Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
File:                     irCobN7x1oVdGd50F1Nzzcga78w.mft (raw, json)
Hash identifier:          wqi/N+ONU6t53+O0T3aGaFnlhTW9bSzLFJXOKKB4p+Y=
Subject key identifier:   A6:CA:DF:03:1F:0F:F1:85:FF:83:2C:C8:BC:EF:FD:8F:9D:61:E2:FC
Authority key identifier: 8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
Certificate issuer:       /CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Certificate serial:       0198D473303038AA8583811B25EAD17064F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
Manifest number:          FE
Signing time:             Sat 23 Aug 2025 01:02:55 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:55 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:55 +0000
Files and hashes:         1: iDD0dIi8FZu6HOhyS7tjvaUtgQE.roa (hash: 0JHKcL5Vnxkq7EPVZmPbz9exzTMRAeW5CIg2FGWWjPE=)
                          2: irCobN7x1oVdGd50F1Nzzcga78w.crl (hash: xACL20F2tbs/9r/2HWXM/kG+aRm29lJUR1qv6YNIVqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:30:30:38:aa:85:83:81:1b:25:ea:d1:70:64:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
        Validity
            Not Before: Aug 23 01:02:55 2025 GMT
            Not After : Aug 24 01:02:55 2025 GMT
        Subject: CN=a6cadf031f0ff185ff832cc8bceffd8f9d61e2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:34:26:d9:2c:8a:2d:a5:93:28:5e:fa:d0:
                    a2:75:11:d2:b5:15:63:d8:e3:47:9c:82:c1:ad:cb:
                    c8:12:2b:54:5e:06:35:0d:01:2b:b4:38:6b:a3:12:
                    28:c0:47:1f:e8:98:c0:bf:8e:67:46:f0:3b:df:81:
                    13:a9:d1:a4:34:0f:53:cb:51:62:49:86:47:13:4a:
                    0c:7c:69:ad:a7:57:cd:49:10:7d:c1:5e:dc:c6:2b:
                    87:9b:5a:c9:4d:59:6d:c1:9e:60:c6:8d:ff:f4:24:
                    48:76:29:d9:f2:66:94:6d:a1:d1:61:ab:51:86:9b:
                    96:07:c4:e7:7b:35:bd:f2:2d:38:8d:3a:b4:8c:ab:
                    7b:5b:92:b9:de:9c:0c:e2:85:67:80:01:fb:60:74:
                    ce:b6:f3:86:36:2a:6b:6e:62:0d:2d:a0:ea:5a:1a:
                    39:f5:21:4d:af:ad:c4:49:b0:01:69:e7:b9:79:c3:
                    41:d3:31:39:3e:b5:17:26:d0:2a:7b:17:b0:b6:a3:
                    11:65:31:37:d8:a9:75:67:8f:89:06:04:cf:51:ae:
                    67:36:b8:a6:f2:3b:7c:57:de:49:90:ff:bf:dc:28:
                    05:c4:f0:4f:d5:ea:d5:44:a5:6a:2f:ed:47:db:4d:
                    e6:3f:81:3a:a2:87:fc:44:c6:b2:c1:c7:77:54:4f:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CA:DF:03:1F:0F:F1:85:FF:83:2C:C8:BC:EF:FD:8F:9D:61:E2:FC
            X509v3 Authority Key Identifier:
                keyid:8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e1:09:80:d5:ce:d4:44:1e:7f:f5:87:87:0e:3f:97:d6:ba:
         34:ed:b2:0b:5d:20:0e:a4:69:d4:a7:0f:96:fc:e8:01:11:08:
         2d:a7:e1:50:db:28:1f:7f:e9:63:93:2b:f5:53:76:8f:3e:1c:
         42:74:17:e9:f8:da:8f:19:ec:10:91:cc:82:6e:5d:e8:00:d3:
         2b:6a:16:da:ef:da:2e:ca:d9:3c:9c:aa:c5:e3:ef:d4:a3:0e:
         64:84:9f:0e:84:b8:e4:45:7b:10:2b:e6:c1:4f:00:de:2d:96:
         ac:06:7f:5a:c0:b5:f7:3e:fa:20:f2:9f:5d:68:8a:ee:55:c9:
         32:ed:85:81:f9:68:73:0d:dd:58:e7:2b:ed:29:94:6e:e2:33:
         a0:88:5d:27:dc:87:fa:45:fb:75:fc:99:d3:0f:83:b6:e6:d8:
         35:bd:72:7d:e9:5f:2d:39:b6:4f:d6:35:43:1a:e4:95:30:ef:
         7f:7b:e9:d6:96:08:1e:70:e0:66:5f:f3:c7:95:a5:9a:9d:f5:
         1f:50:e0:b0:1b:80:22:30:f2:22:11:05:f1:78:c5:c4:4d:01:
         24:d9:68:79:f0:a7:72:07:62:84:08:f2:ca:4a:36:27:d3:2e:
         41:c8:2f:fb:f2:37:ac:45:ee:97:b9:ac:01:50:26:81:d5:de:
         4d:cf:31:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUczAwOKqFg4EbJerRcGT0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjBhODZjZGVmMWQ2ODU1ZDE5ZGU3NDE3NTM3M2NkYzgx
YWVmY2MwHhcNMjUwODIzMDEwMjU1WhcNMjUwODI0MDEwMjU1WjAzMTEwLwYDVQQD
EyhhNmNhZGYwMzFmMGZmMTg1ZmY4MzJjYzhiY2VmZmQ4ZjlkNjFlMmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1E0Jtksii2lkyhe+tCidRHStRVj
2ONHnILBrcvIEitUXgY1DQErtDhroxIowEcf6JjAv45nRvA734ETqdGkNA9Ty1Fi
SYZHE0oMfGmtp1fNSRB9wV7cxiuHm1rJTVltwZ5gxo3/9CRIdinZ8maUbaHRYatR
hpuWB8TnezW98i04jTq0jKt7W5K53pwM4oVngAH7YHTOtvOGNiprbmINLaDqWho5
9SFNr63ESbABaee5ecNB0zE5PrUXJtAqexewtqMRZTE32Kl1Z4+JBgTPUa5nNrim
8jt8V95JkP+/3CgFxPBP1erVRKVqL+1H203mP4E6oof8RMaywcd3VE+6IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbK3wMfD/GF/4MsyLzv/Y+dYeL8MB8GA1UdIwQY
MBaAFIqwqGze8daFXRnedBdTc83IGu/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mODIzN2MtZTA0YS00ZGRkLThjZWIt
ZDBmMjQ5YmMzZmVkLzEvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mODIzN2MtZTA0YS00ZGRkLThjZWItZDBmMjQ5YmMzZmVk
LzEvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouEJgNXO
1EQef/WHhw4/l9a6NO2yC10gDqRp1KcPlvzoAREILafhUNsoH3/pY5Mr9VN2jz4c
QnQX6fjajxnsEJHMgm5d6ADTK2oW2u/aLsrZPJyqxePv1KMOZISfDoS45EV7ECvm
wU8A3i2WrAZ/WsC19z76IPKfXWiK7lXJMu2Fgflocw3dWOcr7SmUbuIzoIhdJ9yH
+kX7dfyZ0w+DtubYNb1yfelfLTm2T9Y1QxrklTDvf3vp1pYIHnDgZl/zx5Wlmp31
H1DgsBuAIjDyIhEF8XjFxE0BJNloefCncgdihAjyyko2J9MuQcgv+/I3rEXul7ms
AVAmgdXeTc8xDw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:24 2025 by rpki-client