Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File:                     l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier:          VRCGFNGlziBXEVwRTw6UimgWlTp+roAdh4WCboBqVyk=
Subject key identifier:   B2:55:52:1C:A6:1D:35:8E:21:30:FE:CA:58:DA:D4:79:44:E0:D9:87
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer:       /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial:       01991809A23718BAA7086810FECABAF27F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number:          1614
Signing time:             Fri 05 Sep 2025 04:01:48 +0000
Manifest this update:     Fri 05 Sep 2025 04:01:48 +0000
Manifest next update:     Sat 06 Sep 2025 04:01:48 +0000
Files and hashes:         1: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (hash: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=)
                          2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: G7cF4kYbj/AxD9Ipiz2xou4aLhC32woRcRstBqdYyYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:09:a2:37:18:ba:a7:08:68:10:fe:ca:ba:f2:7f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
        Validity
            Not Before: Sep  5 04:01:48 2025 GMT
            Not After : Sep  6 04:01:48 2025 GMT
        Subject: CN=b255521ca61d358e2130feca58dad47944e0d987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:75:bf:44:76:c1:71:c4:83:92:be:7c:39:73:
                    a6:73:2f:7a:37:9f:eb:3c:95:b2:7b:e9:91:f1:56:
                    34:e5:a3:0e:94:8c:04:35:9a:23:1e:de:1f:b5:8f:
                    30:ab:5c:7a:5e:5b:61:23:8c:0b:b6:96:da:8e:3a:
                    21:d7:7e:64:f8:46:47:81:c0:54:13:27:17:f4:c5:
                    c1:70:b8:38:f7:60:02:67:80:92:d8:3f:2f:fd:e4:
                    67:20:69:3a:02:fb:b4:70:96:54:cb:f1:00:ae:65:
                    1f:54:82:72:e6:5a:77:75:e5:e3:97:92:f4:19:bb:
                    d8:5a:4a:93:af:aa:9e:51:9c:ff:45:eb:c2:91:66:
                    08:77:80:a1:34:51:7a:3a:04:65:7b:9e:61:3c:ec:
                    0d:b8:bd:57:18:e2:24:ba:a5:d1:30:98:32:b7:6d:
                    7e:bf:dc:1b:f4:e1:98:53:18:da:da:15:fc:c6:58:
                    4f:29:d4:19:74:26:a2:54:61:7b:c8:35:48:82:ba:
                    79:08:ac:82:51:d2:35:55:ac:cb:7e:59:03:a5:43:
                    f1:cc:94:fa:1e:08:d1:87:bf:20:04:63:ff:2f:e9:
                    d9:54:17:d7:86:2b:76:10:2d:34:36:c1:fa:60:0c:
                    65:44:9e:b9:c8:ef:b3:73:43:df:07:47:5a:34:05:
                    82:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:55:52:1C:A6:1D:35:8E:21:30:FE:CA:58:DA:D4:79:44:E0:D9:87
            X509v3 Authority Key Identifier:
                keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a3:6e:3c:4f:5e:a2:e5:d8:2f:64:7f:28:2b:ee:50:e7:39:
         62:5f:2d:97:ce:9f:4d:3f:ac:95:f2:78:6b:3c:ff:9a:bf:c6:
         4f:47:aa:97:fc:f1:08:b7:bb:0d:c8:d7:10:4d:2d:c8:de:7f:
         50:cb:45:68:be:c7:7a:5f:18:46:12:b4:91:73:9e:76:89:84:
         89:b8:92:02:fc:4b:be:ac:05:4e:96:96:fc:a0:59:11:28:6e:
         f1:7b:df:d4:95:b9:78:76:be:03:f9:16:81:45:73:d4:67:b4:
         93:d4:75:83:26:2f:63:5e:ff:a3:1a:f0:e1:65:da:19:e2:b1:
         2c:8f:4e:35:a9:53:7a:fb:f7:44:06:a1:ad:48:07:94:05:63:
         6a:7e:e6:cd:53:7e:3e:bb:13:2b:e0:1b:50:4f:f3:92:36:76:
         18:33:c1:e1:7f:2d:ab:1d:bc:7a:b7:b6:07:96:d1:6e:1c:34:
         b2:43:da:ad:df:3b:4e:0a:0f:3f:70:62:74:78:0d:21:1b:b3:
         aa:af:4e:d6:44:34:ef:1b:65:e9:9e:cc:05:55:06:be:b2:40:
         53:38:9d:fd:fb:c8:d0:da:b1:07:37:f4:0d:59:01:b9:74:a9:
         87:30:d1:2d:3b:65:3e:01:0a:f3:10:8f:05:a6:25:99:b4:3a:
         be:e7:8d:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCaI3GLqnCGgQ/sq68n93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Yzc1N2YyZjNiMjI5MGJiYzI4ZDY1ZjliZGYwMDE2ZjYx
ZjEzOTcwHhcNMjUwOTA1MDQwMTQ4WhcNMjUwOTA2MDQwMTQ4WjAzMTEwLwYDVQQD
EyhiMjU1NTIxY2E2MWQzNThlMjEzMGZlY2E1OGRhZDQ3OTQ0ZTBkOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXW/RHbBccSDkr58OXOmcy96N5/r
PJWye+mR8VY05aMOlIwENZojHt4ftY8wq1x6XlthI4wLtpbajjoh135k+EZHgcBU
EycX9MXBcLg492ACZ4CS2D8v/eRnIGk6Avu0cJZUy/EArmUfVIJy5lp3deXjl5L0
GbvYWkqTr6qeUZz/RevCkWYId4ChNFF6OgRle55hPOwNuL1XGOIkuqXRMJgyt21+
v9wb9OGYUxja2hX8xlhPKdQZdCaiVGF7yDVIgrp5CKyCUdI1VazLflkDpUPxzJT6
HgjRh78gBGP/L+nZVBfXhit2EC00NsH6YAxlRJ65yO+zc0PfB0daNAWCBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJVUhymHTWOITD+ylja1HlE4NmHMB8GA1UdIwQY
MBaAFJfHV/LzsikLvCjWX5vfABb2HxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYt
MjA5M2I2ZGZmYTY0LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYtMjA5M2I2ZGZmYTY0
LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqNuPE9e
ouXYL2R/KCvuUOc5Yl8tl86fTT+slfJ4azz/mr/GT0eql/zxCLe7DcjXEE0tyN5/
UMtFaL7Hel8YRhK0kXOedomEibiSAvxLvqwFTpaW/KBZEShu8Xvf1JW5eHa+A/kW
gUVz1Ge0k9R1gyYvY17/oxrw4WXaGeKxLI9ONalTevv3RAahrUgHlAVjan7mzVN+
PrsTK+AbUE/zkjZ2GDPB4X8tqx28ere2B5bRbhw0skPard87TgoPP3BidHgNIRuz
qq9O1kQ07xtl6Z7MBVUGvrJAUzid/fvI0NqxBzf0DVkBuXSphzDRLTtlPgEK8xCP
BaYlmbQ6vueN8Q==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:04 2025 by rpki-client