Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File:                     IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier:          GazrY2Iwq6MElqiq4NWOl0Fw+hUOih07G4h8hq8mOeQ=
Subject key identifier:   71:63:84:59:97:08:DD:36:15:FC:F9:81:29:D9:A8:76:27:9F:18:00
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer:       /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial:       01988B7CB7A65D6AF2E67C84DA986C3FF92A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number:          8E
Signing time:             Fri 08 Aug 2025 21:01:03 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:03 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:03 +0000
Files and hashes:         1: 51b82qPT1Z5GQYnyjcP5RMCu0uQ.roa (hash: kL30wYXOZY9LJWeAQp8i76XhBLFPrIojNg32/XqLy4o=)
                          2: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: Sp2/L7sVhEoAYh7XHaS1HaZsQdz3JGJbhq5rIQuzYQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:b7:a6:5d:6a:f2:e6:7c:84:da:98:6c:3f:f9:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=225326a0b249d2109f5292961392495071d89c92
        Validity
            Not Before: Aug  8 21:01:03 2025 GMT
            Not After : Aug  9 21:01:03 2025 GMT
        Subject: CN=716384599708dd3615fcf98129d9a876279f1800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:10:b0:0f:72:33:36:50:23:8f:4b:d3:02:ca:
                    16:1a:90:ef:d0:84:9f:94:de:2c:d5:2a:0c:28:16:
                    9b:a3:78:f5:be:cf:d7:8d:9c:a4:00:67:6b:18:00:
                    02:61:3d:da:34:0b:a2:5b:8b:ee:95:c7:13:51:e7:
                    e7:6e:2f:c5:11:94:e5:8c:30:75:6c:48:00:be:e4:
                    24:cc:59:e8:c5:c6:1a:6d:a0:80:5f:20:77:28:5f:
                    74:11:11:9a:1f:7d:ba:a6:19:8a:17:32:79:0c:2d:
                    d3:c1:92:d9:82:dc:f3:33:18:c3:16:ca:f6:f3:a5:
                    d2:57:d1:32:cb:23:c3:44:8f:7c:5b:db:f3:fb:62:
                    34:5e:97:72:bb:eb:36:a2:6b:aa:89:f9:ab:a3:e6:
                    ac:7c:63:30:d1:c1:6b:0f:cf:c3:74:5c:06:c9:7b:
                    b9:6e:d6:8e:a4:37:d3:94:97:05:2d:f4:c2:67:61:
                    b0:77:e3:f1:78:b4:9b:f4:66:c6:79:da:fb:8a:b7:
                    cc:a6:2d:fd:67:a8:fa:6a:73:a6:06:f2:d6:f2:9f:
                    2a:cd:92:4b:52:ec:b0:fe:c5:77:0e:bc:10:3a:7a:
                    27:8a:26:9a:e7:c2:ca:cd:d3:64:51:33:4e:be:4e:
                    a0:78:5c:69:d8:59:a6:80:4c:df:09:72:9f:ba:93:
                    67:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:63:84:59:97:08:DD:36:15:FC:F9:81:29:D9:A8:76:27:9F:18:00
            X509v3 Authority Key Identifier:
                keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:56:42:67:9b:1a:e9:72:bf:d3:31:1b:3e:0f:85:1a:66:41:
         63:cb:cb:38:49:f2:73:15:e6:aa:7d:c9:7a:c3:23:ec:22:27:
         85:76:98:78:ff:c0:25:3c:ac:be:f4:7a:a9:5d:7a:d3:45:28:
         09:cf:ab:9d:95:ce:54:a2:62:66:ba:07:0c:85:60:90:02:dd:
         6c:8c:e5:44:c1:e2:b8:d4:48:92:5e:6e:95:10:26:fc:18:42:
         cd:c0:d0:0d:6c:fb:67:03:b0:7b:a9:6a:5d:20:d2:a5:ea:72:
         2d:4c:43:64:8d:db:79:e6:60:bf:92:26:19:63:d6:a8:88:5b:
         2a:06:0a:43:3b:1f:83:b6:f2:dd:d4:bc:49:2e:60:0d:33:8b:
         23:66:04:08:7b:e9:3a:96:57:2d:3a:74:e4:d6:a7:c4:67:36:
         49:b0:cd:ce:33:dd:27:20:40:96:55:80:a8:2e:dc:07:0f:d4:
         a4:1b:75:64:cc:a2:2e:20:5c:97:a1:3e:a4:88:1b:45:2d:ea:
         7f:38:21:d5:f5:bf:69:be:71:73:c7:4c:5e:8d:0d:59:a4:d7:
         9f:1f:ba:0c:47:a2:3f:27:b7:68:66:91:1c:81:52:ac:8d:cc:
         66:8c:a9:66:9c:b4:be:f8:d5:90:f6:d9:41:b5:e1:7a:e4:c4:
         06:da:2e:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfLemXWry5nyE2phsP/kqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNTMyNmEwYjI0OWQyMTA5ZjUyOTI5NjEzOTI0OTUwNzFk
ODljOTIwHhcNMjUwODA4MjEwMTAzWhcNMjUwODA5MjEwMTAzWjAzMTEwLwYDVQQD
Eyg3MTYzODQ1OTk3MDhkZDM2MTVmY2Y5ODEyOWQ5YTg3NjI3OWYxODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBCwD3IzNlAjj0vTAsoWGpDv0ISf
lN4s1SoMKBabo3j1vs/XjZykAGdrGAACYT3aNAuiW4vulccTUefnbi/FEZTljDB1
bEgAvuQkzFnoxcYabaCAXyB3KF90ERGaH326phmKFzJ5DC3TwZLZgtzzMxjDFsr2
86XSV9EyyyPDRI98W9vz+2I0Xpdyu+s2omuqifmro+asfGMw0cFrD8/DdFwGyXu5
btaOpDfTlJcFLfTCZ2Gwd+PxeLSb9GbGedr7irfMpi39Z6j6anOmBvLW8p8qzZJL
Uuyw/sV3DrwQOnoniiaa58LKzdNkUTNOvk6geFxp2FmmgEzfCXKfupNnqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFjhFmXCN02Ffz5gSnZqHYnnxgAMB8GA1UdIwQY
MBaAFCJTJqCySdIQn1KSlhOSSVBx2JySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWxNbW9MSkowaENmVXBLV0U1SkpVSEhZbkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yOGMyYzAtZTk4My00NmFlLThiODUt
OWZjOTMzZWY2MTI3LzEvSWxNbW9MSkowaENmVXBLV0U1SkpVSEhZbkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yOGMyYzAtZTk4My00NmFlLThiODUtOWZjOTMzZWY2MTI3
LzEvSWxNbW9MSkowaENmVXBLV0U1SkpVSEhZbkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVZCZ5sa
6XK/0zEbPg+FGmZBY8vLOEnycxXmqn3JesMj7CInhXaYeP/AJTysvvR6qV1600Uo
Cc+rnZXOVKJiZroHDIVgkALdbIzlRMHiuNRIkl5ulRAm/BhCzcDQDWz7ZwOwe6lq
XSDSpepyLUxDZI3beeZgv5ImGWPWqIhbKgYKQzsfg7by3dS8SS5gDTOLI2YECHvp
OpZXLTp05NanxGc2SbDNzjPdJyBAllWAqC7cBw/UpBt1ZMyiLiBcl6E+pIgbRS3q
fzgh1fW/ab5xc8dMXo0NWaTXnx+6DEeiPye3aGaRHIFSrI3MZoypZpy0vvjVkPbZ
QbXheuTEBtoufg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:25 2025 by rpki-client