Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
File:                     Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft (raw, json)
Hash identifier:          W3ooa0ah8lUMh/nng4HWcHE5mM4dSHmtp89YdU49w0M=
Subject key identifier:   7A:79:CF:AC:72:0D:DE:59:9B:A5:6F:20:BE:4A:16:91:66:91:BC:4A
Authority key identifier: 31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
Certificate issuer:       /CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Certificate serial:       019895FFC8E9580271577AA5C13CFAEDD695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
Manifest number:          08A0
Signing time:             Sun 10 Aug 2025 22:00:24 +0000
Manifest this update:     Sun 10 Aug 2025 22:00:24 +0000
Manifest next update:     Mon 11 Aug 2025 22:00:24 +0000
Files and hashes:         1: 5_iMF-a8NMa1YPR_P3PyRQQW0y4.roa (hash: WcT24IP06Ufo9Qw11IKoVe7vKY2EcXtQIG8CxBVwap8=)
                          2: Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl (hash: AqeGjlyNgN5YuZWqGX5Emwp2qCCSiDBtboNyU+nTKD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:ff:c8:e9:58:02:71:57:7a:a5:c1:3c:fa:ed:d6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
        Validity
            Not Before: Aug 10 22:00:24 2025 GMT
            Not After : Aug 11 22:00:24 2025 GMT
        Subject: CN=7a79cfac720dde599ba56f20be4a16916691bc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:15:bf:ba:1a:62:2d:27:3b:9c:a6:45:3a:53:
                    06:c1:c4:51:bc:ed:a6:fc:6a:59:19:ef:b3:4f:c3:
                    9a:c3:58:7b:19:74:0d:5c:96:27:07:05:0f:3a:07:
                    e6:46:cb:5a:60:a0:f0:d3:7e:4d:26:82:08:02:68:
                    bc:69:27:b2:9e:10:b4:c6:cd:49:02:67:79:83:e0:
                    8f:84:9e:65:93:ad:e9:c6:94:cd:18:93:7f:4f:04:
                    46:23:b4:7c:9c:5a:d1:68:78:08:53:42:44:b6:e0:
                    0f:2f:aa:52:0b:ca:c9:96:a2:d4:e8:ce:26:54:64:
                    77:d3:5c:f6:6c:04:fd:53:99:af:46:0e:a2:a1:35:
                    12:93:d3:d7:a1:d1:b4:fa:c2:b0:27:30:a7:9e:3e:
                    0d:8a:13:a7:f3:9f:b5:5d:05:9a:8a:c0:2c:4c:6c:
                    e9:77:81:6c:04:1d:05:e6:60:0c:61:5e:3e:54:7c:
                    fe:bb:72:1d:6d:db:13:71:57:83:02:98:89:91:e9:
                    48:db:fe:93:1e:70:ec:c0:78:89:09:5c:54:91:50:
                    16:98:b0:0b:d0:f3:46:1f:6a:0e:7f:d4:86:47:51:
                    49:65:cf:32:bf:36:66:82:57:3f:19:5d:d1:34:ea:
                    4e:4c:89:6f:8d:89:f0:27:de:ec:ea:de:63:a2:aa:
                    a4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:79:CF:AC:72:0D:DE:59:9B:A5:6F:20:BE:4A:16:91:66:91:BC:4A
