Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File:                     8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier:          M/HDd/cJIRDENJ0BqtVF9Cj0ISUolYWK8deCPXdZIOA=
Subject key identifier:   85:AE:E1:67:2B:2E:EA:78:10:D2:4A:A2:A0:B9:F1:54:ED:05:E9:26
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer:       /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial:       0197CE0449A78B2EE506D175E87DE014DFDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number:          0D45
Signing time:             Thu 03 Jul 2025 02:01:16 +0000
Manifest this update:     Thu 03 Jul 2025 02:01:16 +0000
Manifest next update:     Fri 04 Jul 2025 02:01:16 +0000
Files and hashes:         1: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: f3foomZiyfNQUFmbMQw+WV+zsItz2zmtBZifmsXTIHI=)
                          2: GGAjioujqBIqTrQAhNRgglPPRkE.roa (hash: 1FpErs46KltIuhJLiOWBLzSL1Xf0hQCI/1w1QmIm60Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:04:49:a7:8b:2e:e5:06:d1:75:e8:7d:e0:14:df:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
        Validity
            Not Before: Jul  3 02:01:16 2025 GMT
            Not After : Jul  4 02:01:16 2025 GMT
        Subject: CN=85aee1672b2eea7810d24aa2a0b9f154ed05e926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:31:7c:00:f3:7f:18:ac:7a:26:1a:be:56:49:
                    17:fa:03:22:17:60:5b:d4:cc:80:7e:f5:e3:38:41:
                    a1:7b:a5:c6:ba:6f:94:db:5a:5a:b4:93:5a:37:77:
                    69:60:9f:29:3f:4e:21:fc:cf:68:4f:e9:bf:25:71:
                    20:53:06:e0:ec:4d:82:e8:f7:d0:3d:c0:90:e9:d7:
                    ce:a3:2b:48:93:c4:cb:a4:ab:82:e7:80:11:6b:60:
                    2c:0a:6a:82:69:e7:72:e6:c0:6d:77:29:44:d8:94:
                    84:eb:0a:5f:71:df:05:1f:dd:ee:4f:2e:6b:4a:d0:
                    2d:cf:b8:5b:57:67:ca:ac:24:ee:64:0d:05:98:03:
                    20:e8:82:d9:01:6e:aa:1a:8e:1a:e1:0a:dd:08:10:
                    e4:b6:17:12:92:6d:20:67:10:47:07:57:ba:1f:6c:
                    85:bc:1a:1c:13:e5:f6:27:07:35:11:fd:15:26:c9:
                    c8:c4:d0:20:c5:f9:2b:6f:d0:b0:5d:bf:88:2c:57:
                    c3:1d:82:46:3a:c9:e1:07:2b:66:5b:08:2d:36:9c:
                    55:7a:ab:96:43:53:ac:8b:ae:8e:7f:44:83:3b:40:
                    86:29:0c:96:c2:f4:d2:32:c0:03:2f:36:c8:26:c4:
                    1a:11:2a:4a:0d:2f:3f:9c:f9:37:a1:80:26:a7:d4:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AE:E1:67:2B:2E:EA:78:10:D2:4A:A2:A0:B9:F1:54:ED:05:E9:26
            X509v3 Authority Key Identifier:
                keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:c6:46:7f:2d:a0:56:0e:57:87:65:49:fa:d2:7b:03:23:65:
         b5:27:b6:80:a6:36:fa:79:16:97:02:44:6e:44:c8:7c:e8:5e:
         f6:d9:28:d2:6e:6d:25:fe:31:62:64:de:f8:9c:ee:38:a5:2a:
         9b:06:c6:27:79:be:21:b2:91:d4:0e:40:99:70:37:f6:33:a8:
         4d:e6:bb:de:d2:43:0a:55:f1:1c:5f:76:de:98:ce:86:cd:08:
         6d:34:3f:ce:eb:e7:c2:77:6d:db:15:16:f7:32:23:dd:85:45:
         61:b7:d8:a8:44:e0:eb:67:d1:ac:a6:67:2f:07:6b:34:f2:33:
         d7:bf:88:42:db:d2:ee:ca:54:5a:fe:0e:21:c6:cb:2c:61:f7:
         4f:2e:b7:de:9a:4b:db:09:23:17:64:77:34:d3:a5:ca:a4:1f:
         d0:c1:6d:bd:7a:16:72:6f:87:a2:54:98:09:9c:86:b3:98:b2:
         2f:d3:f4:44:07:f3:91:be:75:75:a0:9e:87:51:59:28:fd:61:
         e7:c1:e5:bd:b3:5b:1c:50:77:50:5d:76:a1:b7:db:9f:22:97:
         99:85:9f:d1:59:28:a8:d5:0c:07:6f:f6:6c:22:ad:14:ee:c5:
         31:77:31:a7:c6:1b:45:c1:66:08:c4:bc:92:48:f1:2e:bf:05:
         1d:cd:ee:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfOBEmniy7lBtF16H3gFN/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYjk4ZjU4NGJjMTIzNDc4MGEyYzQ3ZmM4ODMyNGQ0OWVl
MGU2ZjQwHhcNMjUwNzAzMDIwMTE2WhcNMjUwNzA0MDIwMTE2WjAzMTEwLwYDVQQD
Eyg4NWFlZTE2NzJiMmVlYTc4MTBkMjRhYTJhMGI5ZjE1NGVkMDVlOTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TF8APN/GKx6Jhq+VkkX+gMiF2Bb
1MyAfvXjOEGhe6XGum+U21patJNaN3dpYJ8pP04h/M9oT+m/JXEgUwbg7E2C6PfQ
PcCQ6dfOoytIk8TLpKuC54ARa2AsCmqCaedy5sBtdylE2JSE6wpfcd8FH93uTy5r
StAtz7hbV2fKrCTuZA0FmAMg6ILZAW6qGo4a4QrdCBDkthcSkm0gZxBHB1e6H2yF
vBocE+X2Jwc1Ef0VJsnIxNAgxfkrb9CwXb+ILFfDHYJGOsnhBytmWwgtNpxVequW
Q1Osi66Of0SDO0CGKQyWwvTSMsADLzbIJsQaESpKDS8/nPk3oYAmp9S+9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWu4WcrLup4ENJKoqC58VTtBekmMB8GA1UdIwQY
MBaAFPK5j1hLwSNHgKLEf8iDJNSe4Ob0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYt
NGVjMWFiZTA4NWVmLzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYtNGVjMWFiZTA4NWVm
LzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4MZGfy2g
Vg5Xh2VJ+tJ7AyNltSe2gKY2+nkWlwJEbkTIfOhe9tko0m5tJf4xYmTe+JzuOKUq
mwbGJ3m+IbKR1A5AmXA39jOoTea73tJDClXxHF923pjOhs0IbTQ/zuvnwndt2xUW
9zIj3YVFYbfYqETg62fRrKZnLwdrNPIz17+IQtvS7spUWv4OIcbLLGH3Ty633ppL
2wkjF2R3NNOlyqQf0MFtvXoWcm+HolSYCZyGs5iyL9P0RAfzkb51daCeh1FZKP1h
58HlvbNbHFB3UF12obfbnyKXmYWf0VkoqNUMB2/2bCKtFO7FMXcxp8YbRcFmCMS8
kkjxLr8FHc3uFw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 05:07:32 2025 by rpki-client