:d1:90:df:bb:f5:d3:a5:0c:b3:c9:42:50:8e:21:6c:
         69:18:1e:9b:68:51:4b:79:17:1e:f2:c4:83:a2:9f:d1:b6:2c:
         64:0d:53:24:33:54:b3:f5:c1:48:8b:ab:c6:d7:95:5a:63:66:
         75:ab:5f:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTqJc8bl+INeAcPcwbsUPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZjRhNmMwYjNjMmIwYzAzMmRlZGRjZDIzZDQyMWZmYjk2
MjAwZmMwHhcNMjUwODIzMDUwMjM3WhcNMjUwODI0MDUwMjM3WjAzMTEwLwYDVQQD
EyhkODI4ZmU0MjA4OTQ4NDQ1NzY0ODZlZWY5MGM3ODc5NWNlYzYyYmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5lWs4ElFXJoRjY2JdFKSS2zO3B9
5m5tNcieUytLvl79+gVEtSBV0cMovSbkxd/rVLGrBqhzwttauyMn7PHgmNf3OE2J
mwR9sr4sqexb0vofOmg8vzabnft8eaClYus5ujUUeBp3/Ggl/vl5uARfs2Djlqee
OkvCXZsDzbHOY/eid7CzdMOcFkrIlG/xeyj/lk9mb1xECvpwMyF9jI+q8Ffh6suP
o0YuvzFhzSnTZwZu4vWMlBBKbVdeuJzJ8h3bDI7CTDEQNOgj11QyCIk8SPm20APz
HpNoz04myXIB7LgTQ03yovQgIwCqPC0l6kWfp1UO2sL9j+i7LDm5Rxuw7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgo/kIIlIRFdkhu75DHh5XOxivmMB8GA1UdIwQY
MBaAFPL0psCzwrDAMt7dzSPUIf+5YgD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZTbXdMUENzTUF5M3QzTkk5UWhfN2xpQVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jYmU5OTctMWM4Yi00MjQyLWE3MDEt
MzA5ODY0YjRkNDkxLzEvOHZTbXdMUENzTUF5M3QzTkk5UWhfN2xpQVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jYmU5OTctMWM4Yi00MjQyLWE3MDEtMzA5ODY0YjRkNDkx
LzEvOHZTbXdMUENzTUF5M3QzTkk5UWhfN2xpQVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZ7BryiK
9uT7AvJwjhJquUK989vnRdYH6lYPs8UuN+pRjdfWaLWXbhDVcPdG39TNcBmKg4Yi
c2PBIvScV6GQOHgWsBxyskhCIF0vAtlmD1E5DLb13Ms98rFtzK7f8b4w+Jhlrj9c
wy262lebeBdnbKXXeefMX/SaCzYFUB2Lt4PkLfZ/RKXuIbgj3ftGfPLJ9wEVlUWT
Foy4GWlZGExmH8IsQuZ8yYEIDf3MbW2wYRGMmy5xpAkT+axyclfRieT0zHUPYfvI
CK+q0ZDfu/XTpQyzyUJQjiFsaRgem2hRS3kXHvLEg6Kf0bYsZA1TJDNUs/XBSIur
xteVWmNmdatf2Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:37 2025 by rpki-client