Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File:                     gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier:          MbvoIorXZqTFaRmHgISV+WEsielLrygeJU3Eaj1uZFk=
Subject key identifier:   7A:75:5C:7A:71:98:A6:F7:78:83:65:35:84:08:82:37:6E:0A:DD:29
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer:       /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial:       0198D583911B730BA637399015ABB1C8CBFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 06:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:26 +0000
Files and hashes:         1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=)
                          2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=)
                          3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: xLWUDKm8k8YhA115U4shm3uGAXGaBbsnTy5n3BiihZs=)
                          4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:91:1b:73:0b:a6:37:39:90:15:ab:b1:c8:cb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
        Validity
            Not Before: Aug 23 06:00:26 2025 GMT
            Not After : Aug 24 06:00:26 2025 GMT
        Subject: CN=7a755c7a7198a6f778836535840882376e0add29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:a9:ee:9a:d1:c7:82:52:d2:ca:94:03:9c:
                    98:12:bd:f3:f1:ad:ff:55:ad:bf:f5:e9:77:c4:95:
                    6d:85:00:f7:4d:97:8b:8c:ad:49:a8:c3:4b:96:0d:
                    63:af:05:39:81:4d:a2:e2:89:f2:81:b6:3c:b3:40:
                    08:86:0d:d7:26:64:64:3d:62:62:7f:2f:ce:51:fe:
                    b2:32:c7:e8:77:86:15:fb:d2:65:96:70:93:f4:a9:
                    d1:cb:62:5b:5e:00:5d:e0:d0:cf:b8:97:e6:0d:47:
                    9b:32:68:0a:3c:44:ea:fe:13:2e:7a:17:34:c9:71:
                    e1:ec:4e:7a:9c:a7:3b:87:5a:9f:a2:81:a7:7c:cd:
                    79:bd:22:1d:11:cf:5f:b5:50:fa:6a:7d:13:9a:29:
                    c1:30:3c:8a:3c:9a:e8:3b:ec:17:c9:39:9e:bc:a3:
                    27:e6:82:87:ae:05:b0:80:5a:d4:32:ca:b4:0d:76:
                    b1:cc:c0:94:12:45:ef:ea:0a:09:b8:cc:92:68:43:
                    9b:72:7d:15:af:65:77:ba:fd:74:9f:25:2a:09:97:
                    55:83:c5:56:b1:a1:0f:b1:00:95:87:ba:8d:2d:7e:
                    74:71:a9:96:df:f1:58:04:ab:8b:94:8a:f9:1e:61:
                    30:8d:06:8e:48:9f:be:82:be:79:0e:db:12:dc:6a:
                    4f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:75:5C:7A:71:98:A6:F7:78:83:65:35:84:08:82:37:6E:0A:DD:29
            X509v3 Authority Key Identifier:
                keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:30:9b:ef:87:56:8f:17:87:f3:1c:04:52:3d:1f:9e:dc:7c:
         62:08:9c:c6:1a:0b:42:bc:6a:d3:a9:04:8c:c4:b2:ca:d8:f7:
         f3:fb:9a:04:f0:aa:57:0b:ac:68:35:36:a2:0a:a0:25:88:fc:
         26:0f:ad:7c:b3:24:fa:22:d3:9d:cd:e9:fd:23:1a:11:bf:f4:
         98:5e:3f:3e:ab:89:66:f4:8d:2f:b1:7d:82:01:e3:c5:cf:56:
         06:66:1b:50:30:9e:ff:3d:36:3a:6e:37:ef:d2:31:d7:c7:5a:
         f7:d6:b4:17:9a:d7:24:91:b6:dc:f8:75:04:fa:09:18:73:e2:
         57:76:a9:a3:de:2f:21:d3:99:f1:d1:6f:f4:09:e4:93:7f:47:
         f6:49:dd:71:7f:f0:f0:61:cc:5b:c2:71:58:ad:55:83:b4:d3:
         dc:bd:44:af:78:5e:bb:b6:41:86:c9:98:66:b0:1b:83:2f:f3:
         20:66:c6:10:b9:17:b3:28:59:4b:8f:41:bc:f5:b7:a4:4a:0b:
         84:66:48:e6:05:e0:44:3c:a8:83:59:06:da:75:4b:c3:c2:62:
         33:ba:06:28:64:95:99:2c:fe:f4:a0:50:a4:68:0a:53:2e:d9:
         30:f6:c9:33:3b:a8:8a:8e:34:9e:a7:e6:e4:27:5a:b2:4c:e8:
         1f:46:18:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg5EbcwumNzmQFauxyMv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UwZTQ4MDQxMWI5Yzg4ZTkxNmRlZjkwZmMzYTkwMTAy
NjM5NGEwHhcNMjUwODIzMDYwMDI2WhcNMjUwODI0MDYwMDI2WjAzMTEwLwYDVQQD
Eyg3YTc1NWM3YTcxOThhNmY3Nzg4MzY1MzU4NDA4ODIzNzZlMGFkZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0mp7prRx4JS0sqUA5yYEr3z8a3/
Va2/9el3xJVthQD3TZeLjK1JqMNLlg1jrwU5gU2i4onygbY8s0AIhg3XJmRkPWJi
fy/OUf6yMsfod4YV+9JllnCT9KnRy2JbXgBd4NDPuJfmDUebMmgKPETq/hMuehc0
yXHh7E56nKc7h1qfooGnfM15vSIdEc9ftVD6an0TminBMDyKPJroO+wXyTmevKMn
5oKHrgWwgFrUMsq0DXaxzMCUEkXv6goJuMySaEObcn0Vr2V3uv10nyUqCZdVg8VW
saEPsQCVh7qNLX50camW3/FYBKuLlIr5HmEwjQaOSJ++gr55DtsS3GpPZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHp1XHpxmKb3eINlNYQIgjduCt0pMB8GA1UdIwQY
MBaAFIM+DkgEEbnIjpFt75D8OpAQJjlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMt
NmMyMGViYWYzMGE5LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMtNmMyMGViYWYzMGE5
LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojCb74dW
jxeH8xwEUj0fntx8YgicxhoLQrxq06kEjMSyytj38/uaBPCqVwusaDU2ogqgJYj8
Jg+tfLMk+iLTnc3p/SMaEb/0mF4/PquJZvSNL7F9ggHjxc9WBmYbUDCe/z02Om43
79Ix18da99a0F5rXJJG23Ph1BPoJGHPiV3apo94vIdOZ8dFv9Ankk39H9kndcX/w
8GHMW8JxWK1Vg7TT3L1Er3heu7ZBhsmYZrAbgy/zIGbGELkXsyhZS49BvPW3pEoL
hGZI5gXgRDyog1kG2nVLw8JiM7oGKGSVmSz+9KBQpGgKUy7ZMPbJMzuoio40nqfm
5CdaskzoH0YYWw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:02 2025 by rpki-client