Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File:                     cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier:          SG4UgL5izEk0IwzLCX77D+5YAU6ZZw08RUhnu8dXRNk=
Subject key identifier:   3A:70:34:52:E5:C5:AB:B9:61:94:76:C3:94:93:24:62:B8:A6:16:49
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       0198733D39272A548ABB1A70FB811F66C87B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number:          09C0
Signing time:             Mon 04 Aug 2025 04:00:48 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:48 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:48 +0000
Files and hashes:         1: 9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (hash: 1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=)
                          2: H1EL1U-GIPFFr0f1Q-aFy7Wb8e4.roa (hash: iqzV8mEdZbkZ5VJezg/UaqQeyUszupnBM56S/6XnGcM=)
                          3: XdmrjuWzZy62aNAP27lIvhOU4pg.roa (hash: GLuRF8qY+3QymEUwnc/Z5m+7OQeVn6lmu8CHrOCaebE=)
                          4: ZgwCc5_6MulL4iL_zC1XUNHyAbI.roa (hash: /jcVyr8eQJZjytkrqctvHq37ILkIvanUDZTLnrClopA=)
                          5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: 7XPcs73wPFpmJfFmT8aGsXOZwFhgAxgZMBEbPj718+w=)
                          6: u95K4fV2qtYCciDZ9UwzIFzAw5A.roa (hash: ayZrkho31pPxiVCGyzfE95bEFSC8qkDwrF+lSVt63SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:39:27:2a:54:8a:bb:1a:70:fb:81:1f:66:c8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Aug  4 04:00:48 2025 GMT
            Not After : Aug  5 04:00:48 2025 GMT
        Subject: CN=3a703452e5c5abb9619476c394932462b8a61649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:0c:1b:34:e0:3a:52:9e:26:72:e8:ca:e7:
                    0f:e8:60:74:7b:07:fe:e0:ca:5d:32:c1:61:39:2a:
                    57:d7:6c:5e:8a:9c:17:d7:2a:24:a5:dc:3d:17:84:
                    1a:d1:2a:1e:7e:9e:8b:fd:93:2d:d1:e6:0c:40:42:
                    3c:3c:43:9e:d4:ba:da:16:35:e3:af:3e:06:1b:ca:
                    19:d1:86:3a:9f:ea:1f:f9:a1:28:e6:ac:f3:c9:31:
                    b7:ba:62:6e:c7:b5:c6:d4:6e:6a:28:a8:6c:f7:fd:
                    3a:34:b2:fa:39:e1:13:60:77:19:22:37:d4:b0:61:
                    1c:a1:4d:f5:74:aa:b9:33:86:12:fa:18:05:f2:42:
                    60:4e:83:c6:a4:77:99:b8:22:d8:cc:e8:42:20:88:
                    e4:a5:21:fb:e7:45:ce:2c:b2:35:78:91:17:5f:2e:
                    38:e1:82:9e:ae:ed:ec:91:7d:78:e1:17:37:f9:ea:
                    ef:e9:9f:63:0a:f2:01:2e:22:f2:86:6b:75:52:f6:
                    1b:c5:b4:bc:b7:6f:ee:32:7d:91:6c:f2:2c:05:04:
                    8c:45:69:ed:27:db:a9:26:5c:24:e7:de:cf:be:63:
