Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File:                     z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier:          hffHngkA+egStRNggMHYTIkbPeH7j+pDsf8+gBcplU8=
Subject key identifier:   CE:C6:6C:41:C0:74:25:79:37:73:AC:7D:9E:AB:C7:2D:83:A9:06:19
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer:       /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial:       0198816704D9545FAA04AB53E57FD7A57525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number:          117D
Signing time:             Wed 06 Aug 2025 22:01:08 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:08 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:08 +0000
Files and hashes:         1: 3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa (hash: TnQIP8m/z9TeUL6T1o3LFStwx3OkwZWYEkGyH7pKVzQ=)
                          2: C6G26s2_9rDhMVp1kQhNB3w99vU.roa (hash: /Sx9ARb2KrLY9zv7k7Qpt7h2hX4KWumGuc1xaBNSC/E=)
                          3: IeIheuUZIrSao3cwITZ9a7Vr14M.roa (hash: D6ff1htYAOrTrHoE1npjdhSz9xEaYGaeMk7OAb0vWUY=)
                          4: OToS6J8sZcb-NOk0SLebRPhhIy8.roa (hash: hJi47h64zp0y7tuydNdIF9Tsj0N17DTgxMy6IbUz6LM=)
                          5: TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa (hash: olUxSsNWWfOkaH/tshrZT1VhUO7Fs87MPQLfSyoOypI=)
                          6: g25IGTKfPYjST4HNSDfCkGR8U-U.roa (hash: shszXMRp8pWU+jn/kDMsa59h70gxIvBt7/Q+QM/PucQ=)
                          7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: LxTSRPqLbFQO64PRIiy5IPLaFeWikqEGJHUG7nBr+T4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:04:d9:54:5f:aa:04:ab:53:e5:7f:d7:a5:75:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
        Validity
            Not Before: Aug  6 22:01:08 2025 GMT
            Not After : Aug  7 22:01:08 2025 GMT
        Subject: CN=cec66c41c07425793773ac7d9eabc72d83a90619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:61:a9:99:99:5a:8a:3d:a2:ed:41:57:eb:50:
                    17:36:6b:e0:74:d9:ec:1f:58:a4:8e:da:eb:3e:81:
                    db:1f:df:0c:fa:4b:d2:a5:f0:b9:65:7c:69:9b:f4:
                    4d:32:7a:13:70:85:f5:8f:92:29:6b:ea:b8:bf:dc:
                    06:f5:88:85:2e:b3:40:df:12:53:77:b8:1b:7e:bd:
                    c6:68:e3:a6:2b:ea:5c:78:0c:9d:23:46:70:9f:75:
                    70:aa:f6:af:a0:dc:cb:17:a5:6f:79:9c:02:86:b0:
                    64:b3:39:de:0e:d7:c4:03:2a:b5:98:71:47:24:9a:
                    68:3c:eb:97:60:34:ff:c5:bf:25:6d:49:c2:06:c8:
                    e1:31:50:42:b5:fb:f3:95:c2:5e:d9:7a:86:bb:f6:
                    12:d6:aa:c2:bf:c0:c6:47:dd:72:ee:16:38:f4:a2:
                    d2:b0:f5:03:c0:f4:20:c9:19:f9:36:24:4f:02:22:
                    fb:88:dc:85:d9:bb:b6:5c:fb:9d:b2:0b:88:d2:44:
                    82:f0:13:ed:19:6b:23:a6:19:79:28:91:4d:7c:17:
