Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
File:                     8ihddApeiSzQvm8iT00_Tp1t0cQ.mft (raw, json)
Hash identifier:          R40IIRXvNpyqukf89R3QXebniilyrVqwOLo3E5z3TwY=
Subject key identifier:   A4:18:1C:CD:4F:A4:89:9C:DB:3B:CE:94:E8:B7:30:2A:FF:AA:E8:78
Authority key identifier: F2:28:5D:74:0A:5E:89:2C:D0:BE:6F:22:4F:4D:3F:4E:9D:6D:D1:C4
Certificate issuer:       /CN=f2285d740a5e892cd0be6f224f4d3f4e9d6dd1c4
Certificate serial:       019921B1D8548CC4C0D0E05414399677EED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
Manifest number:          0629
Signing time:             Sun 07 Sep 2025 01:02:07 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:07 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:07 +0000
Files and hashes:         1: 8ihddApeiSzQvm8iT00_Tp1t0cQ.crl (hash: gIPd4aNaI/MOWW9rR4X2o+oPnto2u8yBvvPAE8C8jLE=)
                          2: MHj3Uc-p1kz3nu3McqkQnyvmX5k.roa (hash: jZ2LYvOeYYqufGXlqvtkULLXS9QyefT3nRWf2hFGUNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:d8:54:8c:c4:c0:d0:e0:54:14:39:96:77:ee:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2285d740a5e892cd0be6f224f4d3f4e9d6dd1c4
        Validity
            Not Before: Sep  7 01:02:07 2025 GMT
            Not After : Sep  8 01:02:07 2025 GMT
        Subject: CN=a4181ccd4fa4899cdb3bce94e8b7302affaae878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:20:55:fb:f7:e9:4b:c0:4d:a3:50:a9:41:
                    3b:5c:bc:08:e7:a8:53:b0:2c:ba:63:15:0f:17:f9:
                    d6:89:48:a0:dc:c2:80:72:c5:80:b5:c6:27:9c:67:
                    5c:60:96:f7:d1:08:7b:ca:9c:93:13:19:ae:c5:a0:
                    19:87:f8:0e:cd:55:57:09:72:50:ca:e6:3e:9f:24:
                    fe:4d:a1:b8:14:8b:50:a6:a0:c6:cd:29:35:1d:24:
                    c5:de:43:e6:ba:a3:2a:95:52:f8:2e:ea:36:33:71:
                    2e:13:83:c6:b9:ba:5b:13:e6:da:a0:ae:d7:67:cb:
                    e4:24:53:53:2d:ce:8b:13:d0:96:72:47:1d:de:f5:
                    1e:66:b4:c3:ff:16:d5:48:09:33:67:1b:a0:65:0f:
                    5e:42:12:c7:8b:6d:64:67:2b:94:b3:89:d8:1e:8a:
                    94:d5:07:d8:c9:d6:cc:af:da:f7:d2:26:83:9d:30:
                    ac:15:81:a2:19:72:e6:44:79:41:09:50:59:22:f2:
                    57:7f:a1:b2:ef:34:55:e8:ca:a9:c2:2e:c1:ff:41:
                    f2:3f:79:83:35:01:14:bc:71:59:bf:15:3c:a1:05:
                    b7:d4:63:54:d4:f8:b5:7c:67:fd:76:1f:b0:4e:db:
                    f9:34:40:cb:67:9b:0c:4c:9f:13:8c:fc:1e:29:97:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:18:1C:CD:4F:A4:89:9C:DB:3B:CE:94:E8:B7:30:2A:FF:AA:E8:78
            X509v3 Authority Key Identifier:
