Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File:                     c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier:          euBmupqHvZ47V95nDfTGl+F7ay1nbFYR/RvscX5VYnI=
Subject key identifier:   D7:05:3E:C1:C2:EB:E2:49:78:3D:4A:39:DE:04:0E:37:86:2B:AB:D6
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer:       /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial:       01987BD2A12320497C74097D0381F2311D31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number:          0F81
Signing time:             Tue 05 Aug 2025 20:00:57 +0000
Manifest this update:     Tue 05 Aug 2025 20:00:57 +0000
Manifest next update:     Wed 06 Aug 2025 20:00:57 +0000
Files and hashes:         1: 6KWsm-ISjjNa3GCb69ojlbhUSE4.roa (hash: P1LdbF9uJ10tW+331stp5KKcZciYQiQ/KQwCd/ZEwrg=)
                          2: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: gbD6tVCjMFw9sPztWucVVL496BUxFaFA56+xgG9dK98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:d2:a1:23:20:49:7c:74:09:7d:03:81:f2:31:1d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
        Validity
            Not Before: Aug  5 20:00:57 2025 GMT
            Not After : Aug  6 20:00:57 2025 GMT
        Subject: CN=d7053ec1c2ebe249783d4a39de040e37862babd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:b5:0c:8c:ed:a9:cd:c5:b4:17:3d:d6:3b:
                    05:2b:3b:98:a5:74:15:9a:ec:51:58:3e:1f:63:57:
                    fe:ef:25:3c:15:97:97:47:6b:8a:6c:99:f6:18:54:
                    dd:04:e9:32:cb:26:b4:15:85:41:0e:db:8e:2c:39:
                    4d:97:c8:66:77:e5:d9:86:46:27:0b:6f:36:c7:05:
                    38:7d:89:7e:5b:68:20:75:21:7e:85:c8:1a:c1:1c:
                    cc:94:40:41:f3:47:88:9b:ea:4b:bc:b0:7c:f7:0a:
                    e9:0e:5f:a4:26:97:49:c8:4a:fe:21:6b:77:72:8d:
                    42:77:59:76:88:38:17:af:a2:9f:b0:9d:54:da:7d:
                    6f:b4:ef:f4:82:74:bb:dd:97:a2:92:74:d3:4f:b3:
                    0e:ac:22:3b:a1:43:04:96:3d:74:d5:7e:c6:9a:05:
                    6a:36:9c:5a:e3:a0:66:32:23:94:53:4b:21:04:5a:
                    33:52:ae:a8:9c:39:80:23:4e:55:11:72:93:97:d9:
                    aa:60:13:ee:c2:0b:20:db:25:ef:cb:83:8b:c2:8b:
                    e1:f3:4c:fb:18:17:39:6f:10:10:bf:f4:fb:dd:d5:
                    2f:df:ae:1a:d7:71:2f:f3:8b:ea:c4:d3:0b:7b:43:
                    e2:83:64:99:72:4d:e4:72:bb:1b:48:a9:0a:b0:9d:
                    b3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:05:3E:C1:C2:EB:E2:49:78:3D:4A:39:DE:04:0E:37:86:2B:AB:D6
            X509v3 Authority Key Identifier:
                keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0d:52:1a:a9:0b:6c:ff:b5:da:11:4b:15:82:cb:6f:40:fd:
         c2:e5:50:51:73:9b:a5:cd:19:3b:e3:41:4a:b5:8c:50:49:e2:
         bd:1f:2e:7a:d4:b5:a2:05:3c:24:c7:ae:d2:48:9d:0b:42:6f:
         89:d3:6e:c5:1d:56:c7:9e:5d:6a:50:d7:17:de:1e:02:70:04:
         3b:8c:95:35:d0:0f:ff:8f:80:0f:39:3b:d2:14:be:bb:fe:bd:
         e6:bb:bf:4f:8b:5e:a4:7d:73:6f:d0:d0:69:f7:60:fa:ea:08:
         70:87:c0:be:02:61:73:f0:00:fe:5c:55:28:c0:67:04:7f:3c:
         94:52:aa:38:0e:f1:6a:89:d8:7a:fe:76:2c:a0:18:17:fd:50:
         4d:50:c5:3d:98:38:30:ea:1b:fd:23:bf:6e:8b:e6:2d:36:e9:
         e2:db:7b:74:cb:06:61:13:0a:10:68:93:9f:0d:ab:70:12:83:
         fc:2b:e5:f1:32:1c:36:81:68:6c:1f:d8:82:6d:73:29:cc:a7:
         2d:a8:ce:d2:39:de:9a:63:58:1c:d9:d4:ae:20:7b:a6:41:9b:
         90:e4:b7:a8:8d:2a:26:59:20:97:75:fc:3a:d2:01:49:45:e4:
         43:21:b8:74:78:6e:48:02:b8:2f:d3:9e:5a:5a:26:fe:4c:1c:
         d5:43:09:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh70qEjIEl8dAl9A4HyMR0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzkwYWQxNTFkNDMyNmE2ZDYyZTEzMDQ2ZDc4OGY4NWJm
ODJlOTQwHhcNMjUwODA1MjAwMDU3WhcNMjUwODA2MjAwMDU3WjAzMTEwLwYDVQQD
EyhkNzA1M2VjMWMyZWJlMjQ5NzgzZDRhMzlkZTA0MGUzNzg2MmJhYmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIS1DIztqc3FtBc91jsFKzuYpXQV
muxRWD4fY1f+7yU8FZeXR2uKbJn2GFTdBOkyyya0FYVBDtuOLDlNl8hmd+XZhkYn
C282xwU4fYl+W2ggdSF+hcgawRzMlEBB80eIm+pLvLB89wrpDl+kJpdJyEr+IWt3
co1Cd1l2iDgXr6KfsJ1U2n1vtO/0gnS73ZeiknTTT7MOrCI7oUMElj101X7GmgVq
Npxa46BmMiOUU0shBFozUq6onDmAI05VEXKTl9mqYBPuwgsg2yXvy4OLwovh80z7
GBc5bxAQv/T73dUv364a13Ev84vqxNMLe0Pig2SZck3kcrsbSKkKsJ2z4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcFPsHC6+JJeD1KOd4EDjeGK6vWMB8GA1UdIwQY
MBaAFHPJCtFR1DJqbWLhMEbXiPhb+C6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTIt
YmE2MjZkMzI1ZDU5LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTItYmE2MjZkMzI1ZDU5
LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQ1SGqkL
bP+12hFLFYLLb0D9wuVQUXObpc0ZO+NBSrWMUEnivR8uetS1ogU8JMeu0kidC0Jv
idNuxR1Wx55dalDXF94eAnAEO4yVNdAP/4+ADzk70hS+u/695ru/T4tepH1zb9DQ
afdg+uoIcIfAvgJhc/AA/lxVKMBnBH88lFKqOA7xaonYev52LKAYF/1QTVDFPZg4
MOob/SO/bovmLTbp4tt7dMsGYRMKEGiTnw2rcBKD/Cvl8TIcNoFobB/Ygm1zKcyn
LajO0jnemmNYHNnUriB7pkGbkOS3qI0qJlkgl3X8OtIBSUXkQyG4dHhuSAK4L9Oe
Wlom/kwc1UMJWQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:46 2025 by rpki-client