Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
File:                     C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft (raw, json)
Hash identifier:          gEvNS7KeZZcEdk0eaUfLAxCz18JzCumkTxKerlN1Wp0=
Subject key identifier:   06:45:DD:F9:ED:C9:C6:87:DE:BE:00:7E:43:6C:EE:BC:79:0B:61:47
Authority key identifier: 0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
Certificate issuer:       /CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Certificate serial:       019922FAE5B76D5043915B13DDFE10F8EE74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
Manifest number:          134E
Signing time:             Sun 07 Sep 2025 07:01:31 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:31 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:31 +0000
Files and hashes:         1: C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl (hash: gkzM7Hd3LeYPRy+6GEGg/OntWPadxAftdJGi2J+wMxw=)
                          2: VDV2mgvPqpRmmoenb9SaX1u1440.roa (hash: ivvVUYPgums0E545lnqR4Wp+TXCXyBK6qgVWasD11m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:e5:b7:6d:50:43:91:5b:13:dd:fe:10:f8:ee:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
        Validity
            Not Before: Sep  7 07:01:31 2025 GMT
            Not After : Sep  8 07:01:31 2025 GMT
        Subject: CN=0645ddf9edc9c687debe007e436ceebc790b6147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:83:a9:58:4a:00:50:9b:d2:09:b6:bf:51:
                    22:30:58:3a:b9:da:e0:6e:d7:b4:20:33:f6:2a:de:
                    c2:81:69:c8:22:6e:3d:a0:1a:e7:d2:13:6f:ba:4a:
                    a4:36:22:df:58:f6:41:dd:92:e8:c9:39:2d:02:a9:
                    d1:cf:5f:94:fc:f1:57:e1:0a:6c:3f:e4:8c:9e:57:
                    77:d1:62:6d:b8:9a:5a:c5:3e:57:9a:0c:50:69:d4:
                    36:26:cf:cf:ea:ce:18:11:90:ad:a4:f8:42:ee:a5:
                    60:82:bb:fa:15:f1:e7:b3:3a:ec:1d:95:19:7f:31:
                    21:58:12:e1:61:1d:ec:71:9d:35:77:80:c9:46:1d:
                    18:13:18:2d:46:9b:ad:50:a1:fb:da:ed:12:49:a0:
                    6f:dc:d5:2e:2d:40:59:1a:f9:48:c0:f8:a6:d6:be:
                    c6:ca:60:dd:b1:7c:e4:9f:39:5b:95:11:8d:60:6b:
                    d6:92:5e:00:8d:8a:2f:c0:c0:f8:2e:05:ee:b3:89:
                    c1:ec:1c:12:47:0f:f6:68:9e:43:63:e4:6d:27:d9:
                    10:e6:0d:a4:52:d3:c0:ab:71:3d:69:bf:3a:bb:0e:
                    b9:8f:ab:51:72:42:d8:23:98:73:33:3c:51:a5:a9:
                    63:ef:c9:27:59:0e:06:17:eb:6c:dd:7f:27:5f:0c:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:45:DD:F9:ED:C9:C6:87:DE:BE:00:7E:43:6C:EE:BC:79:0B:61:47
            X509v3 Authority Key Identifier:
                keyid:0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:24:76:b5:0a:d5:25:a4:34:eb:c8:4f:53:6e:6c:6c:de:af:
         1a:15:49:5d:38:19:8c:2c:cf:5d:8a:6c:f3:f8:f1:93:71:f6:
         fc:d5:5d:ef:d8:5d:a1:61:43:f6:e2:a5:a4:fd:ed:f6:1b:1d:
         8c:7e:a3:29:42:ca:70:86:34:cc:dd:93:e4:12:28:1a:1c:00:
         d5:a0:b2:6f:75:bb:65:e0:f4:1a:53:69:d6:c2:da:41:e4:e9:
         ae:95:12:64:13:a0:2a:30:8f:db:80:05:0d:3c:85:6c:69:8d:
         3c:5f:79:16:c7:d5:4b:84:65:38:5a:1b:7b:d3:ba:16:d8:3e:
         6a:b6:b7:bd:98:dd:7b:68:b5:82:c1:dc:e2:fe:c4:d0:f4:9d:
         08:a6:40:52:69:42:8b:c6:5a:1b:1b:a1:e7:27:1e:8c:d5:f3:
         99:7b:a8:3f:ed:8d:ff:a2:04:e0:b7:12:03:0e:5b:7c:7c:90:
         37:c5:ca:d9:ec:96:fb:63:ca:aa:ca:a6:39:03:5d:38:82:e4:
         94:4b:92:fc:43:92:6e:6d:e1:1d:10:cb:82:9e:36:d0:5c:bd:
         5b:a7:ab:7d:73:97:ee:fb:75:df:9c:20:5b:dd:74:0f:77:22:
         6a:24:44:ea:b5:4b:13:5d:38:19:73:57:ff:94:35:a5:eb:00:
         73:ff:4f:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+uW3bVBDkVsT3f4Q+O50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2JmNzQ4ZTlmNDk5ODY4NWQwYzk2NWQyZGZkZjBmMzYy
YTUwNTIwHhcNMjUwOTA3MDcwMTMxWhcNMjUwOTA4MDcwMTMxWjAzMTEwLwYDVQQD
EygwNjQ1ZGRmOWVkYzljNjg3ZGViZTAwN2U0MzZjZWViYzc5MGI2MTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf+DqVhKAFCb0gm2v1EiMFg6udrg
bte0IDP2Kt7CgWnIIm49oBrn0hNvukqkNiLfWPZB3ZLoyTktAqnRz1+U/PFX4Qps
P+SMnld30WJtuJpaxT5XmgxQadQ2Js/P6s4YEZCtpPhC7qVggrv6FfHnszrsHZUZ
fzEhWBLhYR3scZ01d4DJRh0YExgtRputUKH72u0SSaBv3NUuLUBZGvlIwPim1r7G
ymDdsXzknzlblRGNYGvWkl4AjYovwMD4LgXus4nB7BwSRw/2aJ5DY+RtJ9kQ5g2k
UtPAq3E9ab86uw65j6tRckLYI5hzMzxRpalj78knWQ4GF+ts3X8nXwyg9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZF3fntycaH3r4AfkNs7rx5C2FHMB8GA1UdIwQY
MBaAFAvL90jp9JmGhdDJZdLf3w82KlBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEt
N2Y5NmM5ZjA1ZjU0LzEvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEtN2Y5NmM5ZjA1ZjU0
LzEvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeiR2tQrV
JaQ068hPU25sbN6vGhVJXTgZjCzPXYps8/jxk3H2/NVd79hdoWFD9uKlpP3t9hsd
jH6jKULKcIY0zN2T5BIoGhwA1aCyb3W7ZeD0GlNp1sLaQeTprpUSZBOgKjCP24AF
DTyFbGmNPF95FsfVS4RlOFobe9O6Ftg+ara3vZjde2i1gsHc4v7E0PSdCKZAUmlC
i8ZaGxuh5ycejNXzmXuoP+2N/6IE4LcSAw5bfHyQN8XK2eyW+2PKqsqmOQNdOILk
lEuS/EOSbm3hHRDLgp420Fy9W6erfXOX7vt135wgW910D3ciaiRE6rVLE104GXNX
/5Q1pesAc/9P/g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:27 2025 by rpki-client