Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File:                     85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier:          vDa/PVztcRPkDUBv3O6hBbIpevdtgQxbXnnmwcbFReU=
Subject key identifier:   30:3F:C7:8D:1E:1E:82:10:FE:B0:26:D9:8D:24:FF:02:5A:D3:E1:DC
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer:       /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial:       0198D4DFFCD2BDFCC9C08AD391F74F15F0D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 03:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:45 +0000
Files and hashes:         1: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: 48p8HRD35n6tC24FczwLdkLZVjwr3VeuE52wOHP+faI=)
                          2: DgSG9NAY-GeZhhQF_9nz_5bnH4g.roa (hash: HVd5RwrEtlWn4VmR//6rMsJVil50z8bOvrCZBZiqbC0=)
                          3: KW9AN_X4Hh4VKuAnb6bJtRrKymg.roa (hash: J21F/I0zRgekIus74H7I/v2eoj4Bzdqg85T8XsMU8eI=)
                          4: KaCCbIDfk6xPLr8lzeQM2ayQkYY.roa (hash: stYyC3DZ280ukMQVQAStdzjvt9KMG36guiRh8dH8BRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:fc:d2:bd:fc:c9:c0:8a:d3:91:f7:4f:15:f0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
        Validity
            Not Before: Aug 23 03:01:45 2025 GMT
            Not After : Aug 24 03:01:45 2025 GMT
        Subject: CN=303fc78d1e1e8210feb026d98d24ff025ad3e1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:f0:9f:24:e2:97:ac:85:6e:e2:99:6c:78:
                    dc:0d:66:b7:aa:84:cc:a4:e4:0f:bf:32:d9:62:2f:
                    4e:d7:2a:f3:5e:3b:f5:e8:aa:87:d5:43:f4:ee:b2:
                    60:53:5b:65:4c:44:7d:43:41:b0:b6:b3:d1:9a:ea:
                    c8:7e:96:16:55:e2:09:c6:ff:4a:f9:a4:d6:38:cf:
                    d8:45:b3:c0:d0:60:db:17:54:ad:5b:1c:99:fe:37:
                    44:5c:89:7c:a9:8a:9d:08:7c:7b:1c:50:5d:71:bc:
                    ab:4d:93:01:05:d8:35:d1:58:25:7d:b1:2e:3b:99:
                    ff:ff:30:03:17:93:67:56:4d:20:7f:e4:54:6c:b2:
                    0a:87:84:b6:ee:1f:6e:39:b3:f6:99:43:ca:c7:3f:
                    3d:d6:34:94:02:8b:78:e3:9f:85:be:4e:9f:d3:8a:
                    4b:d4:fd:51:4c:7e:d6:96:99:52:4a:e0:a1:b6:7a:
                    78:f3:9d:18:8e:30:2d:bf:1d:51:4d:68:e1:e2:b7:
                    99:ab:19:cf:08:98:65:b1:aa:67:38:4f:34:6e:16:
                    09:0e:d4:20:13:8f:f0:10:1c:6b:5c:63:b9:59:2d:
                    70:6b:46:64:20:6b:58:38:8a:a7:eb:fc:91:10:6d:
                    35:2e:43:b7:c2:df:fa:29:fb:50:84:1d:cc:94:4d:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3F:C7:8D:1E:1E:82:10:FE:B0:26:D9:8D:24:FF:02:5A:D3:E1:DC
            X509v3 Authority Key Identifier:
                keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:b7:29:4b:cc:16:9f:38:31:ce:d1:e2:47:d6:fe:fc:fa:
         5e:ae:7c:c1:14:95:be:b2:c7:32:79:19:70:6b:a1:16:6c:08:
         44:84:c9:d4:c9:50:0b:de:17:8c:45:ad:f5:1a:59:90:84:80:
         bc:ad:6c:1a:d9:99:17:51:6e:16:dc:fb:9e:19:36:45:ad:13:
         ab:da:50:46:70:b6:3a:41:83:d7:be:75:b6:5b:a4:af:c9:33:
         23:85:73:c1:3b:99:78:98:ae:af:c0:86:4a:97:35:05:16:63:
         20:9a:04:78:3a:48:41:87:00:ae:1d:5b:e2:27:f9:07:bb:a2:
         a4:75:51:41:b9:56:f0:f7:2e:66:2e:9a:c6:b5:e1:12:34:09:
         0f:6f:8f:31:17:bc:ae:a0:31:c5:04:a4:6f:a7:21:e1:18:5c:
         95:3b:42:8e:65:ef:59:88:40:1c:94:c1:be:dd:55:2f:88:78:
         91:52:9e:22:76:89:77:0d:1b:6c:9b:b1:c7:db:e4:39:48:f0:
         5d:84:85:d7:39:43:9c:2f:4b:99:ba:e8:2b:97:04:ff:2f:b1:
         2a:fb:68:25:17:4e:a3:77:f2:8d:68:61:17:dc:b2:86:6d:3b:
         0e:d0:2c:f9:fd:84:19:53:24:d6:8b:de:13:d6:f7:34:96:ba:
         36:e8:c9:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/zSvfzJwIrTkfdPFfDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzOTRhNDY0NzI4YjgyODU2ZGMyYjk1NWNjYWU5YWI1YmE2
NTM5YzgwHhcNMjUwODIzMDMwMTQ1WhcNMjUwODI0MDMwMTQ1WjAzMTEwLwYDVQQD
EygzMDNmYzc4ZDFlMWU4MjEwZmViMDI2ZDk4ZDI0ZmYwMjVhZDNlMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaDwnyTil6yFbuKZbHjcDWa3qoTM
pOQPvzLZYi9O1yrzXjv16KqH1UP07rJgU1tlTER9Q0GwtrPRmurIfpYWVeIJxv9K
+aTWOM/YRbPA0GDbF1StWxyZ/jdEXIl8qYqdCHx7HFBdcbyrTZMBBdg10VglfbEu
O5n//zADF5NnVk0gf+RUbLIKh4S27h9uObP2mUPKxz891jSUAot445+Fvk6f04pL
1P1RTH7WlplSSuChtnp4850YjjAtvx1RTWjh4reZqxnPCJhlsapnOE80bhYJDtQg
E4/wEBxrXGO5WS1wa0ZkIGtYOIqn6/yREG01LkO3wt/6KftQhB3MlE0flwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDA/x40eHoIQ/rAm2Y0k/wJa0+HcMB8GA1UdIwQY
MBaAFPOUpGRyi4KFbcK5VcyumrW6ZTnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgt
ZjI2NjRkMTkyMWQzLzEvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgtZjI2NjRkMTkyMWQz
LzEvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadS3KUvM
Fp84Mc7R4kfW/vz6Xq58wRSVvrLHMnkZcGuhFmwIRITJ1MlQC94XjEWt9RpZkISA
vK1sGtmZF1FuFtz7nhk2Ra0Tq9pQRnC2OkGD1751tlukr8kzI4VzwTuZeJiur8CG
Spc1BRZjIJoEeDpIQYcArh1b4if5B7uipHVRQblW8PcuZi6axrXhEjQJD2+PMRe8
rqAxxQSkb6ch4RhclTtCjmXvWYhAHJTBvt1VL4h4kVKeInaJdw0bbJuxx9vkOUjw
XYSF1zlDnC9LmbroK5cE/y+xKvtoJRdOo3fyjWhhF9yyhm07DtAs+f2EGVMk1ove
E9b3NJa6NujJQA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:46 2025 by rpki-client