Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
File:                     SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json)
Hash identifier:          ng2YofsqK5+a6mZ1juQOO+bbpRyYW7F7bbZI//EDQ1c=
Subject key identifier:   11:3D:E0:AE:5F:D5:05:BC:FA:B5:50:BC:F9:BD:B2:7C:4B:20:11:3F
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Certificate issuer:       /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial:       0198D54DCB05DD732E645F8AD6359FEEDED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 05:01:41 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:41 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:41 +0000
Files and hashes:         1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: hrxe2hnpHPQ5DsynD8tFvP3T/L3W65t/ITKhHRxijs4=)
                          2: ZopMcF1edsiLC5IB_2wqcv1pm7I.roa (hash: 9APA6+f5SQgw2656vPCnPyRgFDtV/KHCNYnrSKLYasE=)
                          3: fB9-x9nzQMLGXiKWPiofGOiCCDo.roa (hash: /Yz5duUUoV4QyYXJiuuC625duaCe5B8wdcwUeuj9HvE=)
                          4: l38wLN6Gw_epossfbuxRMwnX5sY.roa (hash: EA/nu4qnZGykrdQkMaUMT/48WUqEkVXJbnvFzsWJo70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:cb:05:dd:73:2e:64:5f:8a:d6:35:9f:ee:de:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
        Validity
            Not Before: Aug 23 05:01:41 2025 GMT
            Not After : Aug 24 05:01:41 2025 GMT
        Subject: CN=113de0ae5fd505bcfab550bcf9bdb27c4b20113f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0a:83:7e:98:09:31:fc:b6:e3:1d:f6:dc:15:
                    3d:e5:c7:fb:57:95:40:3c:a3:3e:42:dc:20:ee:23:
                    d5:ba:fe:80:ab:90:d0:a9:62:b8:74:07:c2:6d:8a:
                    4d:39:f9:83:6c:f9:90:85:89:07:09:1b:b4:28:6d:
                    4c:26:af:87:75:30:6c:a4:75:52:65:9c:90:61:14:
                    9f:8a:16:0e:2a:b9:a9:e2:e4:4c:07:38:27:da:ad:
                    21:c2:d0:02:e7:bf:ae:46:6e:19:89:85:cb:00:32:
                    9e:0e:7d:1f:6a:a9:dd:f9:c4:14:05:f1:36:05:31:
                    42:7b:a5:38:e2:27:8f:3a:c4:fb:5e:89:1e:28:1b:
                    28:2f:35:4a:df:f4:e8:f0:3b:a6:64:b2:0e:5d:1d:
                    a0:6c:0d:bc:25:66:3f:64:fb:09:85:91:8e:30:da:
                    62:b3:f7:d5:60:c1:f5:21:75:a2:23:31:a9:45:e8:
                    35:47:3e:d1:1c:d8:e5:ff:be:94:5b:75:50:c5:80:
                    e1:4b:aa:0a:11:48:9d:56:25:58:b5:46:bf:b5:6b:
                    72:3b:4a:43:ba:81:44:e4:b9:b3:43:51:9e:f7:2f:
                    b1:49:b1:84:8d:d6:55:3b:4b:f2:22:c8:e0:76:8a:
                    59:e0:88:8d:5e:d8:8c:fd:9a:b0:f7:1b:e0:28:3c:
