Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
File:                     femPSOmIeQ0OB5NTeUG0E9LmAwY.mft (raw, json)
Hash identifier:          C/9UFw4MVmCRIrxWDjjPypm+QhEcd94j/MOoFy3YTqE=
Subject key identifier:   87:61:BA:1C:1C:BB:9E:CC:C3:EA:3F:CD:B1:97:90:5D:7D:69:8B:19
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Certificate issuer:       /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial:       0198D5BBB78BA62C489D48BE087127B4E9CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 07:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:45 +0000
Files and hashes:         1: L1sOGUpC5vf81IjAWo9yjqNWdoc.roa (hash: qAhDSU9NhG7HL0VsMDn5fszVhTOJb2FN5MRmMe3Ne7s=)
                          2: VGUAWcdE_uWGBzoEXuUWxSaeofE.roa (hash: ldYqKdQLO9amLNP7UTQrP4DX3OqZoopvjfltJwygHwg=)
                          3: akdoIFbGGphPsOua6vOPfJFx_n8.roa (hash: r5YdXtt32oyVRXJKLiujx5qPKEB9WTaTcVsGTt7qfvg=)
                          4: femPSOmIeQ0OB5NTeUG0E9LmAwY.crl (hash: l9AMeHlznRi7mjtvk3aWX2Bu0qF2GzzfbTLA/MRRC64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:b7:8b:a6:2c:48:9d:48:be:08:71:27:b4:e9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
        Validity
            Not Before: Aug 23 07:01:45 2025 GMT
            Not After : Aug 24 07:01:45 2025 GMT
        Subject: CN=8761ba1c1cbb9eccc3ea3fcdb197905d7d698b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:17:2b:f5:31:6f:af:e9:7b:11:46:52:e5:cb:
                    9e:e2:9c:8e:70:c1:33:8c:61:f3:3c:86:cd:8e:d8:
                    db:09:b9:61:13:27:68:d4:1e:6c:1b:3e:6e:f9:10:
                    7f:ef:5a:8e:0e:d0:f0:82:0e:fc:4e:90:fe:c5:eb:
                    15:27:9a:f2:0c:d0:16:17:1e:8e:0b:5c:77:c8:fd:
                    31:fd:82:46:67:3d:67:79:8a:7d:e1:df:21:70:fc:
                    0d:6d:cc:9e:9b:5f:26:5d:02:c2:42:5a:36:f1:7f:
                    98:fb:ff:52:32:bc:a9:b0:63:d6:cb:39:ae:4b:f4:
                    9e:58:83:69:e0:4c:4a:9d:35:51:17:79:b4:87:2c:
                    1d:97:d4:35:0e:4a:17:b4:60:20:db:2e:f0:8e:70:
                    79:25:fa:6c:60:12:ea:93:2c:b2:8f:47:95:9d:e1:
                    af:e2:3a:34:0c:40:03:76:4d:5a:bc:84:dc:6e:cf:
                    7c:a1:48:54:17:ee:a6:3d:47:46:dc:e1:fd:08:05:
                    e5:56:00:76:4f:c8:f0:25:4a:76:f9:f9:8d:aa:90:
                    31:f5:5e:40:01:67:47:96:67:de:9c:35:77:41:2e:
                    c2:74:53:21:40:15:fd:eb:4c:4a:e5:49:ec:8c:a1:
                    49:22:72:1c:f0:28:1c:52:28:9d:b6:fa:92:39:51:
