Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
File:                     1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json)
Hash identifier:          svjysVzEnWSStxGh9OHO9o3lXZm/n0KgxsrUCeiJMJM=
Subject key identifier:   AE:29:49:E6:19:66:10:36:CE:10:54:21:1A:C4:39:A5:24:58:E0:D5
Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
Certificate issuer:       /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Certificate serial:       0198D73B3C4C02A1CEAC9B9EDF36B05B99F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 14:00:40 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:40 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:40 +0000
Files and hashes:         1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: tBJ07yaQHyNqeoGqb5JyNT/NGHSM8Fyj7S4hd69HTAk=)
                          2: LNGDPhvWhaUufvaPWy4zm2txK38.roa (hash: E9Pi4pJgm1TVZXCieOIM/HMpQ/NRLxBbn/SRBFS6LQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:3c:4c:02:a1:ce:ac:9b:9e:df:36:b0:5b:99:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
        Validity
            Not Before: Aug 23 14:00:40 2025 GMT
            Not After : Aug 24 14:00:40 2025 GMT
        Subject: CN=ae2949e619661036ce1054211ac439a52458e0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:b0:3b:74:22:a4:21:f1:f2:a9:94:82:d5:
                    d8:38:c0:f6:9b:b3:ae:47:5c:01:73:45:28:6b:2e:
                    75:57:7e:88:25:34:d7:57:48:45:99:06:96:cd:e3:
                    32:bb:91:cb:5c:6c:c5:f7:cd:19:40:c9:cc:cb:ed:
                    b6:01:9d:e4:1d:ae:67:15:01:81:61:c7:43:f4:f3:
                    7c:de:de:16:0e:87:cf:a0:8a:58:39:bd:df:df:bb:
                    7f:5b:c3:34:67:39:0f:6f:ee:b1:f2:1d:0b:ae:79:
                    cd:dd:3c:59:05:07:82:d2:93:df:02:dc:b5:ad:3e:
                    22:49:12:ce:e0:7b:01:d6:df:98:59:59:10:f8:48:
                    b4:c4:9d:0b:70:77:6b:d9:85:a2:e0:09:80:74:7c:
                    e4:92:a6:1d:d1:22:c1:42:bb:14:49:5e:7b:39:9d:
                    48:b4:78:7f:1b:0b:a2:7b:78:5b:4f:4e:ed:21:af:
                    c6:e6:2f:4a:b5:09:a8:47:95:08:d7:66:63:79:89:
                    f7:cc:96:ed:ad:54:11:5c:e4:bf:c5:79:e1:7f:ed:
                    96:52:cc:91:19:d5:13:cf:7a:8d:d9:a3:f3:74:0a:
                    1d:06:05:c6:46:2a:98:8c:43:ed:22:c8:4c:17:ec:
                    d9:8b:0f:66:a1:a5:db:22:77:59:96:e5:29:41:f2:
                    bc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:29:49:E6:19:66:10:36:CE:10:54:21:1A:C4:39:A5:24:58:E0:D5
            X509v3 Authority Key Identifier:
                keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:53:9a:da:7d:a9:24:fe:1f:c6:19:23:da:2b:af:58:33:52:
         a1:24:fc:12:7b:45:bc:83:d9:61:f3:d2:0b:a5:3c:73:c0:88:
         44:4c:98:92:c4:5d:ca:72:15:4c:2f:55:76:b1:4f:59:e7:03:
         b6:b5:ff:62:60:09:ff:28:ca:5b:0c:39:1e:9c:d4:77:ab:93:
         f5:a4:56:18:da:7a:71:fc:55:ff:e3:f6:f2:d0:2d:91:15:af:
         d2:0d:a9:ee:e9:c8:64:3a:e9:88:1c:18:f4:f2:39:41:59:56:
         19:16:90:d7:a8:05:8a:80:b5:2b:38:ef:df:94:6c:ed:56:88:
         04:49:65:58:16:89:56:10:ac:18:4b:18:f2:b3:5c:c0:85:f8:
         a3:c9:82:dd:8d:a9:5a:e7:de:52:00:ed:6e:53:e3:17:f0:e5:
         d9:75:c3:2d:f8:dc:68:7f:0e:c6:60:1b:17:b5:76:61:1c:0c:
         68:66:dd:26:e3:9a:44:92:77:93:f7:21:f2:f4:0e:14:35:c4:
         7d:62:db:08:c9:a7:12:a8:64:ba:02:c9:2a:9c:a6:1c:8a:f6:
         ed:6b:c6:47:7e:d3:16:d6:96:da:7f:07:53:06:1a:54:14:66:
         9e:54:8c:70:eb:66:3a:0f:3d:ea:38:d3:67:7a:17:9e:09:ae:
         51:08:87:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOzxMAqHOrJue3zawW5n4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MmVhOTJlY2M5YjBkMzU0YjVmZDcwMmUwOTkxZjE1MGEz
MDlmZTQwHhcNMjUwODIzMTQwMDQwWhcNMjUwODI0MTQwMDQwWjAzMTEwLwYDVQQD
EyhhZTI5NDllNjE5NjYxMDM2Y2UxMDU0MjExYWM0MzlhNTI0NThlMGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJSwO3QipCHx8qmUgtXYOMD2m7Ou
R1wBc0Uoay51V36IJTTXV0hFmQaWzeMyu5HLXGzF980ZQMnMy+22AZ3kHa5nFQGB
YcdD9PN83t4WDofPoIpYOb3f37t/W8M0ZzkPb+6x8h0LrnnN3TxZBQeC0pPfAty1
rT4iSRLO4HsB1t+YWVkQ+Ei0xJ0LcHdr2YWi4AmAdHzkkqYd0SLBQrsUSV57OZ1I
tHh/Gwuie3hbT07tIa/G5i9KtQmoR5UI12ZjeYn3zJbtrVQRXOS/xXnhf+2WUsyR
GdUTz3qN2aPzdAodBgXGRiqYjEPtIshMF+zZiw9moaXbIndZluUpQfK8OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4pSeYZZhA2zhBUIRrEOaUkWODVMB8GA1UdIwQY
MBaAFNYuqS7Mmw01S1/XAuCZHxUKMJ/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83YjU4MTQtN2M3Ni00OTVjLWE2ZTct
NTQ1OTQ3OTVlZWEyLzEvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83YjU4MTQtN2M3Ni00OTVjLWE2ZTctNTQ1OTQ3OTVlZWEy
LzEvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1Oa2n2p
JP4fxhkj2iuvWDNSoST8EntFvIPZYfPSC6U8c8CIREyYksRdynIVTC9VdrFPWecD
trX/YmAJ/yjKWww5HpzUd6uT9aRWGNp6cfxV/+P28tAtkRWv0g2p7unIZDrpiBwY
9PI5QVlWGRaQ16gFioC1Kzjv35Rs7VaIBEllWBaJVhCsGEsY8rNcwIX4o8mC3Y2p
WufeUgDtblPjF/Dl2XXDLfjcaH8OxmAbF7V2YRwMaGbdJuOaRJJ3k/ch8vQOFDXE
fWLbCMmnEqhkugLJKpymHIr27WvGR37TFtaW2n8HUwYaVBRmnlSMcOtmOg896jjT
Z3oXngmuUQiHAw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:42 2025 by rpki-client