Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
File:                     v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft (raw, json)
Hash identifier:          Pp/5CkPk08UbvN5odRzQKGLktv99Kg9lsFjWNICK6Yc=
Subject key identifier:   0C:4D:6B:B3:F5:98:20:F4:E1:A3:2E:EC:27:DA:49:FD:23:3F:16:48
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Certificate issuer:       /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial:       0198D6614140B59E80ED62F45B3429273387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
Manifest number:          1656
Signing time:             Sat 23 Aug 2025 10:02:34 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:34 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:34 +0000
Files and hashes:         1: 1-7RPCOXBfIKW07w2_gfX-l5xjwU.roa (hash: l+CJQac/GH3qcNGwSYOMkKACx6s8h1Uwqg0edh7Y8jc=)
                          2: 6gNZAsVf-wN84JvRq_OcC2fCfZI.roa (hash: bKq5ijI4cHYkiNFIZmWyJ6ZOR6ehBPjiusPq1BV3o9w=)
                          3: DCUhFzb2MklEo8ZkPVYr4GxtnA8.roa (hash: s+H+XdC1uH7Wqe83lxlwU1t1BUQewLSzbEYoJ2Fbqy0=)
                          4: kxux6PZN_wALCnv9GHcDUsMWbbE.roa (hash: K/OIfNl/eWd4bOh3PebPr55qq3daVrMSTH+FOwAG9yA=)
                          5: s4AwXqhqtrcDqPKIpmaM34VvuVk.roa (hash: omUzj8bx95orfDmkVMaZXkJzmvX0N8m/6+VDQgcz/84=)
                          6: v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl (hash: 4JfqIVL5onmvFnsmRhKvjEYitborSKAfPm9cuYa0UfU=)
                          7: xhgTHQyXIy450iP62m75oStMlkg.roa (hash: z3oer5qK5pT0D7zvUlqDepBtwAxWfOe3pSOkgZLXdDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:41:40:b5:9e:80:ed:62:f4:5b:34:29:27:33:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
        Validity
            Not Before: Aug 23 10:02:34 2025 GMT
            Not After : Aug 24 10:02:34 2025 GMT
        Subject: CN=0c4d6bb3f59820f4e1a32eec27da49fd233f1648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:47:dc:30:55:af:fa:20:86:99:f9:b3:56:
                    d6:63:88:27:d9:8a:19:8f:56:5e:c1:1d:3f:c7:38:
                    8f:f0:56:87:cc:78:b0:35:b5:88:6b:5d:cc:d4:a7:
                    e5:29:8b:05:9d:fd:28:6c:d3:a8:2c:3c:8f:8b:61:
                    17:e0:8f:27:f1:67:d2:56:41:b2:8e:2b:a5:72:22:
                    c5:c7:e3:98:34:ec:01:df:ac:14:cc:73:bd:8e:74:
                    e3:dc:ce:f7:6e:c8:57:6e:99:05:21:d5:65:fb:a4:
                    ff:a8:b5:e2:5d:21:59:d8:30:e0:cb:ff:ee:ef:4b:
                    0f:c3:a8:30:34:61:2a:ba:61:43:5e:a0:ed:aa:fe:
                    60:51:02:16:fb:8d:b7:f6:fa:0b:10:f3:0b:d1:76:
                    7e:d9:25:14:f0:9c:fd:b6:09:b3:dc:82:bd:d0:0e:
                    de:21:7d:a6:3f:97:8e:b8:08:ad:b7:9a:e1:2d:ae:
                    d8:6f:17:d0:50:77:2c:fa:dc:99:35:2b:b6:56:39:
                    de:8e:fe:b1:87:27:d8:82:76:56:d1:2e:a8:8f:8c:
