Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
File:                     1-KK2BcWOB0aq3Fvw18vDbJMH900.mft (raw, json)
Hash identifier:          lN2NK2u7FoVDrAbzn/6vfvl89MKALXLCaF07bKe97/k=
Subject key identifier:   8D:66:7C:3E:41:9B:52:52:DA:0C:F1:7C:53:13:BF:46:6F:AD:54:65
Authority key identifier: F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D
Certificate issuer:       /CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
Certificate serial:       01991808DB662C771D7652FE7AECFAB0BAA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
Manifest number:          0238
Signing time:             Fri 05 Sep 2025 04:00:57 +0000
Manifest this update:     Fri 05 Sep 2025 04:00:57 +0000
Manifest next update:     Sat 06 Sep 2025 04:00:57 +0000
Files and hashes:         1: 1-KK2BcWOB0aq3Fvw18vDbJMH900.crl (hash: sM7hmvYpxzcwoLiyvlB2C28O+Vb9lpPQy5Q+922jaPc=)
                          2: KMs7aUSS9LqAFlnC_o5ElLedNIc.roa (hash: /x7zWDBe20WK1XP4EQ8MfhJthk5BD7GGqFW7sL/0M74=)
                          3: hqdB3dvV_dcCWDsTMYzzBUkq1iQ.roa (hash: PqNxdXFESdm3E0fpRf9aF9eGcWyACVXLt/A8w8L4KSw=)
                          4: ntHtztrMmkHjlQm-nR0AF_-ZVFE.roa (hash: Bf849e8DMlDt314X2PPaLUOxw5PYejhf50bcsgAnmcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:08:db:66:2c:77:1d:76:52:fe:7a:ec:fa:b0:ba:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
        Validity
            Not Before: Sep  5 04:00:57 2025 GMT
            Not After : Sep  6 04:00:57 2025 GMT
        Subject: CN=8d667c3e419b5252da0cf17c5313bf466fad5465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:86:bb:0b:10:e0:34:44:11:e7:72:22:82:
                    31:ab:e2:39:49:46:d2:c4:f5:7b:e6:54:a5:1f:a8:
                    73:e7:07:70:c3:1f:7b:35:84:82:6e:c9:55:74:a5:
                    0c:c0:22:d3:dc:f3:9f:2d:76:be:9d:18:c4:25:81:
                    5e:6b:f2:16:19:3e:9b:64:99:fa:8f:76:c3:89:fa:
                    db:a1:38:05:9b:b4:eb:45:5f:91:54:84:88:dc:a3:
                    bb:14:47:61:ce:1e:f0:13:b2:ec:04:52:23:42:d0:
                    53:89:7b:72:d2:0e:9c:5d:f7:44:7c:11:5a:45:1a:
                    30:64:67:e5:5e:0c:da:f5:c0:87:34:c0:19:07:7b:
                    d2:ba:3e:ac:b2:37:d0:4e:4f:da:9f:91:12:7c:36:
                    bf:3a:35:b2:3c:5f:c6:68:ce:eb:e9:d9:c5:6c:ce:
                    23:36:e6:1c:d7:7f:86:bd:9e:de:81:80:70:56:b2:
                    71:0e:6c:a2:43:b2:a8:c3:67:62:60:34:e3:15:52:
                    cb:83:fc:66:e0:25:35:bc:97:ff:41:04:8d:06:7e:
                    5d:42:1b:a5:55:fd:15:d0:6a:f2:aa:61:42:b3:43:
                    70:eb:e1:c9:bd:ad:4a:7f:19:71:36:31:44:02:26:
                    92:65:db:13:02:98:63:fc:8d:ee:c2:c7:e6:3f:20:
                    10:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:66:7C:3E:41:9B:52:52:DA:0C:F1:7C:53:13:BF:46:6F:AD:54:65
