Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft
File:                     8Mx6RHSC5XsGBLq7gqUkCc3js20.mft (raw, json)
Hash identifier:          iwytH3dXcSzNms3Eq/JZM1sGFaBhMHb73DEtcBqHK0s=
Subject key identifier:   55:24:3E:E2:13:5A:C5:16:50:9B:02:DE:3F:18:D5:E7:20:77:1E:55
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Certificate issuer:       /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial:       0199511CBF3699F6D91B6BE65899ED6BFB22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft
Manifest number:          114C
Signing time:             Tue 16 Sep 2025 06:01:02 +0000
Manifest this update:     Tue 16 Sep 2025 06:01:02 +0000
Manifest next update:     Wed 17 Sep 2025 06:01:02 +0000
Files and hashes:         1: 1nkbAUyMBTqm0zrFDH2BJFInn74.roa (hash: kSALWUCmn9r8Fvws/ekGIMLGIzxTE3Z8oBdBGKZ1vV8=)
                          2: 4Z1qIWMwOAMlHFP-sDeKn3ncv68.roa (hash: Cc/ITPpY5ZCl6cqqvemf3EU8EuTldz4M89wdeUZEEs4=)
                          3: 8Mx6RHSC5XsGBLq7gqUkCc3js20.crl (hash: TP8HZNaGOqAkm/v1W/f4B2R4qhi+B8Ahc1KRy894Iqk=)
                          4: TQH-UqpdFcQPQJ_O-mPcMaxRh5Y.roa (hash: 5UUSbkoNXYWS7SIZNqMfY5y6jLKaLP3pTD8kSnX3ZQY=)
                          5: cmgXNMaAC5g-hi6_5ineFSX4mNo.roa (hash: tT0BFRcW7aTCxqYrpbIrMjQ3QMu6zsEXBG/3mWT8HAA=)
                          6: vYR5ABwtJ7q6oSyxxElARDk7dqw.roa (hash: obrOWN19xkWreFh1sEBEYAaVII0u+vgvq2GtQ4FWPEo=)
                          7: zOKrDn3tQAhPRsC8Lmb1V8TVx8Y.roa (hash: RxerbYPvQlg/5QiApArrLAGt6msA3uH/fhheHO7fcUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:51:1c:bf:36:99:f6:d9:1b:6b:e6:58:99:ed:6b:fb:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
        Validity
            Not Before: Sep 16 06:01:02 2025 GMT
            Not After : Sep 17 06:01:02 2025 GMT
        Subject: CN=55243ee2135ac516509b02de3f18d5e720771e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:2c:0b:98:41:e7:2e:db:e7:a6:9d:04:4d:
                    43:61:05:32:18:a4:8c:52:19:8f:22:de:7c:81:6e:
                    64:e1:4a:64:50:e5:84:4d:31:2e:d7:3d:09:3a:2d:
                    79:d0:52:55:bf:6f:43:cd:97:da:c4:3b:7c:0c:a5:
                    2f:1b:ad:e6:66:99:e9:26:6b:8b:2f:91:67:03:70:
                    a7:20:66:45:d8:e5:55:f7:54:77:37:24:e7:f0:e8:
                    2c:d3:30:01:75:11:7f:e1:25:3d:ad:5b:de:fc:d5:
                    91:fe:3c:bb:6f:7b:38:38:74:45:9a:03:c3:52:cf:
                    f0:c6:3c:2c:9d:4e:41:22:50:f6:26:6d:47:6c:32:
                    ae:20:73:1d:96:39:c1:20:eb:bc:66:99:ef:cf:58:
                    55:02:dc:ea:78:0f:63:96:58:ea:51:f4:8c:7c:da:
                    99:84:4a:72:ba:57:48:c0:6a:a7:89:fd:c0:75:01:
                    59:4d:27:ed:a8:f7:71:70:4d:7b:20:aa:da:e8:18:
                    e8:70:cd:28:ee:7b:f3:30:91:e3:69:80:9f:97:02:
                    ea:95:8f:fc:25:bd:82:77:05:3d:3d:e0:85:c7:1a:
                    ee:3d:e7:f2:00:4a:c0:d3:8a:85:30:27:ac:62:d8:
