Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
File:                     k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json)
Hash identifier:          BiETbUytivafYUmFkzvRypj8nzMhPxwhmXHwl0iCQS8=
Subject key identifier:   65:60:B7:AE:94:3B:CF:CB:DB:6C:FB:24:D4:8F:E5:66:2C:C7:E2:3E
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Certificate issuer:       /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial:       01987B2D6FDC046B8852DE507B72C9226622
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
Manifest number:          0CFB
Signing time:             Tue 05 Aug 2025 17:00:31 +0000
Manifest this update:     Tue 05 Aug 2025 17:00:31 +0000
Manifest next update:     Wed 06 Aug 2025 17:00:31 +0000
Files and hashes:         1: ilnYefv9qH3PNjv85ldcxCld-ls.roa (hash: SaAltYqG0WS/0wCUjq7LbhKFvPJZWUqyuxA3IK3kA+I=)
                          2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: V1NQEKlIvilUr8GTqBY2PIDR7DZJwKYuN9gMeqCwOCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:2d:6f:dc:04:6b:88:52:de:50:7b:72:c9:22:66:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
        Validity
            Not Before: Aug  5 17:00:31 2025 GMT
            Not After : Aug  6 17:00:31 2025 GMT
        Subject: CN=6560b7ae943bcfcbdb6cfb24d48fe5662cc7e23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:c0:58:f7:41:6d:8a:ef:34:5a:ed:7f:5b:
                    f6:a6:c6:3a:57:fe:d3:17:1f:c6:09:d7:fb:e9:7c:
                    dc:d7:23:ae:0b:13:3b:7e:03:79:88:d2:31:73:a7:
                    b4:a1:a5:cd:1a:e1:b4:09:d7:41:44:c4:46:e8:8e:
                    53:75:0c:13:fa:f6:cf:95:0f:e7:bc:b5:50:51:aa:
                    89:5e:32:6a:5e:45:f0:ac:03:b7:ef:48:f0:37:42:
                    f4:3a:14:dd:86:dc:39:21:2c:4a:88:04:d7:2a:a7:
                    b8:32:2a:f8:51:0e:e5:f3:1e:a8:2a:87:72:a7:e5:
                    30:31:57:8c:e2:48:d9:e3:ed:f1:fe:84:c4:90:7a:
                    19:c4:df:8a:4f:f6:b2:99:6a:5e:6f:73:1d:e8:d9:
                    83:68:f1:1d:be:c0:fc:d9:ab:dd:10:68:5f:0a:58:
                    f7:15:ff:3d:e2:96:19:ee:34:25:c7:5b:b1:b0:39:
                    74:65:d0:3c:2a:3b:dc:7b:97:1b:b5:17:32:91:9e:
                    f0:e9:5a:9b:05:72:f7:0d:c8:1a:cc:f3:89:5f:d9:
                    32:b8:89:d8:ea:ee:40:d3:0b:cd:fa:95:56:b6:fa:
                    20:09:e0:54:f0:f6:16:bd:f3:cf:52:c6:01:99:db:
                    d9:43:a8:da:9c:bf:e4:86:ee:0a:6e:2d:f8:8c:ff:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:60:B7:AE:94:3B:CF:CB:DB:6C:FB:24:D4:8F:E5:66:2C:C7:E2:3E
            X509v3 Authority Key Identifier:
                keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:12:0a:e5:3f:6d:b0:66:a0:15:e7:17:73:d9:6b:b7:ef:6d:
         e9:7a:fb:2e:59:55:2d:24:fd:67:82:9f:32:f5:f9:ea:4d:77:
         e5:0d:ca:79:79:cb:24:ee:1f:b3:1b:3c:a3:24:fd:04:9c:5a:
         04:9f:84:b5:f6:e2:81:57:93:81:e9:84:95:66:b6:bc:05:95:
         55:ad:f5:03:3e:94:52:58:7b:c5:2b:08:b8:43:43:b8:f2:d1:
         50:38:83:c6:39:7a:ce:ab:b4:73:fc:b5:33:36:79:d5:e9:1f:
         34:14:93:e1:3f:9b:ef:7a:f4:9e:13:7c:d7:e3:e2:50:f9:73:
         e7:f5:4c:0c:2f:5f:d4:13:7e:fa:6f:7b:76:68:25:4b:5d:e6:
         8c:5f:5c:73:c7:79:7a:24:e8:89:fa:a2:2f:92:36:36:5b:75:
         46:e8:5d:00:96:fd:bf:e2:d5:7d:b6:a2:d2:b2:e6:a6:79:b2:
         83:0e:8d:ff:64:fa:65:e5:b0:7d:56:7d:cd:0e:18:f9:3e:6f:
         2f:d6:3e:50:dc:d5:e7:99:26:03:c2:bd:33:2f:c1:ee:47:b1:
         5b:0c:e8:be:28:2a:ab:26:87:d7:c6:6a:49:8a:96:fe:37:bb:
         0b:d4:52:a8:e8:98:82:9b:b3:51:d2:f2:27:8f:4f:b5:8e:5e:
         a4:c7:dd:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7LW/cBGuIUt5Qe3LJImYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZjNmYzk2NzhjZTViMDI3MzUzOGM3OGIwYjk2YTEzZWIw
ODYyZDkwHhcNMjUwODA1MTcwMDMxWhcNMjUwODA2MTcwMDMxWjAzMTEwLwYDVQQD
Eyg2NTYwYjdhZTk0M2JjZmNiZGI2Y2ZiMjRkNDhmZTU2NjJjYzdlMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtXAWPdBbYrvNFrtf1v2psY6V/7T
Fx/GCdf76Xzc1yOuCxM7fgN5iNIxc6e0oaXNGuG0CddBRMRG6I5TdQwT+vbPlQ/n
vLVQUaqJXjJqXkXwrAO370jwN0L0OhTdhtw5ISxKiATXKqe4Mir4UQ7l8x6oKody
p+UwMVeM4kjZ4+3x/oTEkHoZxN+KT/aymWpeb3Md6NmDaPEdvsD82avdEGhfClj3
Ff894pYZ7jQlx1uxsDl0ZdA8Kjvce5cbtRcykZ7w6VqbBXL3DcgazPOJX9kyuInY
6u5A0wvN+pVWtvogCeBU8PYWvfPPUsYBmdvZQ6janL/khu4Kbi34jP+/eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVgt66UO8/L22z7JNSP5WYsx+I+MB8GA1UdIwQY
MBaAFJPz/JZ4zlsCc1OMeLC5ahPrCGLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jY2NhYzctNDY2MC00ZTUyLTk1MWYt
YmEwZDNiMmQzNmUwLzEva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9jY2NhYzctNDY2MC00ZTUyLTk1MWYtYmEwZDNiMmQzNmUw
LzEva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRIK5T9t
sGagFecXc9lrt+9t6Xr7LllVLST9Z4KfMvX56k135Q3KeXnLJO4fsxs8oyT9BJxa
BJ+EtfbigVeTgemElWa2vAWVVa31Az6UUlh7xSsIuENDuPLRUDiDxjl6zqu0c/y1
MzZ51ekfNBST4T+b73r0nhN81+PiUPlz5/VMDC9f1BN++m97dmglS13mjF9cc8d5
eiToifqiL5I2Nlt1RuhdAJb9v+LVfbai0rLmpnmygw6N/2T6ZeWwfVZ9zQ4Y+T5v
L9Y+UNzV55kmA8K9My/B7kexWwzovigqqyaH18ZqSYqW/je7C9RSqOiYgpuzUdLy
J49PtY5epMfd/A==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:00 2025 by rpki-client