                    88:5f:3b:0a:5a:2e:b0:79:a4:f7:29:b7:1d:76:45:
                    26:ce:89:1c:93:93:1b:e0:d3:85:e1:6d:c2:8f:8d:
                    12:9d:cf:89:cf:39:cb:5d:f7:99:fd:b4:15:0b:62:
                    85:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4D:6B:B3:F5:98:20:F4:E1:A3:2E:EC:27:DA:49:FD:23:3F:16:48
            X509v3 Authority Key Identifier:
                keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ff:bd:ff:2d:48:cf:e8:c8:e2:8e:f4:a0:ab:33:20:8e:c7:
         8f:be:36:58:f5:27:44:b6:71:e1:dd:1d:3f:2b:a8:16:dd:e5:
         15:38:f0:b2:6c:6a:30:82:e9:6b:f1:49:75:06:81:b6:48:ff:
         c5:61:6b:54:8b:eb:dd:09:ce:ef:93:73:6c:79:be:e9:dc:7e:
         e6:54:1f:b3:5e:3c:f5:3c:3a:2b:4b:2c:5b:c7:39:cf:bb:e9:
         ca:07:aa:d9:9e:e3:d7:50:c4:85:81:c9:1e:d0:4a:cb:ac:ba:
         35:35:69:e0:cf:ee:22:b7:72:21:e2:68:70:ac:97:41:b6:2b:
         14:17:cc:6d:dd:a0:a2:96:19:92:4b:c8:b4:41:70:25:f5:6a:
         31:d2:b9:0e:f4:0c:0f:a1:cf:b8:d5:d8:18:0a:b7:22:87:5a:
         6d:30:85:ab:ff:25:8a:ea:a3:19:0d:5b:bc:97:58:06:ec:9f:
         36:52:92:72:da:4d:8d:b8:c4:1b:e8:50:95:58:0a:e3:bd:50:
         0f:f7:6b:b4:82:cd:53:13:38:a8:7d:2d:54:ab:28:25:99:71:
         6e:2c:07:fe:61:dd:c7:3b:c7:16:e3:4f:ee:c6:cc:99:98:14:
         12:4c:40:20:06:1e:84:ce:c1:8d:69:ce:21:55:d1:60:b3:f0:
         4c:89:fa:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYUFAtZ6A7WL0WzQpJzOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYzQ3MGU5YjU4ZTU1N2VhOGMxZGJlZGFlYjljNmE1ZmM0
NTUxMjUwHhcNMjUwODIzMTAwMjM0WhcNMjUwODI0MTAwMjM0WjAzMTEwLwYDVQQD
EygwYzRkNmJiM2Y1OTgyMGY0ZTFhMzJlZWMyN2RhNDlmZDIzM2YxNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVpH3DBVr/oghpn5s1bWY4gn2YoZ
j1ZewR0/xziP8FaHzHiwNbWIa13M1KflKYsFnf0obNOoLDyPi2EX4I8n8WfSVkGy
jiulciLFx+OYNOwB36wUzHO9jnTj3M73bshXbpkFIdVl+6T/qLXiXSFZ2DDgy//u
70sPw6gwNGEqumFDXqDtqv5gUQIW+4239voLEPML0XZ+2SUU8Jz9tgmz3IK90A7e
IX2mP5eOuAitt5rhLa7YbxfQUHcs+tyZNSu2Vjnejv6xhyfYgnZW0S6oj4yIXzsK
Wi6weaT3KbcddkUmzokck5Mb4NOF4W3Cj40Snc+JzznLXfeZ/bQVC2KFnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxNa7P1mCD04aMu7CfaSf0jPxZIMB8GA1UdIwQY
MBaAFL/EcOm1jlV+qMHb7a65xqX8RVElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzkt
YTJhYTY1NDBmODc1LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzktYTJhYTY1NDBmODc1
LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAov+9/y1I
z+jI4o70oKszII7Hj742WPUnRLZx4d0dPyuoFt3lFTjwsmxqMILpa/FJdQaBtkj/
xWFrVIvr3QnO75NzbHm+6dx+5lQfs1489Tw6K0ssW8c5z7vpygeq2Z7j11DEhYHJ
HtBKy6y6NTVp4M/uIrdyIeJocKyXQbYrFBfMbd2gopYZkkvItEFwJfVqMdK5DvQM
D6HPuNXYGAq3IodabTCFq/8liuqjGQ1bvJdYBuyfNlKSctpNjbjEG+hQlVgK471Q
D/drtILNUxM4qH0tVKsoJZlxbiwH/mHdxzvHFuNP7sbMmZgUEkxAIAYehM7BjWnO
IVXRYLPwTIn63w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:33 2025 by rpki-client