                    bb:c5:b5:f8:0b:d7:c3:79:07:30:8c:d2:45:b4:01:
                    5c:f6:3f:92:c8:c7:1d:c4:f1:b1:d9:13:d8:e7:bd:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:70:34:52:E5:C5:AB:B9:61:94:76:C3:94:93:24:62:B8:A6:16:49
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:dc:e1:78:50:c7:97:c6:4a:ba:64:87:fd:8e:33:28:46:db:
         38:d6:68:cc:c2:69:56:bf:c9:ff:10:4e:33:b0:85:88:46:82:
         67:d0:81:04:f3:ca:e5:9c:d8:93:76:e1:e8:dd:e4:4b:e7:fc:
         44:57:f4:e7:06:b4:bf:e6:aa:92:11:e7:ed:6b:e0:e7:0e:c2:
         1a:09:f3:61:84:ce:15:1c:c0:d1:ca:ed:57:88:e3:16:17:d7:
         13:74:e0:24:c3:a0:bd:4e:91:52:5f:5e:b0:80:b1:bf:3f:77:
         14:d8:80:88:90:b3:da:63:f4:72:ea:59:ae:3f:2d:d7:d1:93:
         f3:bb:9d:76:21:f1:b6:e3:69:58:b0:3e:fc:8b:c6:dc:df:23:
         cc:b2:3c:d8:67:db:6e:d2:a5:a2:a8:72:e8:4e:2a:eb:38:43:
         36:f6:48:fa:d9:ee:31:39:1e:41:f8:6d:c4:2a:94:69:d0:30:
         23:fe:9e:3c:36:4b:05:84:ab:8d:88:44:89:6e:5d:29:19:72:
         a0:5e:82:ea:a4:0f:45:4a:2f:1e:c1:a7:8b:1e:7f:0f:fc:05:
         12:96:b0:48:f8:bc:30:50:3a:bf:bb:d9:2f:40:3a:9a:dc:a7:
         c8:68:26:04:ad:b0:53:aa:98:fb:cf:64:51:e4:8d:0a:0b:ce:
         80:12:8e:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPTknKlSKuxpw+4EfZsh7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmYyMjY5ZDE1NjMzYmRiYzcxZDhjZDNmNDU4Y2JkMDNm
ZTAzMWYwHhcNMjUwODA0MDQwMDQ4WhcNMjUwODA1MDQwMDQ4WjAzMTEwLwYDVQQD
EygzYTcwMzQ1MmU1YzVhYmI5NjE5NDc2YzM5NDkzMjQ2MmI4YTYxNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstMMGzTgOlKeJnLoyucP6GB0ewf+
4MpdMsFhOSpX12xeipwX1yokpdw9F4Qa0Soefp6L/ZMt0eYMQEI8PEOe1LraFjXj
rz4GG8oZ0YY6n+of+aEo5qzzyTG3umJux7XG1G5qKKhs9/06NLL6OeETYHcZIjfU
sGEcoU31dKq5M4YS+hgF8kJgToPGpHeZuCLYzOhCIIjkpSH750XOLLI1eJEXXy44
4YKeru3skX144Rc3+erv6Z9jCvIBLiLyhmt1UvYbxbS8t2/uMn2RbPIsBQSMRWnt
J9upJlwk597PvmO7xbX4C9fDeQcwjNJFtAFc9j+SyMcdxPGx2RPY570uPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpwNFLlxau5YZR2w5STJGK4phZJMB8GA1UdIwQY
MBaAFHEvImnRVjO9vHHYzT9FjL0D/gMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUt
ZDE4YmFiOTUxNWJmLzEvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUtZDE4YmFiOTUxNWJm
LzEvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtzheFDH
l8ZKumSH/Y4zKEbbONZozMJpVr/J/xBOM7CFiEaCZ9CBBPPK5ZzYk3bh6N3kS+f8
RFf05wa0v+aqkhHn7Wvg5w7CGgnzYYTOFRzA0crtV4jjFhfXE3TgJMOgvU6RUl9e
sICxvz93FNiAiJCz2mP0cupZrj8t19GT87uddiHxtuNpWLA+/IvG3N8jzLI82Gfb
btKloqhy6E4q6zhDNvZI+tnuMTkeQfhtxCqUadAwI/6ePDZLBYSrjYhEiW5dKRly
oF6C6qQPRUovHsGnix5/D/wFEpawSPi8MFA6v7vZL0A6mtynyGgmBK2wU6qY+89k
UeSNCgvOgBKOcw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:01 2025 by rpki-client