                    80:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3D:E0:AE:5F:D5:05:BC:FA:B5:50:BC:F9:BD:B2:7C:4B:20:11:3F
            X509v3 Authority Key Identifier:
                keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:88:ab:5e:8b:06:ab:47:e1:fa:1e:49:ad:08:8d:ee:19:c6:
         2e:d8:d6:57:29:2c:2e:04:21:cb:2c:f0:26:9a:5d:8e:37:99:
         fb:a4:f9:eb:13:03:d9:0b:53:78:34:49:1f:17:91:60:a7:55:
         bd:33:5f:64:79:8b:7d:1b:a6:a9:4f:2d:e9:4f:65:12:94:4b:
         94:b8:c8:fc:1b:03:a7:34:47:3a:c0:de:44:79:56:a5:ae:a8:
         28:58:50:75:b6:52:4e:ac:a8:32:9a:f3:a7:ba:50:b9:db:21:
         e9:40:1a:38:0f:90:af:81:39:eb:41:a6:78:20:ec:11:15:29:
         8f:00:8b:f5:45:05:88:f6:c6:f8:55:0a:50:3f:35:10:ca:43:
         b0:f2:34:47:e2:0e:7b:7b:ce:61:2f:57:ba:4f:44:be:b4:dd:
         e9:39:f7:5b:8a:67:de:86:a3:64:3a:df:d2:e9:f0:31:55:1e:
         71:0f:ea:0e:e8:ae:dc:3b:05:06:f2:8d:b3:4a:4b:d7:07:c6:
         de:94:3b:e3:32:6b:b7:02:69:80:f4:85:73:fd:26:17:1b:bb:
         77:09:5f:1b:5a:fc:8b:1c:8d:99:08:21:94:85:b9:74:bc:b8:
         a3:55:7f:e6:d8:4e:2c:c8:2e:d3:99:bd:79:28:47:c0:a1:46:
         b2:18:71:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcsF3XMuZF+K1jWf7t7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NWUzZWUxYzMyNTgxNzVmNGZmNmQ5YjU1OWRhNTRjODNl
YzBiNGYwHhcNMjUwODIzMDUwMTQxWhcNMjUwODI0MDUwMTQxWjAzMTEwLwYDVQQD
EygxMTNkZTBhZTVmZDUwNWJjZmFiNTUwYmNmOWJkYjI3YzRiMjAxMTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAqDfpgJMfy24x323BU95cf7V5VA
PKM+Qtwg7iPVuv6Aq5DQqWK4dAfCbYpNOfmDbPmQhYkHCRu0KG1MJq+HdTBspHVS
ZZyQYRSfihYOKrmp4uRMBzgn2q0hwtAC57+uRm4ZiYXLADKeDn0faqnd+cQUBfE2
BTFCe6U44iePOsT7XokeKBsoLzVK3/To8DumZLIOXR2gbA28JWY/ZPsJhZGOMNpi
s/fVYMH1IXWiIzGpReg1Rz7RHNjl/76UW3VQxYDhS6oKEUidViVYtUa/tWtyO0pD
uoFE5LmzQ1Ge9y+xSbGEjdZVO0vyIsjgdopZ4IiNXtiM/Zqw9xvgKDyAKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBE94K5f1QW8+rVQvPm9snxLIBE/MB8GA1UdIwQY
MBaAFEhePuHDJYF19P9tm1WdpUyD7AtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NmQwMjItZWUwMi00NDdjLWEzNDkt
OWM5MzNjY2QxNmM3LzEvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85NmQwMjItZWUwMi00NDdjLWEzNDktOWM5MzNjY2QxNmM3
LzEvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4irXosG
q0fh+h5JrQiN7hnGLtjWVyksLgQhyyzwJppdjjeZ+6T56xMD2QtTeDRJHxeRYKdV
vTNfZHmLfRumqU8t6U9lEpRLlLjI/BsDpzRHOsDeRHlWpa6oKFhQdbZSTqyoMprz
p7pQudsh6UAaOA+Qr4E560GmeCDsERUpjwCL9UUFiPbG+FUKUD81EMpDsPI0R+IO
e3vOYS9Xuk9EvrTd6Tn3W4pn3oajZDrf0unwMVUecQ/qDuiu3DsFBvKNs0pL1wfG
3pQ74zJrtwJpgPSFc/0mFxu7dwlfG1r8ixyNmQghlIW5dLy4o1V/5thOLMgu05m9
eShHwKFGshhxgQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:44 2025 by rpki-client