Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File:                     M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier:          8+tUyRspGTaSnWHPUisd99ZGaF+llvl9wGhuxadW3pQ=
Subject key identifier:   FE:B8:82:57:7B:FE:73:FA:35:4B:00:68:5D:6E:9B:95:07:6F:D0:29
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer:       /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial:       0198D5BBB9858148BBA452E24D5C5CB5D349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 07:01:46 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:46 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:46 +0000
Files and hashes:         1: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: 98yCAezCygSOX/DID6zaFL2EiYpvtVH2Ce9Qf3N2SQA=)
                          2: ReM4HS5dXIm1BINFYm_Edq9MxBI.roa (hash: ChJsWIxFI+FaET5RTWvveeFgIxBAP+n5s4jzz5FmLi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:b9:85:81:48:bb:a4:52:e2:4d:5c:5c:b5:d3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
        Validity
            Not Before: Aug 23 07:01:46 2025 GMT
            Not After : Aug 24 07:01:46 2025 GMT
        Subject: CN=feb882577bfe73fa354b00685d6e9b95076fd029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8b:be:cd:4d:50:2a:ee:69:0f:e7:7a:df:09:
                    31:b5:92:53:60:ec:71:48:06:01:0a:85:b5:02:d7:
                    34:14:c4:41:73:17:40:72:f5:3a:98:04:6e:bf:59:
                    b2:29:2a:02:7f:63:fd:74:fc:a3:8c:6a:c0:5d:3f:
                    33:6f:30:96:20:c1:43:96:25:64:31:5f:0f:2e:50:
                    f8:f6:21:0e:ac:cd:f6:ea:14:27:66:b8:9e:35:00:
                    27:42:9b:35:19:8a:70:c0:38:ae:40:d8:3c:f5:11:
                    e8:76:b1:83:a5:fd:4f:26:5c:44:7f:6c:69:71:17:
                    6e:7f:65:80:cb:60:ad:60:1f:43:d0:d8:ca:a0:83:
                    49:f5:55:50:71:c0:aa:42:43:f7:4b:95:8a:ac:95:
                    99:48:2e:b0:36:19:ac:ed:2a:4a:f8:2e:ae:bd:dd:
                    46:b4:c3:4e:dc:69:12:7a:4e:13:b4:9b:b0:c7:d4:
                    7b:bf:bf:88:e7:5f:20:7d:c1:af:66:04:6f:d8:97:
                    14:66:27:88:d5:6f:3b:e4:59:73:e7:7b:6c:50:6a:
                    ea:c0:85:2c:5f:16:22:58:a3:7a:00:8c:bb:d9:1e:
                    71:ae:b8:db:6c:a9:44:91:fe:f6:ab:f9:58:7c:43:
                    7c:4f:8f:68:e9:17:19:d7:66:66:8e:ec:2e:60:74:
                    b8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B8:82:57:7B:FE:73:FA:35:4B:00:68:5D:6E:9B:95:07:6F:D0:29
            X509v3 Authority Key Identifier:
                keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:4a:3b:dc:6e:5a:38:68:1b:09:d2:0a:0a:66:df:02:b3:89:
         f8:e4:e1:b7:68:c0:c8:86:30:a3:82:f5:86:7e:fb:34:17:85:
         3c:0a:ec:ef:4d:9f:43:52:d8:b1:32:47:78:99:84:fe:5b:a5:
         ed:8d:f9:ce:72:93:7c:4b:28:6d:03:3b:76:65:99:ab:2a:3c:
         d2:c5:b0:fc:80:8a:e8:d8:49:f9:4c:f5:d7:76:ed:e2:eb:25:
         99:6e:ea:00:6a:dd:96:8b:81:b5:c3:89:73:db:a5:ef:6e:68:
         31:e7:65:e1:85:0b:de:64:34:b1:e4:32:ba:ae:16:ef:56:55:
         3d:86:cc:54:bb:93:fc:5c:44:47:dd:65:85:29:6a:b3:f5:c8:
         3c:ba:9a:a7:33:eb:0a:da:53:ed:26:1e:e2:bb:e9:b8:b4:5c:
         1f:97:5e:69:38:ec:ba:07:2d:bb:3e:b8:2e:4a:53:d8:11:19:
         96:44:9b:ea:68:3b:ca:fd:19:ea:67:76:32:12:9d:33:3f:3e:
         b0:90:c1:ff:2b:cb:ff:08:7f:7d:af:86:9d:bf:39:d6:b5:96:
         03:13:44:8d:cc:c4:90:f7:05:83:f0:9c:80:1a:e6:5b:e1:7f:
         df:ad:18:b4:bc:31:2c:7f:92:66:b0:39:d9:14:34:a8:dd:b4:
         6e:53:77:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7mFgUi7pFLiTVxctdNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZTg1NTBiY2M5ZmIzYjE0MDI2MGMyOWQ2OWY3ODk5Nzhk
Y2MwOWEwHhcNMjUwODIzMDcwMTQ2WhcNMjUwODI0MDcwMTQ2WjAzMTEwLwYDVQQD
EyhmZWI4ODI1NzdiZmU3M2ZhMzU0YjAwNjg1ZDZlOWI5NTA3NmZkMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkou+zU1QKu5pD+d63wkxtZJTYOxx
SAYBCoW1Atc0FMRBcxdAcvU6mARuv1myKSoCf2P9dPyjjGrAXT8zbzCWIMFDliVk
MV8PLlD49iEOrM326hQnZrieNQAnQps1GYpwwDiuQNg89RHodrGDpf1PJlxEf2xp
cRduf2WAy2CtYB9D0NjKoINJ9VVQccCqQkP3S5WKrJWZSC6wNhms7SpK+C6uvd1G
tMNO3GkSek4TtJuwx9R7v7+I518gfcGvZgRv2JcUZieI1W875Flz53tsUGrqwIUs
XxYiWKN6AIy72R5xrrjbbKlEkf72q/lYfEN8T49o6RcZ12ZmjuwuYHS4xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP64gld7/nP6NUsAaF1um5UHb9ApMB8GA1UdIwQY
MBaAFDPoVQvMn7OxQCYMKdafeJl43MCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYt
YWQyNDk3ZjI4NGY1LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYtYWQyNDk3ZjI4NGY1
LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUo73G5a
OGgbCdIKCmbfArOJ+OTht2jAyIYwo4L1hn77NBeFPArs702fQ1LYsTJHeJmE/lul
7Y35znKTfEsobQM7dmWZqyo80sWw/ICK6NhJ+Uz113bt4uslmW7qAGrdlouBtcOJ
c9ul725oMedl4YUL3mQ0seQyuq4W71ZVPYbMVLuT/FxER91lhSlqs/XIPLqapzPr
CtpT7SYe4rvpuLRcH5deaTjsugctuz64LkpT2BEZlkSb6mg7yv0Z6md2MhKdMz8+
sJDB/yvL/wh/fa+Gnb851rWWAxNEjczEkPcFg/CcgBrmW+F/360YtLwxLH+SZrA5
2RQ0qN20blN3Zg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:34 2025 by rpki-client