Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File:                     8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier:          XhE67Ib/hmn2/M/Ibym1RCQab8eNmuDDMkq+tFZ5+VA=
Subject key identifier:   B5:0D:C1:42:64:0D:AE:37:84:B9:F6:55:F2:5B:26:08:77:4E:E4:59
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer:       /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial:       0198D5837D721819CD1D9A1C456E2E816AB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number:          1098
Signing time:             Sat 23 Aug 2025 06:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:20 +0000
Files and hashes:         1: 3hbfOacsgkP1pg9qyg2MfHcWFYc.roa (hash: cOfUIokArUM0fSLBq8ZJr6uobm8IIPK6h0yhiKwO2kU=)
                          2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: oVInKyCa44nD2ni3+oYiFWDjfmrRE04EwGmYOw6gJsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:7d:72:18:19:cd:1d:9a:1c:45:6e:2e:81:6a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
        Validity
            Not Before: Aug 23 06:00:20 2025 GMT
            Not After : Aug 24 06:00:20 2025 GMT
        Subject: CN=b50dc142640dae3784b9f655f25b2608774ee459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8a:b4:a5:fc:1e:0f:30:a2:54:b3:a8:9b:ff:
                    5b:2d:ec:5b:5e:f3:0f:b2:09:95:13:5c:0c:f9:ea:
                    b7:d0:da:59:37:ca:12:0f:49:93:b2:27:85:3d:00:
                    cb:9f:c7:c8:ea:ea:54:16:79:2f:56:19:ef:b7:97:
                    9a:1a:24:ae:7e:c7:8d:cf:e0:79:ac:f3:66:fe:2b:
                    c1:c0:fb:09:85:7e:cb:2b:0b:7b:55:58:c1:98:01:
                    a9:f0:78:44:77:7e:bb:81:01:9d:30:3d:e6:c4:fe:
                    96:fa:33:53:88:fb:a5:c4:f6:23:11:46:02:ec:d3:
                    4f:e9:55:68:d3:c7:30:1f:81:0a:f9:48:1e:6a:15:
                    9f:e0:18:2a:b6:18:d7:af:65:6a:74:e1:11:39:3a:
                    40:94:1f:25:68:eb:72:49:d7:6d:63:84:da:30:cd:
                    7f:3c:01:95:b6:93:74:a6:12:9d:37:8f:fe:95:fc:
                    c3:56:2e:72:0f:88:87:98:4e:37:de:6a:fa:53:6a:
                    81:09:58:ce:65:6d:73:75:c7:33:cf:f1:b4:c5:93:
                    79:54:70:db:36:af:38:97:c4:c4:b0:e9:b6:65:fa:
                    6b:a8:dc:c3:7e:e2:e7:9c:20:1d:66:0d:df:85:c5:
                    5f:2b:57:c1:f2:50:82:61:d9:44:94:e7:2b:24:48:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0D:C1:42:64:0D:AE:37:84:B9:F6:55:F2:5B:26:08:77:4E:E4:59
            X509v3 Authority Key Identifier:
                keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:24:2f:d8:b6:3f:6b:54:7a:ae:f8:ba:99:96:49:1b:68:8e:
         da:e9:52:4b:2f:29:cf:cc:de:ac:3a:25:19:1e:ca:af:25:58:
         85:7c:48:be:fd:f5:77:0f:99:f1:ae:ef:19:e1:4d:f7:a7:a3:
         52:41:2c:37:1c:ed:54:eb:ab:c6:80:50:3e:86:84:e2:94:17:
         8e:f1:31:2c:ea:7d:3f:77:fa:a0:65:08:84:4a:69:ec:37:89:
         56:df:34:58:11:0d:26:3f:c5:e6:0c:e7:10:74:44:9f:13:30:
         06:ad:c7:89:1e:5d:99:9c:a7:94:ec:0b:73:c8:f6:bc:86:6f:
         55:a4:28:73:27:84:a1:07:a1:0d:75:73:23:0a:6c:65:7f:b5:
         d0:43:12:19:8d:11:35:42:1f:36:98:1c:8c:67:14:94:6b:94:
         c2:3e:4a:3c:34:b4:14:d2:33:63:bb:d9:95:45:2f:a4:37:0c:
         6a:79:dc:fc:45:0f:2a:8d:97:cc:61:d2:30:02:e3:f2:eb:96:
         83:53:23:7a:2d:56:42:d2:46:cc:cd:a6:e6:08:d6:3c:78:e7:
         3e:cc:4d:77:54:df:29:0f:9a:0f:34:c5:56:70:40:45:c9:e8:
         c1:3d:9b:18:19:18:f4:fb:be:67:49:92:b1:68:b0:6e:49:41:
         01:7b:bd:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg31yGBnNHZocRW4ugWqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNTkwNzdlMDQzODc3MDU5NjAzY2FhMGUzZTU4NGIxNjI2
ZThmN2IwHhcNMjUwODIzMDYwMDIwWhcNMjUwODI0MDYwMDIwWjAzMTEwLwYDVQQD
EyhiNTBkYzE0MjY0MGRhZTM3ODRiOWY2NTVmMjViMjYwODc3NGVlNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14q0pfweDzCiVLOom/9bLexbXvMP
sgmVE1wM+eq30NpZN8oSD0mTsieFPQDLn8fI6upUFnkvVhnvt5eaGiSufseNz+B5
rPNm/ivBwPsJhX7LKwt7VVjBmAGp8HhEd367gQGdMD3mxP6W+jNTiPulxPYjEUYC
7NNP6VVo08cwH4EK+UgeahWf4BgqthjXr2VqdOEROTpAlB8laOtySddtY4TaMM1/
PAGVtpN0phKdN4/+lfzDVi5yD4iHmE433mr6U2qBCVjOZW1zdcczz/G0xZN5VHDb
Nq84l8TEsOm2ZfprqNzDfuLnnCAdZg3fhcVfK1fB8lCCYdlElOcrJEhskQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUNwUJkDa43hLn2VfJbJgh3TuRZMB8GA1UdIwQY
MBaAFPFZB34EOHcFlgPKoOPlhLFibo97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMt
MDNkOTA0YzgwMmNlLzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMtMDNkOTA0YzgwMmNl
LzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiQv2LY/
a1R6rvi6mZZJG2iO2ulSSy8pz8zerDolGR7KryVYhXxIvv31dw+Z8a7vGeFN96ej
UkEsNxztVOurxoBQPoaE4pQXjvExLOp9P3f6oGUIhEpp7DeJVt80WBENJj/F5gzn
EHREnxMwBq3HiR5dmZynlOwLc8j2vIZvVaQocyeEoQehDXVzIwpsZX+10EMSGY0R
NUIfNpgcjGcUlGuUwj5KPDS0FNIzY7vZlUUvpDcMannc/EUPKo2XzGHSMALj8uuW
g1Mjei1WQtJGzM2m5gjWPHjnPsxNd1TfKQ+aDzTFVnBARcnowT2bGBkY9Pu+Z0mS
sWiwbklBAXu9rQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:35 2025 by rpki-client