Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File:                     d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier:          g2TsxtMKcFDUZnqLueXHhAZPIodnT40wGP4LlLs2z60=
Subject key identifier:   48:02:64:0A:46:5E:83:BA:E3:5D:14:82:48:EE:C4:7F:58:6A:1D:6A
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer:       /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial:       0198E6AF840A9C6A435323479B96C3D06C9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number:          0DF2
Signing time:             Tue 26 Aug 2025 14:01:58 +0000
Manifest this update:     Tue 26 Aug 2025 14:01:58 +0000
Manifest next update:     Wed 27 Aug 2025 14:01:58 +0000
Files and hashes:         1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: iRsCJWs/4PeaVVrcW8HNIVHpI0MWUCGyxsJQxLiHhMQ=)
                          2: hNGctvUgxsV9VRFcAR330Ay19l8.roa (hash: zQTWmn2EIkYMs7iDpMx3kmmkHaS8RfsfTxjAwAVdFG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Aug 2025 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:e6:af:84:0a:9c:6a:43:53:23:47:9b:96:c3:d0:6c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
        Validity
            Not Before: Aug 26 14:01:58 2025 GMT
            Not After : Aug 27 14:01:58 2025 GMT
        Subject: CN=4802640a465e83bae35d148248eec47f586a1d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:cf:1d:29:bd:4b:43:93:90:f0:38:25:85:
                    6b:c7:88:55:0b:fe:07:05:41:28:ad:8c:40:4f:67:
                    1a:2f:8d:bb:98:29:29:5a:ed:9d:b5:5b:f3:b6:4c:
                    2c:55:f5:f7:19:2a:69:6c:56:1a:fa:ee:3f:91:82:
                    64:0d:46:3a:fc:d4:f5:d1:17:16:1c:58:7c:99:b0:
                    d9:a9:d1:67:09:67:d4:b1:f1:4d:61:20:08:ca:0b:
                    dc:fb:fa:e6:7d:20:ce:14:80:85:ff:aa:42:cd:cf:
                    86:bc:da:25:8b:35:76:72:f1:db:dc:08:7c:98:f9:
                    03:4c:de:b5:ca:69:1c:62:6f:82:86:69:ad:e1:cc:
                    94:49:b5:d5:f0:d0:f1:28:eb:af:75:1d:c8:e0:53:
                    46:5c:8d:7f:29:38:52:2c:f3:bd:3c:a6:2c:7b:da:
                    1d:f2:45:7e:3b:1a:c5:fd:86:78:93:d3:1a:fc:16:
                    e4:31:08:9e:5c:ed:de:76:e9:60:4e:a1:58:28:92:
                    2c:6f:dc:17:db:58:3a:2b:ef:1f:00:af:b8:fe:9b:
                    03:ea:f0:ba:c5:1e:4e:57:e1:27:55:88:b0:4d:d4:
                    c1:cf:5f:4d:01:64:a9:85:c1:90:8e:b9:ce:b7:73:
                    6d:db:60:c5:36:ed:7e:7e:63:15:9c:f0:d1:19:2a:
                    40:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:02:64:0A:46:5E:83:BA:E3:5D:14:82:48:EE:C4:7F:58:6A:1D:6A
            X509v3 Authority Key Identifier:
                keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:21:1c:be:d8:ba:1a:0c:43:91:c6:2b:37:04:c2:62:f0:d7:
         42:e8:db:40:98:b8:9b:64:20:c6:8b:2b:08:ac:d9:93:f8:09:
         6d:e1:73:55:b3:29:99:3d:f1:4d:18:c4:3d:8c:54:61:33:77:
         13:52:90:eb:09:75:46:e3:3b:dc:cd:85:90:6f:33:6a:64:90:
         dc:a2:af:79:78:75:47:d1:dd:af:70:71:97:22:ef:e0:b3:fd:
         45:f1:0d:44:b4:f8:fd:4e:19:ad:3b:96:99:a3:f7:f3:7e:14:
         a2:50:83:bf:d8:92:d3:17:23:25:fa:2c:61:d8:f5:64:a0:f9:
         56:4f:86:34:fa:ce:94:60:07:ab:37:52:b5:a9:16:da:51:94:
         57:21:4e:59:f1:71:11:c4:e4:97:9e:88:20:87:fe:05:5b:20:
         69:d7:6c:9b:90:4b:68:38:82:76:e9:0c:a8:a6:9c:a4:f7:e4:
         f4:1e:a9:38:6c:af:21:af:ab:da:9d:98:fb:1c:8c:cf:6b:75:
         62:0e:44:7a:7b:45:0e:51:51:f2:78:f8:a1:9b:db:57:7b:2b:
         5d:96:2e:a4:77:6d:e8:b0:de:48:88:d7:a5:d4:f8:41:15:17:
         d5:17:dd:1f:15:6d:74:52:24:38:ef:80:ab:03:04:ea:59:6f:
         c2:b3:b9:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjmr4QKnGpDUyNHm5bD0GycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzdkZDI1Y2E1ZmIxZGM5MTNjMmZmYjkxNmZhMjJmYjg2
MTBiNzgwHhcNMjUwODI2MTQwMTU4WhcNMjUwODI3MTQwMTU4WjAzMTEwLwYDVQQD
Eyg0ODAyNjQwYTQ2NWU4M2JhZTM1ZDE0ODI0OGVlYzQ3ZjU4NmExZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxDPHSm9S0OTkPA4JYVrx4hVC/4H
BUEorYxAT2caL427mCkpWu2dtVvztkwsVfX3GSppbFYa+u4/kYJkDUY6/NT10RcW
HFh8mbDZqdFnCWfUsfFNYSAIygvc+/rmfSDOFICF/6pCzc+GvNolizV2cvHb3Ah8
mPkDTN61ymkcYm+Chmmt4cyUSbXV8NDxKOuvdR3I4FNGXI1/KThSLPO9PKYse9od
8kV+OxrF/YZ4k9Ma/BbkMQieXO3edulgTqFYKJIsb9wX21g6K+8fAK+4/psD6vC6
xR5OV+EnVYiwTdTBz19NAWSphcGQjrnOt3Nt22DFNu1+fmMVnPDRGSpAgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgCZApGXoO6410UgkjuxH9Yah1qMB8GA1UdIwQY
MBaAFHfH3SXKX7HckTwv+5Fvoi+4YQt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80OTNhYjgtNTRjNC00MmY1LWI0YWYt
ZGRiMzViMWFiYWQ1LzEvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80OTNhYjgtNTRjNC00MmY1LWI0YWYtZGRiMzViMWFiYWQ1
LzEvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyEcvti6
GgxDkcYrNwTCYvDXQujbQJi4m2QgxosrCKzZk/gJbeFzVbMpmT3xTRjEPYxUYTN3
E1KQ6wl1RuM73M2FkG8zamSQ3KKveXh1R9Hdr3BxlyLv4LP9RfENRLT4/U4ZrTuW
maP3834UolCDv9iS0xcjJfosYdj1ZKD5Vk+GNPrOlGAHqzdStakW2lGUVyFOWfFx
EcTkl56IIIf+BVsgaddsm5BLaDiCdukMqKacpPfk9B6pOGyvIa+r2p2Y+xyMz2t1
Yg5EentFDlFR8nj4oZvbV3srXZYupHdt6LDeSIjXpdT4QRUX1RfdHxVtdFIkOO+A
qwME6llvwrO50Q==
-----END CERTIFICATE-----
Generated at Tue Aug 26 19:58:49 2025 by rpki-client