Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
File:                     6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json)
Hash identifier:          l1s9bEcjgJRbHQzFlE151u383F8h4CjyXsq20pkZnl4=
Subject key identifier:   B4:41:B8:41:E0:F3:23:0F:2E:03:8C:4A:A1:87:11:1C:38:CE:FD:35
Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Certificate issuer:       /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Certificate serial:       0198D85054F0776A643E943D66DA19A01F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 19:03:19 +0000
Manifest this update:     Sat 23 Aug 2025 19:03:19 +0000
Manifest next update:     Sun 24 Aug 2025 19:03:19 +0000
Files and hashes:         1: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: Q1r/fq4yqrODeGbuNiIIreZ5B+jJRwYinJkjUr0fSpk=)
                          2: Goi94Dc_RUuC8EGWeEnJH7qqhjU.roa (hash: G+DgjuNd7tv+5EJaL+G6NuJWBrxhCutOC8EdL+rglNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:50:54:f0:77:6a:64:3e:94:3d:66:da:19:a0:1f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
        Validity
            Not Before: Aug 23 19:03:19 2025 GMT
            Not After : Aug 24 19:03:19 2025 GMT
        Subject: CN=b441b841e0f3230f2e038c4aa187111c38cefd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:bf:0d:c6:f1:95:75:da:fc:f0:b3:b6:43:
                    b3:14:2c:10:76:53:20:24:ad:65:79:e3:78:f4:56:
                    ba:9d:80:41:c6:65:ec:5e:e0:31:32:a4:3a:b5:64:
                    a8:89:39:4f:f4:54:c9:f1:cd:88:e5:1b:0a:f5:4e:
                    01:d1:07:73:78:07:b4:e3:1f:43:df:ad:67:d8:9e:
                    84:f5:95:38:25:13:07:ef:a6:c7:87:99:a7:8c:c8:
                    c6:c7:09:49:6b:55:bb:5b:54:96:dd:db:df:91:98:
                    84:da:12:3c:f9:2e:62:46:4a:71:6c:01:15:09:47:
                    81:1a:26:05:97:60:44:b8:a0:94:0a:0f:e1:ac:6f:
                    f9:78:fe:84:fb:d4:af:c3:de:cc:9f:17:6e:a6:b3:
                    b8:67:74:b2:35:c9:91:92:ab:07:72:49:19:e2:5c:
                    cf:e5:a0:94:41:83:b1:6c:11:e3:11:f4:06:3a:02:
                    29:e7:ab:99:f8:82:26:ad:d9:04:1d:6a:b7:d5:ee:
                    87:f4:ea:59:c8:c4:35:a9:87:07:1e:ea:f2:1b:6f:
                    2e:1d:b7:89:5e:de:33:5a:93:11:6d:de:d1:d9:6e:
                    6c:20:b7:8b:b3:05:c8:ee:0b:bb:95:94:32:67:40:
                    3a:84:82:a3:01:33:74:f3:bb:98:52:9d:b2:07:19:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:41:B8:41:E0:F3:23:0F:2E:03:8C:4A:A1:87:11:1C:38:CE:FD:35
            X509v3 Authority Key Identifier:
                keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:91:df:20:5e:b3:9a:08:b1:97:ae:df:ad:ac:4e:f1:b6:7e:
         b8:1c:ae:ab:2c:cc:ce:a1:04:7d:2b:ce:d6:37:e2:03:bf:3a:
         87:38:13:6d:0d:34:8b:cb:a0:d6:ca:e8:4f:5c:41:2d:8a:f5:
         52:04:a4:a4:aa:71:bc:f7:32:88:0f:ba:9e:23:86:e9:d8:08:
         dd:d7:2a:37:66:d2:b8:15:ec:57:8d:86:ff:f0:99:19:ad:ef:
         e0:48:b6:4b:68:a4:f5:1e:b4:f9:f9:7b:67:19:0f:81:e9:92:
         df:cb:dc:11:54:71:d9:47:5a:c4:35:ae:2c:7d:6c:f1:f6:a5:
         0c:37:92:68:3e:e5:0e:87:54:a5:70:b0:c9:d6:19:91:1f:61:
         00:33:fe:c5:44:2a:b0:60:86:39:49:b6:9e:1d:eb:7e:d9:e8:
         58:d6:9a:c8:65:44:c5:66:de:67:4b:b4:db:7d:ba:59:ca:d5:
         c9:ef:00:e6:28:03:01:8a:2f:1a:ac:95:fa:94:f9:f5:02:b9:
         b8:55:08:36:41:89:0a:da:05:ff:35:04:7a:ea:97:aa:44:83:
         aa:f1:e7:94:1f:5f:37:3f:e3:0b:af:17:b7:61:d7:17:b3:2a:
         cc:df:c9:9b:44:6e:56:0e:1a:b1:db:9e:9f:e9:d8:e4:d8:2f:
         02:91:8c:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUFTwd2pkPpQ9ZtoZoB9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzhjZDdlY2YyM2FjMWM0OTYyNTQ2ZTFiY2Y1ZTA4M2Fk
MjI5YTUwHhcNMjUwODIzMTkwMzE5WhcNMjUwODI0MTkwMzE5WjAzMTEwLwYDVQQD
EyhiNDQxYjg0MWUwZjMyMzBmMmUwMzhjNGFhMTg3MTExYzM4Y2VmZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0K/DcbxlXXa/PCztkOzFCwQdlMg
JK1leeN49Fa6nYBBxmXsXuAxMqQ6tWSoiTlP9FTJ8c2I5RsK9U4B0QdzeAe04x9D
361n2J6E9ZU4JRMH76bHh5mnjMjGxwlJa1W7W1SW3dvfkZiE2hI8+S5iRkpxbAEV
CUeBGiYFl2BEuKCUCg/hrG/5eP6E+9Svw97MnxduprO4Z3SyNcmRkqsHckkZ4lzP
5aCUQYOxbBHjEfQGOgIp56uZ+IImrdkEHWq31e6H9OpZyMQ1qYcHHuryG28uHbeJ
Xt4zWpMRbd7R2W5sILeLswXI7gu7lZQyZ0A6hIKjATN087uYUp2yBxlCpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRBuEHg8yMPLgOMSqGHERw4zv01MB8GA1UdIwQY
MBaAFOk4zX7PI6wcSWJUbhvPXgg60imlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83NjFiZjUtMDM3ZS00ODA3LTg4YzAt
ZmVlZTg2YzZiNjAwLzEvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83NjFiZjUtMDM3ZS00ODA3LTg4YzAtZmVlZTg2YzZiNjAw
LzEvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZHfIF6z
mgixl67fraxO8bZ+uByuqyzMzqEEfSvO1jfiA786hzgTbQ00i8ug1sroT1xBLYr1
UgSkpKpxvPcyiA+6niOG6dgI3dcqN2bSuBXsV42G//CZGa3v4Ei2S2ik9R60+fl7
ZxkPgemS38vcEVRx2UdaxDWuLH1s8falDDeSaD7lDodUpXCwydYZkR9hADP+xUQq
sGCGOUm2nh3rftnoWNaayGVExWbeZ0u02326WcrVye8A5igDAYovGqyV+pT59QK5
uFUINkGJCtoF/zUEeuqXqkSDqvHnlB9fNz/jC68Xt2HXF7MqzN/Jm0RuVg4asdue
n+nY5NgvApGM0w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:38:01 2025 by rpki-client