Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
File:                     tWKscBwU00uy5EdexRFSpAydPTw.mft (raw, json)
Hash identifier:          FHS6EDwe8I6GAoJn8YlxjNZXyIXaAixvH79vGlzT4yE=
Subject key identifier:   E8:65:A0:AB:92:22:82:3D:59:ED:8C:FF:09:9F:1F:41:E7:EE:77:E2
Authority key identifier: B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C
Certificate issuer:       /CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
Certificate serial:       0199228C881FA02E38FF779AFF26B3F70381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
Manifest number:          0758
Signing time:             Sun 07 Sep 2025 05:00:59 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:59 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:59 +0000
Files and hashes:         1: J4oSsE5CcGCiSDFTMI_mpkGNGGI.roa (hash: 8nhOBC3zyNvV6fERAZhV/f/NVIfJdmZ3Tk+7d8j6/i8=)
                          2: tWKscBwU00uy5EdexRFSpAydPTw.crl (hash: pxGxbhLwGR9/RfHgsmnhm1dzFxUs2Y1vRCEp69oLuP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:88:1f:a0:2e:38:ff:77:9a:ff:26:b3:f7:03:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
        Validity
            Not Before: Sep  7 05:00:59 2025 GMT
            Not After : Sep  8 05:00:59 2025 GMT
        Subject: CN=e865a0ab9222823d59ed8cff099f1f41e7ee77e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:a3:ef:f1:3b:4e:06:2d:9d:7f:5c:9b:eb:
                    76:9d:00:e4:87:f4:ac:4f:79:30:72:89:85:46:c1:
                    9f:39:9e:6a:2e:41:5c:d4:40:fe:f8:6e:be:01:70:
                    f5:28:46:53:79:a6:6e:7b:e1:6a:2b:d2:3b:34:e6:
                    da:4e:e6:ad:60:84:53:9a:73:de:48:be:16:0d:d3:
                    a3:25:d2:30:7f:06:89:97:73:c8:52:e9:b4:3f:e8:
                    d4:08:64:5f:c8:a6:fb:5f:6f:6f:0d:2b:18:ca:f9:
                    35:60:19:01:4f:a9:c0:a4:c2:e1:9b:9e:4b:74:80:
                    75:b9:21:75:04:9c:d6:8c:13:c2:d3:24:91:c2:40:
                    ec:2c:56:f4:a9:ce:41:07:8e:e7:78:db:b2:f6:b6:
                    39:95:97:6f:fb:31:d0:f4:51:f2:ff:be:c1:7f:ae:
                    d4:72:6d:60:a4:89:3f:54:6d:a7:0d:9e:f3:b1:81:
                    a9:e9:cf:78:29:7e:ef:ff:f0:fc:77:d5:59:92:04:
                    36:0b:a4:61:ed:94:e8:9e:53:5f:bd:ce:91:0b:c5:
                    c8:e3:01:45:84:90:c2:b2:00:71:01:9c:56:5d:b9:
                    c4:8c:4f:86:39:10:1f:7b:ad:54:49:39:ec:97:77:
                    c3:fa:e3:56:6f:d6:59:00:b5:b8:c0:1d:47:a1:44:
                    f5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:65:A0:AB:92:22:82:3D:59:ED:8C:FF:09:9F:1F:41:E7:EE:77:E2
