Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
File:                     8cSYM_Q5ueBnfY078fUt-_ssYk8.mft (raw, json)
Hash identifier:          p7DPs926WCaFIA1tQSXBqzepf+Ma2d+7uBN0Ja5ZMkM=
Subject key identifier:   F9:0C:B8:E2:48:95:ED:83:D1:AD:0B:BD:A0:49:15:CF:AB:14:D6:9A
Authority key identifier: F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
Certificate issuer:       /CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Certificate serial:       0198D515755AE03AC0FEFB9F9E1CADA59D82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
Manifest number:          0A34
Signing time:             Sat 23 Aug 2025 04:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:09 +0000
Files and hashes:         1: 3ZpH3IW99tcCAzGjbjQTTiu70Eg.roa (hash: DLWTw4UKdSLOETh6kocBhjPqoC9NP+EApW6Oj+8OWfw=)
                          2: 8cSYM_Q5ueBnfY078fUt-_ssYk8.crl (hash: u4YAs4LDnk76JvVEACt1RzphJTXqGY4vrX56LTtb/Is=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:75:5a:e0:3a:c0:fe:fb:9f:9e:1c:ad:a5:9d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
        Validity
            Not Before: Aug 23 04:00:09 2025 GMT
            Not After : Aug 24 04:00:09 2025 GMT
        Subject: CN=f90cb8e24895ed83d1ad0bbda04915cfab14d69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:09:b6:dd:e6:17:1b:dd:c7:ad:6d:5f:4d:87:
                    a6:79:74:12:a6:50:27:e0:08:4e:8e:9a:37:24:87:
                    dc:a7:62:a6:61:c0:3a:2e:7a:f3:2b:39:bf:73:34:
                    fd:f8:ce:49:fa:2e:5d:46:cd:8a:59:e3:10:98:c3:
                    2a:3e:28:bf:ec:b1:93:19:8a:a3:f3:54:06:24:55:
                    75:25:c1:6d:df:0b:81:3e:9b:30:43:d9:9e:21:41:
                    cd:b3:df:a9:26:17:1f:f9:55:5a:27:17:9d:2f:34:
                    20:fb:bb:0e:1d:0c:6a:36:1c:a4:6d:43:7c:a6:e8:
                    38:3c:f9:7a:d8:a0:89:87:88:ca:62:35:38:c1:b7:
                    7c:cd:57:17:5f:95:63:18:82:c3:5c:af:91:34:fc:
                    b1:11:78:04:2f:a5:81:6c:7f:05:94:17:c6:21:2e:
                    10:64:5f:3f:0c:c0:53:3b:6d:26:c1:b5:b0:47:f4:
                    c4:1d:27:5f:3b:51:d2:ac:ea:59:19:88:b7:53:e1:
                    c1:a4:ac:b5:55:af:60:f9:56:71:a2:41:59:84:51:
                    f7:6f:08:28:ac:9b:df:5f:9f:35:00:e4:0a:d4:30:
                    c7:17:86:71:38:3b:71:46:32:a7:c6:b2:78:e2:fd:
                    dd:86:f5:c4:71:9f:10:46:68:7e:b7:18:80:4e:6c:
                    f4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0C:B8:E2:48:95:ED:83:D1:AD:0B:BD:A0:49:15:CF:AB:14:D6:9A
            X509v3 Authority Key Identifier:
