Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
File:                     8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json)
Hash identifier:          IL3dkovRJIdYy8iGRo6G946Ky5IYcvhOJ8onUhmAvdo=
Subject key identifier:   A9:84:65:F3:47:DD:71:88:58:C9:61:88:F1:CF:26:44:56:06:CC:FB
Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
Certificate issuer:       /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Certificate serial:       01991809E710F1DD74FD8BAA49F7046441B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
Manifest number:          166A
Signing time:             Fri 05 Sep 2025 04:02:06 +0000
Manifest this update:     Fri 05 Sep 2025 04:02:06 +0000
Manifest next update:     Sat 06 Sep 2025 04:02:06 +0000
Files and hashes:         1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: emp+M2Xr1sTBhwel+3MgxBZldiwUU5Vin/0DxYuDTBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:09:e7:10:f1:dd:74:fd:8b:aa:49:f7:04:64:41:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
        Validity
            Not Before: Sep  5 04:02:06 2025 GMT
            Not After : Sep  6 04:02:06 2025 GMT
        Subject: CN=a98465f347dd718858c96188f1cf26445606ccfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8f:19:95:7f:e8:aa:29:ac:6c:fe:59:52:48:
                    c1:b1:e6:94:aa:01:84:25:b4:c7:e6:1e:13:ec:f1:
                    50:f7:fe:4c:0e:af:5d:4e:59:10:17:8c:02:37:05:
                    8e:55:43:e5:ee:3e:35:da:9d:59:3a:67:c4:4f:0f:
                    68:c3:10:d0:f9:9c:f1:7b:be:9c:8c:e2:a8:61:b5:
                    dd:bd:c0:8b:65:03:07:37:02:23:93:bb:70:ab:97:
                    3c:8e:37:54:80:31:fc:4a:be:14:11:b3:9d:6c:1b:
                    b1:e1:a8:d3:87:b7:54:2d:76:f3:b2:97:e5:73:55:
                    dd:97:7b:09:81:85:f9:43:c3:b9:bc:b1:3a:c2:10:
                    cf:67:7c:ee:bb:c1:dd:28:0c:f0:ab:f6:93:73:d2:
                    d7:59:8c:b4:08:af:22:5e:c4:e3:cf:08:be:9c:2c:
                    24:bc:0d:36:eb:c9:0c:f9:62:28:67:ac:ef:2a:c7:
                    c4:d0:16:53:4a:99:27:32:90:e1:10:48:7c:81:b1:
                    b3:a1:51:39:ea:8b:f1:19:25:43:a5:74:33:52:0f:
                    04:7e:3e:32:6e:de:09:67:23:40:90:9c:42:cb:73:
                    14:3c:1f:58:16:14:47:da:03:b0:67:d3:51:77:e0:
                    da:aa:ac:44:8a:dd:45:b9:55:92:75:05:e8:00:ff:
                    15:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:84:65:F3:47:DD:71:88:58:C9:61:88:F1:CF:26:44:56:06:CC:FB
            X509v3 Authority Key Identifier:
                keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:3f:e7:11:4d:70:a1:07:fd:3b:0a:2d:c9:b4:dd:a9:ed:4c:
         9b:15:4b:95:33:64:3c:71:cf:2c:24:82:a6:2a:ee:fd:da:56:
         1d:21:33:21:4a:d3:e7:27:39:6b:34:e8:52:c0:8e:0c:e3:1b:
         97:4d:9c:9b:54:7a:5b:48:d3:62:6f:04:7a:c6:09:71:18:0a:
         bc:5c:29:20:51:24:9e:32:9c:ae:ad:8d:09:0d:6c:2d:02:5b:
         10:06:cd:c4:0c:23:72:95:a5:8c:b0:bc:06:b7:e3:89:c1:4b:
         9f:72:aa:97:62:ac:ca:e1:be:9e:8a:ba:bc:cd:08:74:ef:d7:
         11:30:d7:98:68:6d:fd:4f:96:fe:23:09:97:70:eb:49:a1:c7:
         1d:0d:6f:0a:96:5b:f4:c6:d7:10:11:18:0f:46:ea:04:21:45:
         14:ec:ef:e0:91:90:e1:64:10:59:9c:17:fb:fa:44:bc:3c:7d:
         9c:f1:f0:89:d1:2a:0f:b0:72:9e:35:21:d0:4b:82:22:e7:60:
         de:af:20:f8:98:99:b1:d1:89:76:16:09:1b:af:71:ed:b8:dd:
         59:99:a0:56:c2:58:f1:8d:d2:1b:0e:9f:b8:1c:54:e2:2d:97:
         08:e6:b9:96:5a:17:e6:d6:6a:fb:71:86:94:c4:64:ce:79:96:
         5b:6f:df:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCecQ8d10/YuqSfcEZEG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNWZmZjhhZGM2ZWU3NTEyNzJjMGE5MWQwNWRjYWZmN2U4
ZDJkNjkwHhcNMjUwOTA1MDQwMjA2WhcNMjUwOTA2MDQwMjA2WjAzMTEwLwYDVQQD
EyhhOTg0NjVmMzQ3ZGQ3MTg4NThjOTYxODhmMWNmMjY0NDU2MDZjY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I8ZlX/oqimsbP5ZUkjBseaUqgGE
JbTH5h4T7PFQ9/5MDq9dTlkQF4wCNwWOVUPl7j412p1ZOmfETw9owxDQ+Zzxe76c
jOKoYbXdvcCLZQMHNwIjk7twq5c8jjdUgDH8Sr4UEbOdbBux4ajTh7dULXbzspfl
c1Xdl3sJgYX5Q8O5vLE6whDPZ3zuu8HdKAzwq/aTc9LXWYy0CK8iXsTjzwi+nCwk
vA0268kM+WIoZ6zvKsfE0BZTSpknMpDhEEh8gbGzoVE56ovxGSVDpXQzUg8Efj4y
bt4JZyNAkJxCy3MUPB9YFhRH2gOwZ9NRd+DaqqxEit1FuVWSdQXoAP8VRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmEZfNH3XGIWMlhiPHPJkRWBsz7MB8GA1UdIwQY
MBaAFPFf/4rcbudRJywKkdBdyv9+jS1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wYWM5ZDAtZmU1YS00MDAyLTkyZWQt
YzNmNGI5ODU3MTRjLzEvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wYWM5ZDAtZmU1YS00MDAyLTkyZWQtYzNmNGI5ODU3MTRj
LzEvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApD/nEU1w
oQf9OwotybTdqe1MmxVLlTNkPHHPLCSCpiru/dpWHSEzIUrT5yc5azToUsCODOMb
l02cm1R6W0jTYm8EesYJcRgKvFwpIFEknjKcrq2NCQ1sLQJbEAbNxAwjcpWljLC8
BrfjicFLn3Kql2KsyuG+noq6vM0IdO/XETDXmGht/U+W/iMJl3DrSaHHHQ1vCpZb
9MbXEBEYD0bqBCFFFOzv4JGQ4WQQWZwX+/pEvDx9nPHwidEqD7BynjUh0EuCIudg
3q8g+JiZsdGJdhYJG69x7bjdWZmgVsJY8Y3SGw6fuBxU4i2XCOa5lloX5tZq+3GG
lMRkznmWW2/fLg==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:29 2025 by rpki-client