Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
File:                     v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft (raw, json)
Hash identifier:          dhxCpyYx5DZD+xveDkL7V6xMppwTY4HRI43q3VLDnAo=
Subject key identifier:   2F:8A:85:5B:9D:50:CB:9D:B6:C4:14:4A:97:A8:AB:05:44:2B:C2:C0
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Certificate issuer:       /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial:       019873E3EBFCB165DAA6B923DE1844C6E3AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
Manifest number:          1623
Signing time:             Mon 04 Aug 2025 07:02:53 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:53 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:53 +0000
Files and hashes:         1: 1-7RPCOXBfIKW07w2_gfX-l5xjwU.roa (hash: l+CJQac/GH3qcNGwSYOMkKACx6s8h1Uwqg0edh7Y8jc=)
                          2: 6gNZAsVf-wN84JvRq_OcC2fCfZI.roa (hash: bKq5ijI4cHYkiNFIZmWyJ6ZOR6ehBPjiusPq1BV3o9w=)
                          3: DCUhFzb2MklEo8ZkPVYr4GxtnA8.roa (hash: s+H+XdC1uH7Wqe83lxlwU1t1BUQewLSzbEYoJ2Fbqy0=)
                          4: kxux6PZN_wALCnv9GHcDUsMWbbE.roa (hash: K/OIfNl/eWd4bOh3PebPr55qq3daVrMSTH+FOwAG9yA=)
                          5: s4AwXqhqtrcDqPKIpmaM34VvuVk.roa (hash: omUzj8bx95orfDmkVMaZXkJzmvX0N8m/6+VDQgcz/84=)
                          6: v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl (hash: Z3/lJ7CCdbtQes1KxSSP6e71A198Kc3iBMRZj5PcdoQ=)
                          7: xhgTHQyXIy450iP62m75oStMlkg.roa (hash: z3oer5qK5pT0D7zvUlqDepBtwAxWfOe3pSOkgZLXdDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:eb:fc:b1:65:da:a6:b9:23:de:18:44:c6:e3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
        Validity
            Not Before: Aug  4 07:02:53 2025 GMT
            Not After : Aug  5 07:02:53 2025 GMT
        Subject: CN=2f8a855b9d50cb9db6c4144a97a8ab05442bc2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:10:52:f5:d5:61:b9:9d:43:30:07:8f:5e:
                    e3:f8:78:fa:94:c8:37:5c:cb:1e:f6:8a:34:77:62:
                    50:6e:93:a9:a0:5d:4b:99:11:ea:0d:f7:19:ae:24:
                    31:04:ce:a0:71:cb:c8:b6:19:97:9f:e5:7a:97:5f:
                    55:ef:71:a9:16:11:49:42:f4:24:3d:f6:6f:52:98:
                    7b:b9:cc:d4:bf:f7:6e:f8:0b:6b:d0:60:da:77:64:
                    12:41:ab:5b:d6:00:51:15:fc:8f:47:3b:c0:de:15:
                    31:c8:c1:3e:fb:5e:27:3e:7c:56:7b:63:46:9a:85:
                    c5:c2:27:02:d4:1f:8d:b1:5f:cc:9d:b3:6b:79:ec:
                    16:92:e7:78:fb:fe:83:ca:56:28:ed:ee:a6:84:16:
                    a1:8b:f7:f3:ad:0d:56:49:50:09:06:46:64:7a:dd:
                    b9:38:55:07:52:d2:e8:62:b3:c9:ee:ed:c4:ec:b3:
                    71:4d:a1:10:63:f9:2c:20:f8:8d:c4:c7:f9:f6:73:
                    7c:a1:d2:a0:13:51:68:5f:63:b3:c8:84:9a:d4:e4:
