Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File:                     8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier:          Ql7VcVFzcM+XL2zQkxrzXtNZMHYJ8QEnc9CUQzjw/Rw=
Subject key identifier:   D5:66:7E:95:12:05:AD:B4:97:FF:DE:8D:C1:F3:D9:EB:CA:F8:B2:85
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer:       /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial:       0198D515F96AF932C322774D4420965A90DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number:          1092
Signing time:             Sat 23 Aug 2025 04:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:43 +0000
Files and hashes:         1: 3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa (hash: pOZz2o1zgseBlXSeMbMTXOoQ45eoVXgqdP67Uo4BTQg=)
                          2: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: d4GuKaPQGAPJCtgtPC32ld3pLVADsDd2J2/JIZTzuHE=)
                          3: I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa (hash: pAX53nRh4A+NdTng//otyGRQizgrDPu6+ERbaPVic0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:f9:6a:f9:32:c3:22:77:4d:44:20:96:5a:90:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
        Validity
            Not Before: Aug 23 04:00:43 2025 GMT
            Not After : Aug 24 04:00:43 2025 GMT
        Subject: CN=d5667e951205adb497ffde8dc1f3d9ebcaf8b285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:10:55:5e:80:d5:06:1d:c8:86:67:3e:cc:
                    06:61:8d:ff:e2:0e:ee:c4:38:e5:de:e8:5c:21:f2:
                    11:c9:c0:85:50:06:9f:5f:fe:3d:d4:04:7e:8c:7d:
                    73:d1:ef:36:87:6d:04:c9:ea:85:ff:8c:51:71:0d:
                    94:7a:71:97:f3:36:53:29:f5:4e:bc:78:af:b4:73:
                    76:3d:53:d9:29:32:ca:ec:77:15:d0:06:a8:6c:1f:
                    7f:30:83:69:69:1d:d9:fc:a5:6d:93:d8:8d:f5:ca:
                    82:70:69:74:2b:18:7c:bc:25:b0:d4:1b:08:de:43:
                    be:67:d9:f6:76:29:f6:6e:63:37:96:fa:92:fe:d4:
                    21:9d:66:de:98:64:ad:f0:24:85:57:55:04:ed:7b:
                    f5:8d:f7:ef:2d:95:c3:73:6f:13:b9:7c:fa:0b:d7:
                    05:b9:a7:a6:73:83:82:c7:19:45:1b:de:b9:5f:fc:
                    53:95:70:53:dd:25:c4:4c:df:a5:14:36:4c:03:e2:
                    2a:d1:2d:38:34:51:81:5e:88:ca:2c:83:c7:43:b8:
                    b5:b2:e6:f7:43:a0:ec:59:99:b2:a6:58:09:83:d4:
                    dc:ef:c1:18:58:3a:7e:73:73:e6:d6:b7:c4:44:4a:
                    b0:f2:90:5b:cd:07:2b:58:98:72:5b:19:05:50:6a:
                    15:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:66:7E:95:12:05:AD:B4:97:FF:DE:8D:C1:F3:D9:EB:CA:F8:B2:85
            X509v3 Authority Key Identifier:
                keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ca:2d:37:f6:9e:00:cf:cd:44:17:ad:44:8f:b4:4b:ee:42:
         df:af:f3:14:89:a2:01:fa:3a:5a:35:2d:4e:e0:53:78:f6:c6:
         90:3c:c5:97:e2:3c:4e:97:bb:91:53:07:59:0d:b9:5c:71:95:
         ed:1d:f8:32:ce:fd:55:fa:21:46:83:72:ae:ac:15:a4:17:d3:
         4b:e3:c8:91:31:f4:af:eb:37:97:5a:7b:ab:98:eb:3a:bf:ae:
         e6:f3:82:54:91:0b:12:1d:3f:85:4f:91:e6:1c:c7:72:c5:ec:
         25:4f:a4:43:6b:93:6c:1b:b0:36:ef:86:19:c1:d2:d2:6d:68:
         f6:d5:55:ac:f2:79:8d:f1:7b:dc:52:75:d3:99:1a:03:a5:4c:
         43:21:c7:5e:05:b3:10:94:3f:85:5f:82:22:56:42:ee:ff:1f:
         52:80:3f:3d:05:38:fc:90:fb:33:8e:7d:97:dc:d2:16:34:12:
         95:c1:c0:4a:16:47:aa:67:fc:fd:0d:9a:7c:27:8a:23:f1:3b:
         bb:83:b6:8e:a9:ac:6e:be:0a:79:29:0c:b1:55:d1:15:c4:63:
         db:b5:ac:72:3a:6e:b4:e8:5f:97:5b:7c:46:f0:f1:aa:c5:9a:
         99:4c:ee:e7:2e:a2:3d:da:38:06:b7:b8:5b:b6:87:aa:a8:06:
         2a:ac:78:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFflq+TLDIndNRCCWWpDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNWNiOWFmYzhhODY3MGUxZjExNmNiZDIxNDk5YzlmNzEy
MTViYzAwHhcNMjUwODIzMDQwMDQzWhcNMjUwODI0MDQwMDQzWjAzMTEwLwYDVQQD
EyhkNTY2N2U5NTEyMDVhZGI0OTdmZmRlOGRjMWYzZDllYmNhZjhiMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuQQVV6A1QYdyIZnPswGYY3/4g7u
xDjl3uhcIfIRycCFUAafX/491AR+jH1z0e82h20EyeqF/4xRcQ2UenGX8zZTKfVO
vHivtHN2PVPZKTLK7HcV0AaobB9/MINpaR3Z/KVtk9iN9cqCcGl0Kxh8vCWw1BsI
3kO+Z9n2din2bmM3lvqS/tQhnWbemGSt8CSFV1UE7Xv1jffvLZXDc28TuXz6C9cF
uaemc4OCxxlFG965X/xTlXBT3SXETN+lFDZMA+Iq0S04NFGBXojKLIPHQ7i1sub3
Q6DsWZmyplgJg9Tc78EYWDp+c3Pm1rfEREqw8pBbzQcrWJhyWxkFUGoVrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVmfpUSBa20l//ejcHz2evK+LKFMB8GA1UdIwQY
MBaAFPFcua/IqGcOHxFsvSFJnJ9xIVvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgt
MDI3YTc0M2JhNDYyLzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgtMDI3YTc0M2JhNDYy
LzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMotN/ae
AM/NRBetRI+0S+5C36/zFImiAfo6WjUtTuBTePbGkDzFl+I8Tpe7kVMHWQ25XHGV
7R34Ms79VfohRoNyrqwVpBfTS+PIkTH0r+s3l1p7q5jrOr+u5vOCVJELEh0/hU+R
5hzHcsXsJU+kQ2uTbBuwNu+GGcHS0m1o9tVVrPJ5jfF73FJ105kaA6VMQyHHXgWz
EJQ/hV+CIlZC7v8fUoA/PQU4/JD7M459l9zSFjQSlcHAShZHqmf8/Q2afCeKI/E7
u4O2jqmsbr4KeSkMsVXRFcRj27WscjputOhfl1t8RvDxqsWamUzu5y6iPdo4Bre4
W7aHqqgGKqx4og==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:44 2025 by rpki-client