                    31:a0:96:b6:e8:f4:47:a4:02:76:60:1a:d8:15:c6:
                    8b:41:bd:fe:9a:1b:96:1a:7f:34:4e:1f:d4:d5:ff:
                    c6:e8:2a:31:a8:71:91:cd:37:99:1b:1d:7e:0d:4f:
                    88:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C6:6C:41:C0:74:25:79:37:73:AC:7D:9E:AB:C7:2D:83:A9:06:19
            X509v3 Authority Key Identifier:
                keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7b:b7:59:53:a9:4e:3d:10:57:5b:22:ac:dc:cc:c5:9f:98:
         aa:60:44:b1:39:c3:7c:38:c6:f6:3c:0b:07:01:34:43:61:a6:
         82:0e:5c:8e:6a:07:83:a7:cf:78:f1:1a:59:22:ae:d7:87:45:
         92:e4:9c:dc:84:f0:5b:18:12:54:9d:25:d5:82:ef:17:e6:fc:
         88:de:48:35:ea:29:c1:23:10:51:1c:58:bc:1e:be:6b:54:f2:
         73:a0:ab:73:13:35:35:a7:26:e4:35:5a:6b:01:f7:3f:56:40:
         b7:91:c6:d5:f2:93:21:e3:a1:c8:09:f5:c5:e9:dc:82:2b:f2:
         4d:f0:3d:a5:3a:74:fd:5e:bc:31:a1:71:07:e8:f6:e0:af:24:
         ca:2f:66:79:db:1d:eb:5e:b5:39:f1:8e:68:2d:3c:d2:c8:9b:
         a8:74:fd:e9:a2:22:73:8f:22:46:c0:38:70:ca:68:09:8e:76:
         8a:ff:71:38:aa:58:b0:89:ae:92:98:0e:3c:2e:ee:84:46:ff:
         96:e2:a6:70:3f:b8:70:b1:b4:74:02:28:6a:02:1b:94:08:ff:
         62:8a:6e:81:3c:a1:0c:c9:15:f7:fd:6b:5b:ee:53:28:55:da:
         ba:d7:52:5d:31:8b:d8:bf:46:28:b6:51:2a:dd:c9:b8:94:45:
         f3:1c:b7:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZwTZVF+qBKtT5X/XpXUlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZWFjZTcxNGMyOTU2OGVmMTk3MDA3YjE0MWQxMjc1OGNj
NDE1ZDUwHhcNMjUwODA2MjIwMTA4WhcNMjUwODA3MjIwMTA4WjAzMTEwLwYDVQQD
EyhjZWM2NmM0MWMwNzQyNTc5Mzc3M2FjN2Q5ZWFiYzcyZDgzYTkwNjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WGpmZlaij2i7UFX61AXNmvgdNns
H1ikjtrrPoHbH98M+kvSpfC5ZXxpm/RNMnoTcIX1j5Ipa+q4v9wG9YiFLrNA3xJT
d7gbfr3GaOOmK+pceAydI0Zwn3VwqvavoNzLF6VveZwChrBkszneDtfEAyq1mHFH
JJpoPOuXYDT/xb8lbUnCBsjhMVBCtfvzlcJe2XqGu/YS1qrCv8DGR91y7hY49KLS
sPUDwPQgyRn5NiRPAiL7iNyF2bu2XPudsguI0kSC8BPtGWsjphl5KJFNfBcxoJa2
6PRHpAJ2YBrYFcaLQb3+mhuWGn80Th/U1f/G6CoxqHGRzTeZGx1+DU+IgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7GbEHAdCV5N3OsfZ6rxy2DqQYZMB8GA1UdIwQY
MBaAFM/qznFMKVaO8ZcAexQdEnWMxBXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMt
OGZkMzk0YjUzNTdjLzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMtOGZkMzk0YjUzNTdj
LzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnu3WVOp
Tj0QV1sirNzMxZ+YqmBEsTnDfDjG9jwLBwE0Q2Gmgg5cjmoHg6fPePEaWSKu14dF
kuSc3ITwWxgSVJ0l1YLvF+b8iN5INeopwSMQURxYvB6+a1Tyc6CrcxM1Nacm5DVa
awH3P1ZAt5HG1fKTIeOhyAn1xencgivyTfA9pTp0/V68MaFxB+j24K8kyi9medsd
6161OfGOaC080sibqHT96aIic48iRsA4cMpoCY52iv9xOKpYsImukpgOPC7uhEb/
luKmcD+4cLG0dAIoagIblAj/YopugTyhDMkV9/1rW+5TKFXautdSXTGL2L9GKLZR
Kt3JuJRF8xy3Gg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:43:09 2025 by rpki-client