Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File:                     8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier:          a8O5m4A62GxXqEx2p1PorRes1tpwq8Lksw6JLUybUKc=
Subject key identifier:   84:AC:81:8C:C5:08:63:02:B5:B2:F7:FD:FA:DD:44:7E:70:67:7F:B0
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer:       /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial:       01987D1C88A2FADA8D3CBB08AC3F0349423C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 02:01:18 +0000
Manifest this update:     Wed 06 Aug 2025 02:01:18 +0000
Manifest next update:     Thu 07 Aug 2025 02:01:18 +0000
Files and hashes:         1: 7XoxbsiH0tvuamwOaZJkHsbncU8.roa (hash: eOLDYEBs+ePiFOo04IA8xxSpoLseLj4knNzwy/AuO7c=)
                          2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: BFXfXzDX6acYG9eaYg0uH0ZR62Wp0Oqvod49fbJJq8Q=)
                          3: jMGhTNUb7i42fBQA0pNbTbsvC0w.roa (hash: 3rIrbzRKv4rGgOKlFAltJmUMNb9Mmay1gOYKugMTp+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:88:a2:fa:da:8d:3c:bb:08:ac:3f:03:49:42:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
        Validity
            Not Before: Aug  6 02:01:18 2025 GMT
            Not After : Aug  7 02:01:18 2025 GMT
        Subject: CN=84ac818cc5086302b5b2f7fdfadd447e70677fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:40:11:57:48:c6:83:05:fc:06:ec:71:a0:
                    03:29:42:e0:25:79:5a:3d:6a:8a:7f:1f:b3:24:0b:
                    25:82:12:5a:fb:db:9d:f8:15:aa:0c:db:49:49:a1:
                    1c:75:4c:ef:26:6f:a0:4d:cc:7b:5b:ca:15:e5:b9:
                    c4:ac:3a:29:08:bb:4f:b7:b6:87:84:fb:e4:76:b6:
                    c7:21:f2:09:ad:9a:01:fe:8a:3a:a3:14:cd:52:2b:
                    61:3c:a6:f6:56:d4:bc:23:5c:fe:04:de:b5:9f:bf:
                    ac:f4:47:4b:fd:7e:12:50:24:e8:ef:29:83:c7:f8:
                    06:ff:52:68:d7:11:f2:6f:48:b2:ca:c3:8f:44:9d:
                    e0:08:b3:be:0a:e6:48:1a:95:dc:9d:86:2f:67:b1:
                    b2:9d:19:f2:ae:af:cb:4e:f9:ec:ee:0a:fe:88:e6:
                    af:06:cb:30:24:6d:45:1c:59:a3:8f:9b:2d:8d:a6:
                    eb:4a:8c:ba:bd:61:73:ed:17:9e:f7:7f:38:f6:88:
                    66:9d:99:86:67:c3:d1:16:28:10:4b:9d:e0:ec:92:
                    ee:df:3f:22:b8:7d:c0:d6:fe:27:11:1d:22:6a:6c:
                    82:b0:e0:ea:8e:54:3a:c5:6f:8b:37:1a:b3:2a:b2:
                    2c:e1:0d:3e:af:a3:15:21:ba:e1:57:d9:26:0a:78:
                    7b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AC:81:8C:C5:08:63:02:B5:B2:F7:FD:FA:DD:44:7E:70:67:7F:B0
            X509v3 Authority Key Identifier:
                keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e8:37:21:ef:09:a0:b3:6e:e4:da:30:6b:f8:dc:be:f9:4a:
         86:56:7f:0f:88:4c:e0:bb:c6:78:8a:15:83:14:36:36:1e:46:
         e3:58:5d:36:f4:62:55:8c:6f:5f:42:d5:b3:42:91:72:23:7e:
         6b:6d:05:86:98:1b:62:fa:16:e7:ba:d7:74:6c:4b:7c:79:50:
         48:85:36:3d:de:ac:3d:b6:7c:6d:7f:5b:e6:b3:30:61:1f:6f:
         22:8a:ca:b0:f7:8f:28:75:87:53:da:87:3d:d4:f3:2a:66:b7:
         9a:55:ca:9c:11:aa:6c:83:d5:86:e0:62:b5:30:12:8f:ce:d9:
         7d:05:e5:8f:92:c8:06:30:35:f5:d2:f7:0f:9e:a8:5c:e9:59:
         3b:e0:d6:e4:fc:87:30:2c:ae:e3:1f:99:4b:a5:f1:d3:c4:b6:
         bf:09:69:cd:24:11:7b:a0:fa:4e:56:83:fa:3c:c7:72:87:4b:
         86:1e:41:34:fe:6a:58:74:19:2d:5d:23:73:40:b5:3d:a2:d9:
         c3:d2:48:4e:d0:08:b8:35:53:d0:cb:21:6c:c8:3d:1a:bc:8a:
         52:42:30:5f:7b:34:60:66:0e:90:7e:db:72:ed:8f:d5:f2:cd:
         97:37:15:a4:93:73:b6:a7:f0:a1:c2:95:cd:6f:4e:cd:4d:53:
         fb:c1:54:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9HIii+tqNPLsIrD8DSUI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYjE1ZTc3YWY0ZWRkZTExMTkyYzZmZWNkNTBiMjFjZDM3
OWQ0MjEwHhcNMjUwODA2MDIwMTE4WhcNMjUwODA3MDIwMTE4WjAzMTEwLwYDVQQD
Eyg4NGFjODE4Y2M1MDg2MzAyYjViMmY3ZmRmYWRkNDQ3ZTcwNjc3ZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ilAEVdIxoMF/AbscaADKULgJXla
PWqKfx+zJAslghJa+9ud+BWqDNtJSaEcdUzvJm+gTcx7W8oV5bnErDopCLtPt7aH
hPvkdrbHIfIJrZoB/oo6oxTNUithPKb2VtS8I1z+BN61n7+s9EdL/X4SUCTo7ymD
x/gG/1Jo1xHyb0iyysOPRJ3gCLO+CuZIGpXcnYYvZ7GynRnyrq/LTvns7gr+iOav
BsswJG1FHFmjj5stjabrSoy6vWFz7Ree93849ohmnZmGZ8PRFigQS53g7JLu3z8i
uH3A1v4nER0iamyCsODqjlQ6xW+LNxqzKrIs4Q0+r6MVIbrhV9kmCnh78QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISsgYzFCGMCtbL3/frdRH5wZ3+wMB8GA1UdIwQY
MBaAFPGxXnevTt3hEZLG/s1QshzTedQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUt
MTM0MGNjNWIzZDU3LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUtMTM0MGNjNWIzZDU3
LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOug3Ie8J
oLNu5Nowa/jcvvlKhlZ/D4hM4LvGeIoVgxQ2Nh5G41hdNvRiVYxvX0LVs0KRciN+
a20FhpgbYvoW57rXdGxLfHlQSIU2Pd6sPbZ8bX9b5rMwYR9vIorKsPePKHWHU9qH
PdTzKma3mlXKnBGqbIPVhuBitTASj87ZfQXlj5LIBjA19dL3D56oXOlZO+DW5PyH
MCyu4x+ZS6Xx08S2vwlpzSQRe6D6TlaD+jzHcodLhh5BNP5qWHQZLV0jc0C1PaLZ
w9JITtAIuDVT0MshbMg9GryKUkIwX3s0YGYOkH7bcu2P1fLNlzcVpJNztqfwocKV
zW9OzU1T+8FUrw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:58 2025 by rpki-client