            X509v3 Authority Key Identifier:
                keyid:31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:59:2e:d9:87:57:36:b7:b2:7f:28:c7:6c:4a:42:f5:21:27:
         63:97:a9:60:df:01:a3:aa:5c:42:5b:cd:82:ef:6a:da:bc:f8:
         a4:a8:8a:db:e9:8d:b5:f7:3e:08:38:cf:4d:4d:c1:93:ea:27:
         64:92:2c:bc:7c:e2:e0:a1:a6:27:05:fc:e6:03:92:cc:b8:29:
         31:3e:0a:a5:3f:33:49:e8:ba:45:9b:2d:12:a1:6e:98:dd:64:
         7a:06:14:03:02:ed:5f:84:b2:1c:41:cb:59:45:93:4f:08:d2:
         5c:03:74:29:db:1c:ad:04:29:a4:48:37:43:57:bd:5e:a4:eb:
         f6:f8:34:fd:5b:fa:41:31:74:a5:e3:12:ba:5b:23:b7:3f:69:
         6d:47:31:d2:e7:e5:b9:c5:30:2d:79:49:eb:32:66:1d:8d:9d:
         24:8b:57:78:f2:41:3c:b8:ca:58:bb:57:4c:b0:bb:c8:8a:c0:
         64:84:82:19:fd:ff:96:fd:dc:44:0e:22:6d:70:3f:2a:2f:cb:
         33:d6:d2:b3:b9:cc:7a:60:da:2f:d0:4d:98:26:8d:1a:d6:74:
         9b:88:90:d4:bb:82:c6:26:c4:8f:ea:a6:f1:2e:ed:29:3f:43:
         df:5f:3f:17:7f:46:16:8c:cd:65:64:38:94:e3:94:d2:0c:bb:
         db:04:71:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiV/8jpWAJxV3qlwTz67daVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZmY2YTIyOTM3ZWYxNjQwZDgzMTg4ZGZjZDdhYmIzMGZj
YzcyMWUwHhcNMjUwODEwMjIwMDI0WhcNMjUwODExMjIwMDI0WjAzMTEwLwYDVQQD
Eyg3YTc5Y2ZhYzcyMGRkZTU5OWJhNTZmMjBiZTRhMTY5MTY2OTFiYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RW/uhpiLSc7nKZFOlMGwcRRvO2m
/GpZGe+zT8Oaw1h7GXQNXJYnBwUPOgfmRstaYKDw035NJoIIAmi8aSeynhC0xs1J
Amd5g+CPhJ5lk63pxpTNGJN/TwRGI7R8nFrRaHgIU0JEtuAPL6pSC8rJlqLU6M4m
VGR301z2bAT9U5mvRg6ioTUSk9PXodG0+sKwJzCnnj4NihOn85+1XQWaisAsTGzp
d4FsBB0F5mAMYV4+VHz+u3IdbdsTcVeDApiJkelI2/6THnDswHiJCVxUkVAWmLAL
0PNGH2oOf9SGR1FJZc8yvzZmglc/GV3RNOpOTIlvjYnwJ97s6t5joqqkoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHp5z6xyDd5Zm6VvIL5KFpFmkbxKMB8GA1UdIwQY
MBaAFDH/aiKTfvFkDYMYjfzXq7MPzHIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWY5cUlwTi04V1FOZ3hpTl9OZXJzd19NY2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zMzY4OWYtOGU0OC00YmYzLTg5ZjUt
Yzc2ZjdiNmIwZWI2LzEvTWY5cUlwTi04V1FOZ3hpTl9OZXJzd19NY2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zMzY4OWYtOGU0OC00YmYzLTg5ZjUtYzc2ZjdiNmIwZWI2
LzEvTWY5cUlwTi04V1FOZ3hpTl9OZXJzd19NY2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElku2YdX
NreyfyjHbEpC9SEnY5epYN8Bo6pcQlvNgu9q2rz4pKiK2+mNtfc+CDjPTU3Bk+on
ZJIsvHzi4KGmJwX85gOSzLgpMT4KpT8zSei6RZstEqFumN1kegYUAwLtX4SyHEHL
WUWTTwjSXAN0KdscrQQppEg3Q1e9XqTr9vg0/Vv6QTF0peMSulsjtz9pbUcx0ufl
ucUwLXlJ6zJmHY2dJItXePJBPLjKWLtXTLC7yIrAZISCGf3/lv3cRA4ibXA/Ki/L
M9bSs7nMemDaL9BNmCaNGtZ0m4iQ1LuCxibEj+qm8S7tKT9D318/F39GFozNZWQ4
lOOU0gy72wRxEA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:29 2025 by rpki-client