Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
File:                     8WBdCa0sbEN7bC-Gg___viF0_mw.mft (raw, json)
Hash identifier:          lXVcb3cYU3xDYXFwZlfCoNh6UGo9xs8u/T7x3bU6THc=
Subject key identifier:   41:6A:37:7B:78:29:05:AA:F3:A9:1A:25:1A:52:32:AD:8F:AF:D3:4D
Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
Certificate issuer:       /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Certificate serial:       0198D54DD6B9308942C8D65F3EF309091426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
Manifest number:          0FB4
Signing time:             Sat 23 Aug 2025 05:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:44 +0000
Files and hashes:         1: 8WBdCa0sbEN7bC-Gg___viF0_mw.crl (hash: ffx+HpVH88SaOpzKGf7YWrH+7cTQkT53kb+uw55gpMA=)
                          2: j3qkWwGkWnrxhLgyGwrcFzXJWM4.roa (hash: tCyqkdV84n1oHfUiO9Wnf9/3f5vZVsXyCuIYwhEsEzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:d6:b9:30:89:42:c8:d6:5f:3e:f3:09:09:14:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
        Validity
            Not Before: Aug 23 05:01:44 2025 GMT
            Not After : Aug 24 05:01:44 2025 GMT
        Subject: CN=416a377b782905aaf3a91a251a5232ad8fafd34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:8c:be:4e:55:91:ce:07:d9:3b:e7:09:a2:
                    33:a2:ae:42:4d:c9:03:34:86:f6:58:ff:cf:00:ba:
                    b3:f4:9a:11:ea:26:f5:32:a4:79:35:a0:91:39:c4:
                    dd:f9:1b:7e:e8:cf:d5:dd:3e:99:cf:3e:10:ae:e2:
                    21:78:f4:96:67:ae:dc:97:db:1f:5b:a4:de:a1:dd:
                    e8:90:f7:93:f2:0c:ba:7e:77:3f:e4:f9:3d:59:4d:
                    fd:b1:9b:b3:e7:23:0e:c0:20:72:00:aa:89:c0:d7:
                    01:59:1d:b2:f3:8c:77:25:56:79:48:26:53:e2:96:
                    8d:c6:b7:b7:6c:e0:54:22:19:8e:3b:eb:ac:c4:b7:
                    6d:56:14:22:94:7c:9b:0a:9a:e2:b6:f4:92:f9:02:
                    49:df:f2:28:29:3d:33:a8:3b:81:35:c8:d6:23:a3:
                    61:96:bc:e2:f9:71:f4:f3:01:1f:f6:b7:af:27:a3:
                    28:5a:e1:32:1b:ed:0c:83:59:9e:5b:6d:41:03:b7:
                    50:bf:7e:9e:6f:4a:fc:4d:e1:ec:2e:80:8a:36:c1:
                    3a:8b:87:b5:b4:c5:7f:1f:8b:92:37:87:8d:50:55:
                    c1:56:4d:e8:fc:d1:85:29:fb:46:ac:e2:ad:91:c7:
                    98:e6:8d:a4:f2:44:5e:39:cb:13:62:79:ee:72:18:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6A:37:7B:78:29:05:AA:F3:A9:1A:25:1A:52:32:AD:8F:AF:D3:4D
            X509v3 Authority Key Identifier:
                keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:06:63:f6:44:5b:2f:e6:17:59:82:f8:10:b3:99:be:f8:3d:
         6a:7f:47:47:90:69:bd:8d:e6:23:60:de:a1:0d:fc:a0:8e:4a:
         7d:93:a7:68:81:a0:1f:6b:00:c8:8a:8c:78:ca:68:4c:be:ba:
         46:f7:e7:53:71:e4:db:02:66:48:6f:23:53:51:16:ae:98:6e:
         22:9b:5c:ec:56:1e:e2:cd:b7:ba:f4:13:b5:0d:da:b0:58:05:
         dd:4f:cf:e9:14:c7:59:c5:31:36:c5:06:63:39:7a:19:90:d8:
         c9:3c:d5:56:d4:cd:fc:e3:0f:d3:48:eb:0f:33:ad:80:62:6e:
         be:5b:19:25:89:ab:bb:1f:dc:4b:60:02:1b:16:f3:ec:11:53:
         5c:26:1c:d9:94:c7:6e:04:31:70:40:e8:1b:dd:83:2e:8a:a4:
         f4:a9:df:9d:86:53:e9:79:14:41:a4:2a:39:11:9f:27:be:d6:
         cf:a3:d4:af:28:d8:43:24:ef:0d:a6:3c:7c:a7:ff:da:1b:96:
         43:44:ff:73:a4:44:a5:89:d9:1a:f5:d6:f3:6e:ca:3d:1e:63:
         db:42:eb:5b:88:96:7d:80:88:3c:00:81:94:f1:7e:b6:c7:18:
         db:94:c9:72:42:b4:21:c3:19:13:1a:f8:1e:26:ef:91:4a:32:
         ce:0e:38:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTda5MIlCyNZfPvMJCRQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNjA1ZDA5YWQyYzZjNDM3YjZjMmY4NjgzZmZmZmJlMjE3
NGZlNmMwHhcNMjUwODIzMDUwMTQ0WhcNMjUwODI0MDUwMTQ0WjAzMTEwLwYDVQQD
Eyg0MTZhMzc3Yjc4MjkwNWFhZjNhOTFhMjUxYTUyMzJhZDhmYWZkMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CuMvk5Vkc4H2TvnCaIzoq5CTckD
NIb2WP/PALqz9JoR6ib1MqR5NaCROcTd+Rt+6M/V3T6Zzz4QruIhePSWZ67cl9sf
W6Teod3okPeT8gy6fnc/5Pk9WU39sZuz5yMOwCByAKqJwNcBWR2y84x3JVZ5SCZT
4paNxre3bOBUIhmOO+usxLdtVhQilHybCpritvSS+QJJ3/IoKT0zqDuBNcjWI6Nh
lrzi+XH08wEf9revJ6MoWuEyG+0Mg1meW21BA7dQv36eb0r8TeHsLoCKNsE6i4e1
tMV/H4uSN4eNUFXBVk3o/NGFKftGrOKtkceY5o2k8kReOcsTYnnuchjLWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFqN3t4KQWq86kaJRpSMq2Pr9NNMB8GA1UdIwQY
MBaAFPFgXQmtLGxDe2wvhoP//74hdP5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNmIwNDAtZjU3Yi00YWUyLWFiNDIt
MjI4NzMzMjQ1Y2QxLzEvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zNmIwNDAtZjU3Yi00YWUyLWFiNDItMjI4NzMzMjQ1Y2Qx
LzEvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgZj9kRb
L+YXWYL4ELOZvvg9an9HR5BpvY3mI2DeoQ38oI5KfZOnaIGgH2sAyIqMeMpoTL66
RvfnU3Hk2wJmSG8jU1EWrphuIptc7FYe4s23uvQTtQ3asFgF3U/P6RTHWcUxNsUG
Yzl6GZDYyTzVVtTN/OMP00jrDzOtgGJuvlsZJYmrux/cS2ACGxbz7BFTXCYc2ZTH
bgQxcEDoG92DLoqk9KnfnYZT6XkUQaQqORGfJ77Wz6PUryjYQyTvDaY8fKf/2huW
Q0T/c6REpYnZGvXW827KPR5j20LrW4iWfYCIPACBlPF+tscY25TJckK0IcMZExr4
HibvkUoyzg448g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:53 2025 by rpki-client