            X509v3 Authority Key Identifier:
                keyid:B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:a3:8c:85:3f:de:c9:10:10:ff:5c:fc:7c:0d:27:d7:a4:aa:
         7a:f8:b9:8c:79:f9:0e:e2:cc:62:c8:ef:c3:18:5d:1d:09:80:
         dc:8e:fb:b3:3b:45:cb:fc:48:8d:cf:23:50:42:25:79:61:24:
         76:2f:c1:9e:63:f3:73:fc:4c:6e:d9:ec:50:36:1b:cf:6f:90:
         b1:1f:df:78:7f:3d:e5:a1:e2:bb:52:f3:ba:76:bc:5f:db:ac:
         9d:71:9e:c0:d3:e3:d6:85:a1:8a:d5:59:7d:c1:55:11:72:76:
         68:10:8c:13:13:7a:a6:6a:d1:34:4e:59:57:0d:f1:f0:91:f8:
         61:2c:99:bf:ee:74:e0:93:37:76:a3:91:04:04:b0:85:7f:ec:
         ac:87:95:81:a4:f2:e1:3a:1c:88:a1:37:8a:0a:5d:5c:8e:06:
         ce:80:b2:81:00:9a:07:6d:9d:bc:44:02:c2:32:04:36:9f:c5:
         93:e8:f1:3b:1f:3c:2d:f0:6e:de:83:b0:18:99:f1:bc:8c:f8:
         e8:a0:61:15:7b:eb:80:2d:2e:96:34:b0:a7:6c:d8:47:44:3d:
         83:2f:83:c7:7f:c6:19:5b:cb:70:9d:6e:38:20:01:0b:b1:e6:
         3e:c5:5e:ac:9a:f8:7a:a1:8f:c2:81:02:5d:dc:d6:f3:7b:f5:
         84:0c:e0:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijIgfoC44/3ea/yaz9wOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NjJhYzcwMWMxNGQzNGJiMmU0NDc1ZWM1MTE1MmE0MGM5
ZDNkM2MwHhcNMjUwOTA3MDUwMDU5WhcNMjUwOTA4MDUwMDU5WjAzMTEwLwYDVQQD
EyhlODY1YTBhYjkyMjI4MjNkNTllZDhjZmYwOTlmMWY0MWU3ZWU3N2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUWj7/E7TgYtnX9cm+t2nQDkh/Ss
T3kwcomFRsGfOZ5qLkFc1ED++G6+AXD1KEZTeaZue+FqK9I7NObaTuatYIRTmnPe
SL4WDdOjJdIwfwaJl3PIUum0P+jUCGRfyKb7X29vDSsYyvk1YBkBT6nApMLhm55L
dIB1uSF1BJzWjBPC0ySRwkDsLFb0qc5BB47neNuy9rY5lZdv+zHQ9FHy/77Bf67U
cm1gpIk/VG2nDZ7zsYGp6c94KX7v//D8d9VZkgQ2C6Rh7ZTonlNfvc6RC8XI4wFF
hJDCsgBxAZxWXbnEjE+GORAfe61USTnsl3fD+uNWb9ZZALW4wB1HoUT1ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhloKuSIoI9We2M/wmfH0Hn7nfiMB8GA1UdIwQY
MBaAFLVirHAcFNNLsuRHXsURUqQMnT08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84ZjAxYjMtMjU3Yi00OGQ1LTgyZTIt
MDk3MzI0ZGQ5ZWM4LzEvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84ZjAxYjMtMjU3Yi00OGQ1LTgyZTItMDk3MzI0ZGQ5ZWM4
LzEvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuqOMhT/e
yRAQ/1z8fA0n16Sqevi5jHn5DuLMYsjvwxhdHQmA3I77sztFy/xIjc8jUEIleWEk
di/BnmPzc/xMbtnsUDYbz2+QsR/feH895aHiu1Lzuna8X9usnXGewNPj1oWhitVZ
fcFVEXJ2aBCMExN6pmrRNE5ZVw3x8JH4YSyZv+504JM3dqORBASwhX/srIeVgaTy
4TociKE3igpdXI4GzoCygQCaB22dvEQCwjIENp/Fk+jxOx88LfBu3oOwGJnxvIz4
6KBhFXvrgC0uljSwp2zYR0Q9gy+Dx3/GGVvLcJ1uOCABC7HmPsVerJr4eqGPwoEC
XdzW83v1hAzgJQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:55 2025 by rpki-client