                    0f:95:ca:97:64:99:45:51:4c:83:2c:3b:56:94:ce:
                    a8:9a:32:4f:2e:de:dc:6f:6d:a1:31:a6:66:cb:18:
                    56:3f:f3:4c:ec:62:6e:18:11:b3:6b:7e:76:6f:30:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8A:85:5B:9D:50:CB:9D:B6:C4:14:4A:97:A8:AB:05:44:2B:C2:C0
            X509v3 Authority Key Identifier:
                keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:6d:59:6a:c9:2d:87:e4:c7:e2:4a:68:bd:bd:36:40:d7:cb:
         3b:11:b9:f4:92:19:7e:ec:cc:71:9a:f0:2e:c0:06:20:d0:1e:
         56:5f:0c:28:75:ff:85:ca:07:48:72:52:9e:c1:e5:6c:32:1f:
         6a:d0:9d:43:fd:ac:80:46:57:77:73:b1:38:46:c0:81:bf:d5:
         e5:72:46:33:0e:be:a3:a3:34:44:81:02:71:15:d0:c7:f3:5b:
         1c:5d:3c:c7:ea:d1:90:36:ca:0c:5b:85:2b:3e:58:33:bc:ce:
         56:93:c1:ed:8b:a2:1b:2e:b2:b5:49:c9:fa:23:4e:2a:d5:8c:
         be:55:f3:46:68:e9:c9:0b:60:4e:67:1a:b0:d9:af:2e:67:3d:
         ab:ab:51:ee:83:e2:4e:b7:dc:3e:ae:fb:33:e2:df:09:ba:9e:
         bb:41:86:57:a7:f5:25:52:77:a2:72:7e:ae:3b:3b:5f:e4:30:
         1c:0c:3a:7f:56:77:71:e3:0a:5e:38:ce:02:e9:e8:5c:fd:c9:
         9f:2e:e7:d6:36:1a:8f:82:ad:6c:c4:23:24:87:a9:99:54:8d:
         76:63:36:25:2f:b8:78:c2:e9:32:93:9e:71:e7:ee:59:e0:b6:
         28:63:85:bd:55:99:d5:39:25:98:27:43:a4:c8:7f:d6:86:e4:
         73:8b:03:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4+v8sWXaprkj3hhExuOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYzQ3MGU5YjU4ZTU1N2VhOGMxZGJlZGFlYjljNmE1ZmM0
NTUxMjUwHhcNMjUwODA0MDcwMjUzWhcNMjUwODA1MDcwMjUzWjAzMTEwLwYDVQQD
EygyZjhhODU1YjlkNTBjYjlkYjZjNDE0NGE5N2E4YWIwNTQ0MmJjMmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0kQUvXVYbmdQzAHj17j+Hj6lMg3
XMse9oo0d2JQbpOpoF1LmRHqDfcZriQxBM6gccvIthmXn+V6l19V73GpFhFJQvQk
PfZvUph7uczUv/du+Atr0GDad2QSQatb1gBRFfyPRzvA3hUxyME++14nPnxWe2NG
moXFwicC1B+NsV/MnbNreewWkud4+/6DylYo7e6mhBahi/fzrQ1WSVAJBkZket25
OFUHUtLoYrPJ7u3E7LNxTaEQY/ksIPiNxMf59nN8odKgE1FoX2OzyISa1OQPlcqX
ZJlFUUyDLDtWlM6omjJPLt7cb22hMaZmyxhWP/NM7GJuGBGza352bzB6jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+KhVudUMudtsQUSpeoqwVEK8LAMB8GA1UdIwQY
MBaAFL/EcOm1jlV+qMHb7a65xqX8RVElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzkt
YTJhYTY1NDBmODc1LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzktYTJhYTY1NDBmODc1
LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApG1Zaskt
h+TH4kpovb02QNfLOxG59JIZfuzMcZrwLsAGINAeVl8MKHX/hcoHSHJSnsHlbDIf
atCdQ/2sgEZXd3OxOEbAgb/V5XJGMw6+o6M0RIECcRXQx/NbHF08x+rRkDbKDFuF
Kz5YM7zOVpPB7YuiGy6ytUnJ+iNOKtWMvlXzRmjpyQtgTmcasNmvLmc9q6tR7oPi
TrfcPq77M+LfCbqeu0GGV6f1JVJ3onJ+rjs7X+QwHAw6f1Z3ceMKXjjOAunoXP3J
ny7n1jYaj4KtbMQjJIepmVSNdmM2JS+4eMLpMpOecefuWeC2KGOFvVWZ1TklmCdD
pMh/1obkc4sDBw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:51:55 2025 by rpki-client