            X509v3 Authority Key Identifier:
                keyid:F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bc:31:10:a3:e8:83:63:c3:66:76:01:ff:93:c7:db:97:f2:
         e0:03:22:70:34:8c:9b:70:48:52:06:a4:27:4e:fa:7f:27:3a:
         57:da:df:a3:cc:f1:0b:25:6c:ce:90:d2:1f:4a:d7:a0:3b:ae:
         77:25:32:d2:16:09:f0:96:b2:89:fa:b4:a0:fb:98:e3:6b:a9:
         a1:5f:15:1b:9f:ac:7b:32:c3:4d:84:ee:46:ef:14:3e:8f:99:
         cb:bb:aa:14:11:2a:42:ec:b1:d5:3d:f9:60:bb:ab:55:ce:7b:
         b5:f8:af:66:51:e4:b6:07:f3:a5:7f:75:a5:7a:7f:6a:1f:10:
         68:f1:60:cf:cb:d0:2b:8f:5b:24:cf:7a:09:64:38:f0:dd:90:
         96:74:a8:81:e3:89:9c:ae:f1:7b:fc:42:11:d6:91:d2:c7:a8:
         de:43:d0:81:7c:97:29:bb:63:9d:41:4b:b9:25:17:43:d7:1b:
         2d:ce:6f:d5:1a:0e:43:b4:4b:e3:d9:15:d7:77:b1:7a:08:cc:
         4d:ba:a7:28:e0:19:4f:73:b0:21:39:8c:ca:92:78:13:0d:10:
         02:5d:e4:14:59:80:c4:a0:c8:6b:ee:d1:d2:a7:d6:89:89:8c:
         fe:17:82:d4:ac:ca:94:38:94:d8:32:6c:e7:ae:83:1f:d5:cb:
         07:00:ad:b3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkYCNtmLHcddlL+euz6sLqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTJiNjA1YzU4ZTA3NDZhYWRjNWJmMGQ3Y2JjMzZjOTMw
N2Y3NGQwHhcNMjUwOTA1MDQwMDU3WhcNMjUwOTA2MDQwMDU3WjAzMTEwLwYDVQQD
Eyg4ZDY2N2MzZTQxOWI1MjUyZGEwY2YxN2M1MzEzYmY0NjZmYWQ1NDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtqGuwsQ4DREEedyIoIxq+I5SUbS
xPV75lSlH6hz5wdwwx97NYSCbslVdKUMwCLT3POfLXa+nRjEJYFea/IWGT6bZJn6
j3bDifrboTgFm7TrRV+RVISI3KO7FEdhzh7wE7LsBFIjQtBTiXty0g6cXfdEfBFa
RRowZGflXgza9cCHNMAZB3vSuj6ssjfQTk/an5ESfDa/OjWyPF/GaM7r6dnFbM4j
NuYc13+GvZ7egYBwVrJxDmyiQ7Kow2diYDTjFVLLg/xm4CU1vJf/QQSNBn5dQhul
Vf0V0GryqmFCs0Nw6+HJva1KfxlxNjFEAiaSZdsTAphj/I3uwsfmPyAQ6wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFI1mfD5Bm1JS2gzxfFMTv0ZvrVRlMB8GA1UdIwQY
MBaAFPiitgXFjgdGqtxb8NfLw2yTB/dNMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LSzJCY1dPQjBhcTNGdncxOHZEYkpNSDkwMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvMDc2ZDM3LTRhYjQtNGVjMy1hNGIw
LTUyNDAyNWUxMzIwMi8xLzEtS0syQmNXT0IwYXEzRnZ3MTh2RGJKTUg5MDAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2ViLzA3NmQzNy00YWI0LTRlYzMtYTRiMC01MjQwMjVlMTMy
MDIvMS8xLUtLMkJjV09CMGFxM0Z2dzE4dkRiSk1IOTAwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULwx
EKPog2PDZnYB/5PH25fy4AMicDSMm3BIUgakJ076fyc6V9rfo8zxCyVszpDSH0rX
oDuudyUy0hYJ8Jayifq0oPuY42upoV8VG5+sezLDTYTuRu8UPo+Zy7uqFBEqQuyx
1T35YLurVc57tfivZlHktgfzpX91pXp/ah8QaPFgz8vQK49bJM96CWQ48N2QlnSo
geOJnK7xe/xCEdaR0seo3kPQgXyXKbtjnUFLuSUXQ9cbLc5v1RoOQ7RL49kV13ex
egjMTbqnKOAZT3OwITmMypJ4Ew0QAl3kFFmAxKDIa+7R0qfWiYmM/heC1KzKlDiU
2DJs566DH9XLBwCtsw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:37 2025 by rpki-client