Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File:                     Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier:          zmYjiquCq9ROZLILM4yO+P8fUQJr6WEWnu/Csg2Nqog=
Subject key identifier:   99:69:0E:2F:92:17:C3:16:A1:B7:39:F8:C9:86:06:05:D2:C8:C1:21
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer:       /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial:       0198D515D69ACE0EE42AB2F5F3DF8A8F762C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 04:00:34 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:34 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:34 +0000
Files and hashes:         1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: A/i7f6qw7ZHJxvFrMX4i7BjbOy3WRlEV+rlDNRbbIZk=)
                          2: S_yQLv48huAuIFJl3M3q9MKN7ww.roa (hash: BfPTYmIN4iY+2dpqgW32GYnFtvPimuKxK2FzlajUXYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:d6:9a:ce:0e:e4:2a:b2:f5:f3:df:8a:8f:76:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
        Validity
            Not Before: Aug 23 04:00:34 2025 GMT
            Not After : Aug 24 04:00:34 2025 GMT
        Subject: CN=99690e2f9217c316a1b739f8c9860605d2c8c121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:38:51:a6:d8:35:b2:3f:0f:be:a1:84:49:
                    0f:43:6d:60:ec:b4:cf:9c:44:27:0c:2b:ee:9a:cc:
                    0e:93:7b:6f:4c:c1:54:32:99:7c:9a:3f:72:39:f9:
                    2f:2d:26:dc:66:84:16:bc:cc:ef:19:72:1b:ba:2d:
                    da:3f:41:b2:49:f8:56:ef:f3:87:2a:d2:9b:81:eb:
                    18:21:ea:f0:e2:d7:a1:a4:10:6f:2e:60:12:1b:5f:
                    9a:cf:11:9e:07:5a:04:92:9d:14:45:69:7c:31:a3:
                    4e:1d:c9:d7:e8:c0:02:15:7c:3a:88:cb:52:f4:df:
                    b2:e8:7c:ba:4b:25:e5:6b:86:60:b2:30:87:5b:e3:
                    06:d9:29:d7:c0:5e:d1:88:17:93:7a:e4:9e:98:21:
                    7e:8c:a9:d2:a7:6d:71:5b:a5:b6:24:af:67:e1:b1:
                    48:b5:91:58:d6:42:20:83:7b:aa:a6:41:e5:d4:06:
                    50:73:a3:26:30:61:3d:dc:cc:c2:de:d6:4c:83:fd:
                    a4:6a:09:63:aa:6a:e0:1f:f4:67:b3:30:1a:bf:fb:
                    a3:b9:f7:ff:66:96:ff:0d:ed:bc:a3:f5:14:05:3f:
                    d0:3f:cd:49:e1:5a:cc:d1:91:4d:93:c6:46:87:08:
                    48:7b:1e:a3:f0:63:db:6e:35:6c:60:e0:1f:a1:bf:
                    f6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:69:0E:2F:92:17:C3:16:A1:B7:39:F8:C9:86:06:05:D2:C8:C1:21
            X509v3 Authority Key Identifier:
                keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e2:78:1f:5e:0d:6e:af:83:94:17:e0:34:54:90:2f:46:1a:
         62:4c:c8:20:3b:25:7b:9c:28:8d:ca:03:da:67:1a:6f:a3:b4:
         64:ca:e0:8c:85:6a:31:f6:e8:46:63:79:d7:a7:fc:f1:03:6b:
         8f:78:64:73:7c:fe:b0:e4:5e:c0:03:aa:f7:06:26:37:c1:84:
         ed:aa:d9:cf:15:f8:95:0b:aa:61:5d:d1:53:3e:59:5d:57:03:
         7c:9b:28:c4:f7:a0:f9:27:57:e7:b2:90:00:1f:91:5c:d8:70:
         c8:c7:98:88:bb:55:b6:02:c7:37:00:cc:3b:88:9c:da:20:b1:
         d5:b7:82:ba:e5:8a:c3:2e:ee:74:df:11:46:fe:fc:cd:18:dc:
         19:71:6f:6e:66:30:b8:50:43:a0:d1:5b:c1:ff:35:bd:8b:4b:
         e0:3a:f8:e0:71:8a:d1:3d:76:6f:65:af:03:2c:d7:7c:62:c5:
         63:56:6b:4a:c5:1b:ad:65:8b:67:98:03:85:e5:9a:18:8e:0f:
         b0:46:3f:36:99:9f:7b:8f:f4:e8:f2:8a:82:cb:92:47:e8:c7:
         7e:42:ce:ba:0e:aa:ec:45:f4:b5:7d:11:a3:5a:4c:ed:88:81:
         98:26:53:ff:e7:9f:a3:ff:20:b3:cf:36:6d:5e:ed:f7:3c:14:
         e0:31:31:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFdaazg7kKrL189+Kj3YsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhM2U5NzBlZDYyNzcxMzQzYTA5NmZmYjJlZmMyNmFiYjdl
ZDY4YWYwHhcNMjUwODIzMDQwMDM0WhcNMjUwODI0MDQwMDM0WjAzMTEwLwYDVQQD
Eyg5OTY5MGUyZjkyMTdjMzE2YTFiNzM5ZjhjOTg2MDYwNWQyYzhjMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydk4UabYNbI/D76hhEkPQ21g7LTP
nEQnDCvumswOk3tvTMFUMpl8mj9yOfkvLSbcZoQWvMzvGXIbui3aP0GySfhW7/OH
KtKbgesYIerw4tehpBBvLmASG1+azxGeB1oEkp0URWl8MaNOHcnX6MACFXw6iMtS
9N+y6Hy6SyXla4ZgsjCHW+MG2SnXwF7RiBeTeuSemCF+jKnSp21xW6W2JK9n4bFI
tZFY1kIgg3uqpkHl1AZQc6MmMGE93MzC3tZMg/2kagljqmrgH/RnszAav/ujuff/
Zpb/De28o/UUBT/QP81J4VrM0ZFNk8ZGhwhIex6j8GPbbjVsYOAfob/2yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlpDi+SF8MWobc5+MmGBgXSyMEhMB8GA1UdIwQY
MBaAFBo+lw7WJ3E0Oglv+y78Jqu37WivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUt
ZDQ4OTA5NGM2NjA0LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUtZDQ4OTA5NGM2NjA0
LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtuJ4H14N
bq+DlBfgNFSQL0YaYkzIIDsle5wojcoD2mcab6O0ZMrgjIVqMfboRmN516f88QNr
j3hkc3z+sORewAOq9wYmN8GE7arZzxX4lQuqYV3RUz5ZXVcDfJsoxPeg+SdX57KQ
AB+RXNhwyMeYiLtVtgLHNwDMO4ic2iCx1beCuuWKwy7udN8RRv78zRjcGXFvbmYw
uFBDoNFbwf81vYtL4Dr44HGK0T12b2WvAyzXfGLFY1ZrSsUbrWWLZ5gDheWaGI4P
sEY/Npmfe4/06PKKgsuSR+jHfkLOug6q7EX0tX0Ro1pM7YiBmCZT/+efo/8gs882
bV7t9zwU4DExWA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:01 2025 by rpki-client