                    29:c7:55:a0:e2:5e:fa:27:8c:23:1a:ae:88:a7:a2:
                    99:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:24:3E:E2:13:5A:C5:16:50:9B:02:DE:3F:18:D5:E7:20:77:1E:55
            X509v3 Authority Key Identifier:
                keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:6b:24:e2:4c:d9:8f:7d:7e:91:4d:24:8c:63:29:1c:63:fd:
         81:62:53:5f:7c:83:c9:d0:5e:68:7d:7e:88:45:c6:af:4c:5d:
         fe:2f:01:d0:cf:f1:d1:fb:c0:51:01:16:12:f1:fc:f9:02:2d:
         47:db:07:b5:bf:2b:c6:c4:4f:a3:e7:30:d4:7a:a0:5a:bf:d6:
         5e:04:e4:23:e9:44:ca:81:b8:8d:0a:88:4b:d3:07:9e:80:80:
         b8:43:f0:f3:a9:de:9b:b7:21:02:85:fb:14:6a:f6:0b:e8:e0:
         fe:68:b5:d3:25:b0:bd:72:29:13:fc:b8:83:7a:63:65:14:31:
         3a:f2:32:cf:0f:60:a1:4a:21:de:9e:9c:ed:3c:b9:24:a7:94:
         b5:6f:35:6e:38:51:46:16:11:d3:ed:a5:92:2b:4a:a8:95:72:
         bc:37:7c:10:7d:c1:33:12:6a:26:19:ff:71:72:65:4a:dd:e9:
         ae:ef:13:f1:29:f6:cb:4f:27:55:a5:66:95:2a:de:8e:1b:77:
         c6:c1:cf:0c:52:00:74:91:24:3e:08:a8:95:89:98:b0:57:7e:
         a8:e3:80:5d:8e:56:0a:42:9c:c6:83:fb:26:12:63:0e:f1:76:
         0b:ed:06:6a:11:12:59:ac:d2:30:1d:b3:2d:ae:f8:c9:64:e4:
         e6:22:69:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlRHL82mfbZG2vmWJnta/siMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2M3YTQ0NzQ4MmU1N2IwNjA0YmFiYjgyYTUyNDA5Y2Rl
M2IzNmQwHhcNMjUwOTE2MDYwMTAyWhcNMjUwOTE3MDYwMTAyWjAzMTEwLwYDVQQD
Eyg1NTI0M2VlMjEzNWFjNTE2NTA5YjAyZGUzZjE4ZDVlNzIwNzcxZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne0sC5hB5y7b56adBE1DYQUyGKSM
UhmPIt58gW5k4UpkUOWETTEu1z0JOi150FJVv29DzZfaxDt8DKUvG63mZpnpJmuL
L5FnA3CnIGZF2OVV91R3NyTn8Ogs0zABdRF/4SU9rVve/NWR/jy7b3s4OHRFmgPD
Us/wxjwsnU5BIlD2Jm1HbDKuIHMdljnBIOu8Zpnvz1hVAtzqeA9jlljqUfSMfNqZ
hEpyuldIwGqnif3AdQFZTSftqPdxcE17IKra6BjocM0o7nvzMJHjaYCflwLqlY/8
Jb2CdwU9PeCFxxruPefyAErA04qFMCesYtgpx1Wg4l76J4wjGq6Ip6KZ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUkPuITWsUWUJsC3j8Y1ecgdx5VMB8GA1UdIwQY
MBaAFPDMekR0guV7BgS6u4KlJAnN47NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE14NlJIU0M1WHNHQkxxN2dxVWtDYzNqczIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZTU4ZGMtN2M5MC00OWQ3LTg4NTUt
ZmEzMmQyZDUyOTY4LzEvOE14NlJIU0M1WHNHQkxxN2dxVWtDYzNqczIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wZTU4ZGMtN2M5MC00OWQ3LTg4NTUtZmEzMmQyZDUyOTY4
LzEvOE14NlJIU0M1WHNHQkxxN2dxVWtDYzNqczIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2sk4kzZ
j31+kU0kjGMpHGP9gWJTX3yDydBeaH1+iEXGr0xd/i8B0M/x0fvAUQEWEvH8+QIt
R9sHtb8rxsRPo+cw1HqgWr/WXgTkI+lEyoG4jQqIS9MHnoCAuEPw86nem7chAoX7
FGr2C+jg/mi10yWwvXIpE/y4g3pjZRQxOvIyzw9goUoh3p6c7Ty5JKeUtW81bjhR
RhYR0+2lkitKqJVyvDd8EH3BMxJqJhn/cXJlSt3pru8T8Sn2y08nVaVmlSrejht3
xsHPDFIAdJEkPgiolYmYsFd+qOOAXY5WCkKcxoP7JhJjDvF2C+0GahESWazSMB2z
La74yWTk5iJpUw==
-----END CERTIFICATE-----
Generated at Tue Sep 16 15:46:25 2025 by rpki-client