Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File:                     CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier:          WV0HdrDQYhkdL+a8FcnNGe98gsTyk3S/pQ4OMKGeRiE=
Subject key identifier:   7A:E2:15:04:23:40:CD:A1:05:8D:9A:79:78:85:D7:C8:3E:46:A9:BA
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer:       /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial:       0198D583C2218CD3B95F34326F1D9BD7E2B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 06:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:38 +0000
Files and hashes:         1: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (hash: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=)
                          2: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: KlgTFtLkD1UlYA/ehY3H9LfWtm11gQg0UUibunsV4kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:c2:21:8c:d3:b9:5f:34:32:6f:1d:9b:d7:e2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
        Validity
            Not Before: Aug 23 06:00:38 2025 GMT
            Not After : Aug 24 06:00:38 2025 GMT
        Subject: CN=7ae215042340cda1058d9a797885d7c83e46a9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:28:8a:2f:78:14:36:65:a1:1f:d5:61:1a:
                    8f:b3:99:27:aa:03:f4:6d:b4:f8:05:12:3f:76:51:
                    a3:da:5b:ef:3c:40:90:17:aa:f3:a3:13:ae:40:73:
                    0d:f1:76:ab:6e:d1:e9:93:34:79:a1:0c:0e:ec:c9:
                    8e:7a:91:eb:40:e8:62:12:eb:a4:3c:8a:83:f3:7f:
                    20:98:67:1e:3e:c2:c0:d7:cc:d9:ce:4a:1f:f7:bc:
                    ab:d2:7c:f1:26:07:c3:9c:21:dd:cb:50:d8:aa:a9:
                    b4:f1:18:9a:c2:88:43:7d:d8:eb:c8:68:66:6c:97:
                    a4:55:f2:cb:e3:b3:8c:a5:54:75:33:f6:17:1b:d5:
                    64:f9:8b:38:54:c9:1c:50:29:00:06:26:1d:7c:b6:
                    78:8d:88:88:2f:dc:97:00:e8:aa:2f:f2:2e:b8:d9:
                    d9:17:ec:ea:1b:fb:63:77:d3:6d:28:5e:93:42:4d:
                    10:3c:a4:e5:a3:3f:21:ab:ac:40:c5:cf:67:e5:d5:
                    0b:25:73:55:fb:6c:f8:f7:d8:b7:8f:27:22:80:13:
                    9f:30:06:18:f8:df:90:b7:c9:b5:80:af:64:aa:cf:
                    ab:da:2b:a6:07:27:c9:a8:99:94:81:1e:b4:a4:0f:
                    ce:35:ee:61:16:01:e0:e7:49:83:55:a2:6c:65:48:
                    63:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:15:04:23:40:CD:A1:05:8D:9A:79:78:85:D7:C8:3E:46:A9:BA
            X509v3 Authority Key Identifier:
                keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:31:21:06:d7:e5:61:e3:87:1d:fe:e8:3c:b4:c9:71:09:0a:
         06:84:8a:82:d2:a4:1b:21:85:ea:f6:d1:15:80:d8:6e:c7:7e:
         cb:eb:e9:64:35:50:9f:11:b2:5b:f2:cb:73:08:56:91:6e:17:
         19:6f:02:6a:ec:05:bf:89:a5:53:4c:10:f8:de:4d:a5:03:3b:
         b0:c0:58:43:10:2f:95:ac:22:b5:40:04:d8:f1:70:a6:5c:c4:
         af:bb:15:16:b1:29:8b:b9:2e:ac:2d:f6:e1:21:ef:09:1e:4a:
         a8:05:51:0c:50:2e:16:01:3c:ad:0f:5e:6d:2d:b1:a3:cd:6f:
         a7:8a:43:15:b3:a4:b3:b1:ee:be:17:8f:5e:b0:e6:e7:fc:41:
         44:a0:9d:37:38:c0:9b:d7:b6:c3:11:69:c9:5c:c7:57:01:b5:
         dc:e2:39:26:6e:f8:19:65:1d:55:32:55:4b:da:c0:cf:01:e4:
         68:1c:d5:9a:a6:f4:48:92:7e:a4:ff:27:88:4f:97:4a:9c:33:
         85:20:3d:4b:92:b5:6e:c2:be:6b:47:b3:07:9b:e5:84:93:54:
         97:b0:a1:d5:e2:5d:7b:e8:32:dc:36:21:0a:37:ac:e0:00:f0:
         38:cb:09:fa:22:bf:fa:72:03:2c:cf:27:0b:13:82:2b:bb:f0:
         4a:00:bf:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg8IhjNO5XzQybx2b1+K3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTkwZWVmOWUxZDFhZjhiNzJlNTE4ZWM2Y2NmNTljZDdm
NzUxZjUwHhcNMjUwODIzMDYwMDM4WhcNMjUwODI0MDYwMDM4WjAzMTEwLwYDVQQD
Eyg3YWUyMTUwNDIzNDBjZGExMDU4ZDlhNzk3ODg1ZDdjODNlNDZhOWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Moii94FDZloR/VYRqPs5knqgP0
bbT4BRI/dlGj2lvvPECQF6rzoxOuQHMN8XarbtHpkzR5oQwO7MmOepHrQOhiEuuk
PIqD838gmGcePsLA18zZzkof97yr0nzxJgfDnCHdy1DYqqm08RiawohDfdjryGhm
bJekVfLL47OMpVR1M/YXG9Vk+Ys4VMkcUCkABiYdfLZ4jYiIL9yXAOiqL/IuuNnZ
F+zqG/tjd9NtKF6TQk0QPKTloz8hq6xAxc9n5dULJXNV+2z499i3jycigBOfMAYY
+N+Qt8m1gK9kqs+r2iumByfJqJmUgR60pA/ONe5hFgHg50mDVaJsZUhjvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHriFQQjQM2hBY2aeXiF18g+Rqm6MB8GA1UdIwQY
MBaAFAlZDu+eHRr4ty5RjsbM9ZzX91H1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYt
ZTRkOGNmNzMzZWM5LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYtZTRkOGNmNzMzZWM5
LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzEhBtfl
YeOHHf7oPLTJcQkKBoSKgtKkGyGF6vbRFYDYbsd+y+vpZDVQnxGyW/LLcwhWkW4X
GW8CauwFv4mlU0wQ+N5NpQM7sMBYQxAvlawitUAE2PFwplzEr7sVFrEpi7kurC32
4SHvCR5KqAVRDFAuFgE8rQ9ebS2xo81vp4pDFbOks7HuvhePXrDm5/xBRKCdNzjA
m9e2wxFpyVzHVwG13OI5Jm74GWUdVTJVS9rAzwHkaBzVmqb0SJJ+pP8niE+XSpwz
hSA9S5K1bsK+a0ezB5vlhJNUl7Ch1eJde+gy3DYhCjes4ADwOMsJ+iK/+nIDLM8n
CxOCK7vwSgC/hg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:01 2025 by rpki-client