Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File:                     IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier:          LG/I4vbL/A6Gnyr7h+/S1jBMrjRT8kEWeAaqolW+EhM=
Subject key identifier:   FE:CA:80:A1:60:AB:FB:B5:E0:F0:9C:1E:20:16:3E:98:11:3C:44:32
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer:       /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial:       01992D0FB5C5BDE92DFF958B3F64AC3BF4EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number:          0DC8
Signing time:             Tue 09 Sep 2025 06:00:28 +0000
Manifest this update:     Tue 09 Sep 2025 06:00:28 +0000
Manifest next update:     Wed 10 Sep 2025 06:00:28 +0000
Files and hashes:         1: 3JkM8vUrkCbAmhwQjTJzai8PJt4.roa (hash: rKQRrUjGotUF8dzfvK33idpF0k0Q/0xTsyKVQjD8oBU=)
                          2: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: tm/ECc3YlimDXa3PKLuKPJ+BBirqrNnISTpe2EpAz7w=)
                          3: PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (hash: zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=)
                          4: _BNEuQp4R33znBKyhfxbJ1you-4.roa (hash: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=)
                          5: mnqy6-9I7syV5NnsLpWi3fpLOC8.roa (hash: D7NIMHiclQcbihcQ+Xv2aL1MIBNF7eOXt+OvwoXOrNc=)
                          6: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (hash: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=)
                          7: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (hash: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:0f:b5:c5:bd:e9:2d:ff:95:8b:3f:64:ac:3b:f4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
        Validity
            Not Before: Sep  9 06:00:28 2025 GMT
            Not After : Sep 10 06:00:28 2025 GMT
        Subject: CN=feca80a160abfbb5e0f09c1e20163e98113c4432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fe:dd:89:81:40:96:dd:24:c0:a5:2b:8d:e4:
                    8e:97:ac:6d:ae:62:8a:61:a5:4b:9c:95:1c:d3:02:
                    3f:f0:b2:c0:d7:45:5d:b3:b3:9c:e8:b6:76:17:09:
                    db:0d:82:b5:98:fa:d3:6f:ff:fa:a8:7d:65:c5:3a:
                    9a:93:1a:bd:14:4e:4f:cd:a0:ec:63:e9:24:a7:f8:
                    b4:48:31:1a:c5:18:80:dd:4e:7b:e3:2d:95:c6:c0:
                    da:86:00:f0:92:50:1f:ed:64:09:18:d4:5c:43:6c:
                    a0:ac:bf:ad:5d:64:58:b8:66:43:70:ed:f8:c1:63:
                    57:cc:2b:f4:1d:a1:fc:33:51:18:9c:68:79:dc:53:
                    a4:51:32:01:fc:4d:dc:84:72:5b:9f:1f:01:99:ef:
                    e5:99:a2:7d:da:9e:ab:58:22:e5:01:89:be:64:27:
                    6b:c2:aa:11:16:f5:2d:ae:51:85:ea:8e:4f:74:41:
                    1f:18:66:03:0d:19:67:08:a6:17:6e:fa:72:63:96:
                    5d:ea:49:63:44:78:9c:48:ea:34:57:43:de:62:26:
                    ed:d3:f5:df:d7:9e:0c:69:c9:08:3c:6c:2b:13:b7:
                    fc:9e:cd:1c:72:26:b7:93:53:25:6d:8b:0b:9d:e4:
                    18:5f:fa:20:3f:a5:07:86:06:5e:60:41:63:74:a6:
                    18:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CA:80:A1:60:AB:FB:B5:E0:F0:9C:1E:20:16:3E:98:11:3C:44:32
            X509v3 Authority Key Identifier:
                keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:2e:ab:a3:0f:9d:ee:c1:5c:6e:23:fc:3c:38:07:8c:45:79:
         22:a9:21:fc:bb:f9:69:41:cc:9c:ff:3f:98:87:80:f6:3d:cd:
         32:b6:02:29:ea:0d:45:bd:e0:35:9a:eb:57:58:22:2e:15:7a:
         c0:17:ae:5e:f4:0a:60:c0:e4:e5:d8:86:bb:4d:c1:cf:d6:76:
         28:25:6e:e8:13:28:bd:08:c0:e6:85:8e:bf:18:ad:7d:3b:19:
         ce:0f:77:f0:f8:a2:5e:18:53:9d:96:9c:d7:81:4e:4c:c7:1d:
         7b:7a:fe:18:0b:9e:38:02:29:37:aa:07:d4:10:7d:d8:02:fc:
         63:f3:70:f4:95:5e:06:da:21:ab:f2:51:30:78:d4:4c:ea:ea:
         14:61:16:ea:9b:cd:82:bf:28:c0:91:42:a0:c8:1d:4e:c8:7b:
         b3:ca:92:0f:c4:4b:11:77:a9:1d:c7:a3:2a:55:16:23:33:70:
         ca:2f:38:cf:d9:d1:64:52:ca:ce:d1:d0:f8:8f:ee:0d:54:19:
         a7:34:22:17:2a:cd:36:27:5e:5d:95:b8:6d:ad:53:b9:12:41:
         8b:75:b2:ea:a7:fa:f5:35:99:df:48:0f:bd:1f:5c:85:ca:9e:
         6f:9a:0c:e5:cc:43:9d:87:b9:61:99:3d:9a:66:e7:a9:48:54:
         0b:cf:1d:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZktD7XFvekt/5WLP2SsO/TsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm
Y2VmODMwHhcNMjUwOTA5MDYwMDI4WhcNMjUwOTEwMDYwMDI4WjAzMTEwLwYDVQQD
EyhmZWNhODBhMTYwYWJmYmI1ZTBmMDljMWUyMDE2M2U5ODExM2M0NDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/7diYFAlt0kwKUrjeSOl6xtrmKK
YaVLnJUc0wI/8LLA10Vds7Oc6LZ2FwnbDYK1mPrTb//6qH1lxTqakxq9FE5PzaDs
Y+kkp/i0SDEaxRiA3U574y2VxsDahgDwklAf7WQJGNRcQ2ygrL+tXWRYuGZDcO34
wWNXzCv0HaH8M1EYnGh53FOkUTIB/E3chHJbnx8Bme/lmaJ92p6rWCLlAYm+ZCdr
wqoRFvUtrlGF6o5PdEEfGGYDDRlnCKYXbvpyY5Zd6kljRHicSOo0V0PeYibt0/Xf
154MackIPGwrE7f8ns0ccia3k1MlbYsLneQYX/ogP6UHhgZeYEFjdKYYxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7KgKFgq/u14PCcHiAWPpgRPEQyMB8GA1UdIwQY
MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt
YzY0N2E4YzFkZGZhLzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh
LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgy6row+d
7sFcbiP8PDgHjEV5Iqkh/Lv5aUHMnP8/mIeA9j3NMrYCKeoNRb3gNZrrV1giLhV6
wBeuXvQKYMDk5diGu03Bz9Z2KCVu6BMovQjA5oWOvxitfTsZzg938PiiXhhTnZac
14FOTMcde3r+GAueOAIpN6oH1BB92AL8Y/Nw9JVeBtohq/JRMHjUTOrqFGEW6pvN
gr8owJFCoMgdTsh7s8qSD8RLEXepHcejKlUWIzNwyi84z9nRZFLKztHQ+I/uDVQZ
pzQiFyrNNideXZW4ba1TuRJBi3Wy6qf69TWZ30gPvR9chcqeb5oM5cxDnYe5YZk9
mmbnqUhUC88dNQ==
-----END CERTIFICATE-----
Generated at Tue Sep 9 11:42:05 2025 by rpki-client