                keyid:F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:e6:14:38:6b:13:28:e6:22:e5:7b:b7:c1:ce:38:e7:b3:62:
         c5:02:76:d4:ff:86:88:ed:fc:6a:80:e9:98:cc:9b:2a:5e:11:
         aa:41:90:13:e4:5b:a3:49:b2:c6:2e:9f:3e:fd:c5:9d:0d:b2:
         da:18:9a:71:16:77:85:fe:48:cc:0a:6f:25:2f:65:18:dd:44:
         5a:5f:a1:bb:d6:7f:96:f1:a5:c1:e5:c7:c7:5d:dd:c5:99:32:
         d4:b9:75:90:dc:65:dd:ef:a6:9b:88:55:d8:9d:09:da:4b:e1:
         85:76:a1:51:c2:6d:4f:51:e1:fd:31:36:67:fb:d3:09:76:1d:
         d9:87:a4:80:1e:9d:27:2d:97:66:71:75:7c:fa:5d:a7:43:b4:
         48:86:b2:9a:33:68:b1:70:9a:b7:1c:fe:8e:84:98:ef:a6:e2:
         56:d4:a2:75:78:5b:7d:79:b9:d0:77:0f:ff:4e:b7:0b:73:26:
         8c:c6:e4:88:65:86:15:c1:1a:83:a7:09:6c:d1:1f:f1:a2:1f:
         c4:fb:ca:fe:91:19:72:83:24:d8:28:e2:ea:ca:7c:ef:31:66:
         36:29:31:05:eb:2f:67:b6:a6:3e:b2:ef:19:a1:c7:00:65:c5:
         d0:45:ac:98:7c:8b:2c:44:63:3f:3a:e3:a7:7b:9e:1f:2d:0a:
         b2:61:e1:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFXVa4DrA/vufnhytpZ2CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYzQ5ODMzZjQzOWI5ZTA2NzdkOGQzYmYxZjUyZGZiZmIy
YzYyNGYwHhcNMjUwODIzMDQwMDA5WhcNMjUwODI0MDQwMDA5WjAzMTEwLwYDVQQD
EyhmOTBjYjhlMjQ4OTVlZDgzZDFhZDBiYmRhMDQ5MTVjZmFiMTRkNjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngm23eYXG93HrW1fTYemeXQSplAn
4AhOjpo3JIfcp2KmYcA6LnrzKzm/czT9+M5J+i5dRs2KWeMQmMMqPii/7LGTGYqj
81QGJFV1JcFt3wuBPpswQ9meIUHNs9+pJhcf+VVaJxedLzQg+7sOHQxqNhykbUN8
pug4PPl62KCJh4jKYjU4wbd8zVcXX5VjGILDXK+RNPyxEXgEL6WBbH8FlBfGIS4Q
ZF8/DMBTO20mwbWwR/TEHSdfO1HSrOpZGYi3U+HBpKy1Va9g+VZxokFZhFH3bwgo
rJvfX581AOQK1DDHF4ZxODtxRjKnxrJ44v3dhvXEcZ8QRmh+txiATmz0rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkMuOJIle2D0a0LvaBJFc+rFNaaMB8GA1UdIwQY
MBaAFPHEmDP0ObngZ32NO/H1Lfv7LGJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGNTWU1fUTV1ZUJuZlkwNzhmVXQtX3NzWWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYWUzNzktNzllMS00NmFiLWIwNGQt
MGYwZmE2YjZlNGJkLzEvOGNTWU1fUTV1ZUJuZlkwNzhmVXQtX3NzWWs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zYWUzNzktNzllMS00NmFiLWIwNGQtMGYwZmE2YjZlNGJk
LzEvOGNTWU1fUTV1ZUJuZlkwNzhmVXQtX3NzWWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAueYUOGsT
KOYi5Xu3wc4457NixQJ21P+GiO38aoDpmMybKl4RqkGQE+Rbo0myxi6fPv3FnQ2y
2hiacRZ3hf5IzApvJS9lGN1EWl+hu9Z/lvGlweXHx13dxZky1Ll1kNxl3e+mm4hV
2J0J2kvhhXahUcJtT1Hh/TE2Z/vTCXYd2YekgB6dJy2XZnF1fPpdp0O0SIaymjNo
sXCatxz+joSY76biVtSidXhbfXm50HcP/063C3MmjMbkiGWGFcEag6cJbNEf8aIf
xPvK/pEZcoMk2Cji6sp87zFmNikxBesvZ7amPrLvGaHHAGXF0EWsmHyLLERjPzrj
p3ueHy0KsmHh5Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:18 2025 by rpki-client