                    c1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:61:BA:1C:1C:BB:9E:CC:C3:EA:3F:CD:B1:97:90:5D:7D:69:8B:19
            X509v3 Authority Key Identifier:
                keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1e:e6:7c:3b:7c:05:bb:4e:01:fd:a5:ba:22:07:5d:be:49:
         e6:09:74:a4:c7:67:d0:3c:76:77:ee:09:84:dd:f1:3e:3b:92:
         c2:04:b1:7c:8d:9f:b8:f0:0d:50:27:f2:cb:32:67:f2:15:bd:
         23:ee:fb:3a:94:e0:95:e2:7f:86:3e:10:d4:6f:06:23:e0:02:
         50:04:22:68:b6:83:63:df:36:e2:f7:47:68:ea:15:07:87:af:
         ae:c4:46:7b:98:e4:8d:ce:64:7a:f7:02:e1:a7:dd:3b:eb:f5:
         9e:b8:e9:3e:50:e0:a8:4c:c8:d9:92:f2:83:1c:20:dd:a5:be:
         ab:5b:d0:bf:94:31:c5:65:f3:d3:88:48:9e:bf:4e:a6:e0:b9:
         b7:58:2d:e4:40:35:43:c6:98:50:f9:23:cf:5e:49:14:aa:1e:
         8c:c3:5c:e1:55:df:5a:27:34:9f:23:75:00:64:ef:df:2e:5b:
         64:8e:5f:ce:b8:10:d3:17:f3:c9:42:96:9f:62:02:a7:12:9b:
         65:61:48:97:16:3b:54:53:91:79:82:6c:af:4d:af:a8:f1:99:
         7c:42:1e:11:84:1b:68:04:ef:e3:98:64:5c:6a:df:98:78:af:
         10:a9:97:6c:c0:7e:9d:0a:75:50:78:99:e4:b5:f6:33:48:83:
         c9:a1:8d:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7eLpixInUi+CHEntOnOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTk4ZjQ4ZTk4ODc5MGQwZTA3OTM1Mzc5NDFiNDEzZDJl
NjAzMDYwHhcNMjUwODIzMDcwMTQ1WhcNMjUwODI0MDcwMTQ1WjAzMTEwLwYDVQQD
Eyg4NzYxYmExYzFjYmI5ZWNjYzNlYTNmY2RiMTk3OTA1ZDdkNjk4YjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRcr9TFvr+l7EUZS5cue4pyOcMEz
jGHzPIbNjtjbCblhEydo1B5sGz5u+RB/71qODtDwgg78TpD+xesVJ5ryDNAWFx6O
C1x3yP0x/YJGZz1neYp94d8hcPwNbcyem18mXQLCQlo28X+Y+/9SMrypsGPWyzmu
S/SeWINp4ExKnTVRF3m0hywdl9Q1DkoXtGAg2y7wjnB5JfpsYBLqkyyyj0eVneGv
4jo0DEADdk1avITcbs98oUhUF+6mPUdG3OH9CAXlVgB2T8jwJUp2+fmNqpAx9V5A
AWdHlmfenDV3QS7CdFMhQBX960xK5UnsjKFJInIc8CgcUiidtvqSOVHBdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdhuhwcu57Mw+o/zbGXkF19aYsZMB8GA1UdIwQY
MBaAFH3pj0jpiHkNDgeTU3lBtBPS5gMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4Yjkt
NDc2MzJjYjViODU0LzEvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4YjktNDc2MzJjYjViODU0
LzEvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWB7mfDt8
BbtOAf2luiIHXb5J5gl0pMdn0Dx2d+4JhN3xPjuSwgSxfI2fuPANUCfyyzJn8hW9
I+77OpTgleJ/hj4Q1G8GI+ACUAQiaLaDY9824vdHaOoVB4evrsRGe5jkjc5kevcC
4afdO+v1nrjpPlDgqEzI2ZLygxwg3aW+q1vQv5QxxWXz04hInr9OpuC5t1gt5EA1
Q8aYUPkjz15JFKoejMNc4VXfWic0nyN1AGTv3y5bZI5fzrgQ0xfzyUKWn2ICpxKb
ZWFIlxY7VFOReYJsr02vqPGZfEIeEYQbaATv45hkXGrfmHivEKmXbMB+nQp1UHiZ
5LX2M0iDyaGNew==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:13 2025 by rpki-client