Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File:                     iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier:          fLseFyB0tK9gEbPz0Hw5CNBZ7KXUvuIs5TymjxgiYSw=
Subject key identifier:   31:D7:36:FB:55:9E:73:26:19:CD:60:65:2F:4D:3B:A0:CD:8F:0F:9A
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer:       /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial:       019891B5E22553859464B2F58F01A7825064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number:          0E99
Signing time:             Sun 10 Aug 2025 02:01:12 +0000
Manifest this update:     Sun 10 Aug 2025 02:01:12 +0000
Manifest next update:     Mon 11 Aug 2025 02:01:12 +0000
Files and hashes:         1: hGQAPrEg70xi3dTAsr6AkflPwzQ.roa (hash: fq94rKVVa6d3kPByOte4hBdKvb2vGf30OOEdIeQW7uc=)
                          2: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: n2A8gSE5n7B2viYgwzNp17jqsit9NnEhz/tvh3VHtYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:b5:e2:25:53:85:94:64:b2:f5:8f:01:a7:82:50:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
        Validity
            Not Before: Aug 10 02:01:12 2025 GMT
            Not After : Aug 11 02:01:12 2025 GMT
        Subject: CN=31d736fb559e732619cd60652f4d3ba0cd8f0f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:79:b0:eb:63:f3:80:0d:34:f8:3e:a7:67:
                    2a:58:d7:c4:60:ab:fa:d2:2e:d1:f3:fa:6f:c6:82:
                    9f:e5:bf:d6:ca:63:9b:fc:f5:62:40:55:aa:7a:e1:
                    98:eb:f9:1f:c1:23:21:d9:46:2a:f9:3b:7d:79:05:
                    bd:4e:41:08:dd:58:61:16:51:42:d2:34:c6:31:84:
                    e6:1b:28:54:fd:f2:8f:60:86:81:5b:33:06:a3:f2:
                    28:22:cd:f7:70:fe:df:fe:34:6a:44:d0:d2:0d:7d:
                    81:5e:1f:01:7a:a2:b3:0c:ad:d3:62:a7:f6:a7:e3:
                    79:34:ea:22:60:a0:e9:cd:f9:26:80:b4:69:2e:1b:
                    25:c6:42:ac:e2:a4:3f:51:02:3e:ce:c6:78:f1:fd:
                    ac:2b:8b:7a:ee:86:27:77:ca:35:c1:be:c1:79:8b:
                    40:2b:0b:38:be:a2:a4:9d:1e:db:87:5c:1d:6a:8c:
                    f4:ab:62:dd:b7:c1:90:f7:9b:d0:81:b9:fa:20:6e:
                    e5:c0:42:ad:fd:a4:21:c6:04:88:7a:bd:8e:1f:f1:
                    b0:0e:a3:41:58:20:c3:c2:74:86:b5:f0:8a:62:2c:
                    d9:d2:2c:b8:dd:b1:b5:ff:0a:e9:36:1c:a6:28:43:
                    02:74:99:4a:51:1b:2f:8f:e9:80:5e:5e:fb:cd:a1:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D7:36:FB:55:9E:73:26:19:CD:60:65:2F:4D:3B:A0:CD:8F:0F:9A
            X509v3 Authority Key Identifier:
                keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5b:ae:0a:0b:63:e7:60:e5:e5:5e:d5:78:5c:65:12:b8:ce:
         02:bf:3f:f3:bc:1a:11:43:d8:5e:15:ce:e2:49:5a:f1:a3:ae:
         fc:26:1c:f8:ad:9b:4e:1e:cb:d7:2f:7a:a0:3a:9b:71:59:e6:
         c5:f5:6f:26:7d:e8:8b:76:81:be:e9:29:c6:1a:a3:52:54:3a:
         75:a2:5a:10:93:5f:d4:3d:80:60:4a:ba:53:60:14:7b:ab:d6:
         b8:93:c5:80:85:b5:c4:1e:49:79:46:eb:a3:cd:17:48:b7:cd:
         ad:42:9f:15:bb:37:9f:b4:81:6b:69:02:36:e1:0e:d4:8a:d1:
         3f:d4:85:4d:31:99:b6:68:72:2a:9f:ba:27:22:35:cf:f8:79:
         2b:58:09:8a:8f:b7:12:37:0f:50:07:a7:2f:9f:8b:7d:a3:e1:
         d6:4a:22:d0:a6:46:68:8a:d7:63:c2:4a:7c:cc:c0:94:b0:a4:
         63:a6:3d:d4:7d:36:16:d5:23:78:15:2b:16:ad:cf:17:94:f2:
         65:51:00:22:09:13:70:86:40:16:7f:97:0d:ed:10:d8:aa:dd:
         14:20:cc:39:e8:40:ff:44:30:27:2a:54:47:96:8e:9b:1a:50:
         e4:81:da:c8:6d:45:22:d3:67:2b:14:d7:7e:99:9f:1c:b6:19:
         a0:47:91:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRteIlU4WUZLL1jwGnglBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTBmYzMxOThhMGFiOTk2NDc4NzdkYmU1NzI1ZTA1Y2Vl
MDEzZjAwHhcNMjUwODEwMDIwMTEyWhcNMjUwODExMDIwMTEyWjAzMTEwLwYDVQQD
EygzMWQ3MzZmYjU1OWU3MzI2MTljZDYwNjUyZjRkM2JhMGNkOGYwZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbh5sOtj84ANNPg+p2cqWNfEYKv6
0i7R8/pvxoKf5b/WymOb/PViQFWqeuGY6/kfwSMh2UYq+Tt9eQW9TkEI3VhhFlFC
0jTGMYTmGyhU/fKPYIaBWzMGo/IoIs33cP7f/jRqRNDSDX2BXh8BeqKzDK3TYqf2
p+N5NOoiYKDpzfkmgLRpLhslxkKs4qQ/UQI+zsZ48f2sK4t67oYnd8o1wb7BeYtA
Kws4vqKknR7bh1wdaoz0q2Ldt8GQ95vQgbn6IG7lwEKt/aQhxgSIer2OH/GwDqNB
WCDDwnSGtfCKYizZ0iy43bG1/wrpNhymKEMCdJlKURsvj+mAXl77zaHHPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHXNvtVnnMmGc1gZS9NO6DNjw+aMB8GA1UdIwQY
MBaAFIgQ/DGYoKuZZHh32+VyXgXO4BPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJEOE1aaWdxNWxrZUhmYjVYSmVCYzdnRV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jZjFmZmQtMTM0ZC00MzgyLThlNTkt
NGEwOGQ1YTFjNzFmLzEvaUJEOE1aaWdxNWxrZUhmYjVYSmVCYzdnRV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jZjFmZmQtMTM0ZC00MzgyLThlNTktNGEwOGQ1YTFjNzFm
LzEvaUJEOE1aaWdxNWxrZUhmYjVYSmVCYzdnRV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHluuCgtj
52Dl5V7VeFxlErjOAr8/87waEUPYXhXO4kla8aOu/CYc+K2bTh7L1y96oDqbcVnm
xfVvJn3oi3aBvukpxhqjUlQ6daJaEJNf1D2AYEq6U2AUe6vWuJPFgIW1xB5JeUbr
o80XSLfNrUKfFbs3n7SBa2kCNuEO1IrRP9SFTTGZtmhyKp+6JyI1z/h5K1gJio+3
EjcPUAenL5+LfaPh1koi0KZGaIrXY8JKfMzAlLCkY6Y91H02FtUjeBUrFq3PF5Ty
ZVEAIgkTcIZAFn+XDe0Q2KrdFCDMOehA/0QwJypUR5aOmxpQ5IHayG1FItNnKxTX
fpmfHLYZoEeRjw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:10 2025 by rpki-client