                keyid:F2:28:5D:74:0A:5E:89:2C:D0:BE:6F:22:4F:4D:3F:4E:9D:6D:D1:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8d:d8:c9:54:d4:55:8a:c2:ba:4f:e8:6f:92:db:58:4d:0e:
         00:f0:16:4e:1f:82:6d:a9:82:c8:8b:fc:92:fc:7a:88:1c:27:
         f9:e8:49:49:01:46:51:13:26:bf:b9:65:88:f4:69:93:c4:5b:
         ca:3e:5e:7d:b9:af:49:ae:65:24:62:4a:ab:63:86:f3:76:47:
         68:04:d5:bf:58:b8:c9:85:13:30:c6:98:36:02:b1:c4:0b:54:
         b3:6a:8d:46:fd:c2:c5:23:7e:41:1d:3d:99:dc:0a:9b:a0:4d:
         b2:c8:93:d3:6c:d6:45:30:29:0b:67:83:1c:06:ad:22:64:87:
         ed:4e:73:e5:5e:9e:23:d1:b0:22:02:df:ec:61:fe:a3:be:6d:
         8b:1e:28:af:33:9a:2b:86:8a:ca:07:e3:39:3d:03:d6:39:a7:
         04:f2:68:63:aa:30:a9:d3:99:c2:25:8d:c2:37:5d:02:33:77:
         0c:f3:43:ac:2d:77:bb:3f:e5:db:59:a2:7e:bb:21:f7:ce:71:
         bf:92:94:c0:4b:ee:35:c3:42:44:28:b0:ba:1d:97:19:8c:89:
         6b:46:39:98:3a:fa:7d:57:d1:f4:c7:0d:e7:c0:05:3b:0e:76:
         8d:9e:61:36:00:1b:b3:87:7a:72:ee:bc:a6:4a:9e:f5:8e:32:
         f3:e8:c3:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsdhUjMTA0OBUFDmWd+7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjg1ZDc0MGE1ZTg5MmNkMGJlNmYyMjRmNGQzZjRlOWQ2
ZGQxYzQwHhcNMjUwOTA3MDEwMjA3WhcNMjUwOTA4MDEwMjA3WjAzMTEwLwYDVQQD
EyhhNDE4MWNjZDRmYTQ4OTljZGIzYmNlOTRlOGI3MzAyYWZmYWFlODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhwgVfv36UvATaNQqUE7XLwI56hT
sCy6YxUPF/nWiUig3MKAcsWAtcYnnGdcYJb30Qh7ypyTExmuxaAZh/gOzVVXCXJQ
yuY+nyT+TaG4FItQpqDGzSk1HSTF3kPmuqMqlVL4Luo2M3EuE4PGubpbE+baoK7X
Z8vkJFNTLc6LE9CWckcd3vUeZrTD/xbVSAkzZxugZQ9eQhLHi21kZyuUs4nYHoqU
1QfYydbMr9r30iaDnTCsFYGiGXLmRHlBCVBZIvJXf6Gy7zRV6Mqpwi7B/0HyP3mD
NQEUvHFZvxU8oQW31GNU1Pi1fGf9dh+wTtv5NEDLZ5sMTJ8TjPweKZez7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQYHM1PpImc2zvOlOi3MCr/quh4MB8GA1UdIwQY
MBaAFPIoXXQKXoks0L5vIk9NP06dbdHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGloZGRBcGVpU3pRdm04aVQwMF9UcDF0MGNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMzBlNmItNTY3NS00YTI2LWI4NDkt
ZjFjMjU5ZGJlNjNlLzEvOGloZGRBcGVpU3pRdm04aVQwMF9UcDF0MGNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zMzBlNmItNTY3NS00YTI2LWI4NDktZjFjMjU5ZGJlNjNl
LzEvOGloZGRBcGVpU3pRdm04aVQwMF9UcDF0MGNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdo3YyVTU
VYrCuk/ob5LbWE0OAPAWTh+CbamCyIv8kvx6iBwn+ehJSQFGURMmv7lliPRpk8Rb
yj5efbmvSa5lJGJKq2OG83ZHaATVv1i4yYUTMMaYNgKxxAtUs2qNRv3CxSN+QR09
mdwKm6BNssiT02zWRTApC2eDHAatImSH7U5z5V6eI9GwIgLf7GH+o75tix4orzOa
K4aKygfjOT0D1jmnBPJoY6owqdOZwiWNwjddAjN3DPNDrC13uz/l21mifrsh985x
v5KUwEvuNcNCRCiwuh2XGYyJa0Y5mDr6fVfR9McN58AFOw52jZ5hNgAbs4d6cu68
pkqe9Y4y8+jDJA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:00 2025 by rpki-client