Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
File:                     yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json)
Hash identifier:          pPerch39h1+jvFydRhzpANTcgdN/x/eBvvsR361q8kU=
Subject key identifier:   E2:50:5C:6D:EA:1E:A6:12:D7:88:C0:34:3F:F0:25:E9:19:6C:3E:29
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Certificate issuer:       /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial:       0198D6CDEDBF0BA4604BD6EB8A2793A8FDC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 12:01:16 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:16 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:16 +0000
Files and hashes:         1: fF2XIJTPCrRrtW2Ed7f3XI5YBGE.roa (hash: yAyZKCviC/wjO248iuIwgpoUtsrF9JNp+X9B5Xdnj9A=)
                          2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: 2rYdOquP1LwlQ2FD7gQW7uj7noq+jDFX5A64+MTJ1sA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:ed:bf:0b:a4:60:4b:d6:eb:8a:27:93:a8:fd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
        Validity
            Not Before: Aug 23 12:01:16 2025 GMT
            Not After : Aug 24 12:01:16 2025 GMT
        Subject: CN=e2505c6dea1ea612d788c0343ff025e9196c3e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:e7:7a:73:df:e1:a7:9f:91:da:2d:ed:8d:
                    04:79:19:85:d2:1a:83:53:50:c4:1a:c9:11:5e:1b:
                    3a:3f:49:1e:68:7e:1a:2f:94:ff:7f:a2:93:c8:c4:
                    92:7b:9d:42:1e:ae:34:f3:fc:55:fa:26:88:84:87:
                    ab:c1:8d:86:f7:43:e6:7f:b6:14:1d:37:d8:66:55:
                    9d:f7:58:9f:4b:fc:fc:0c:e7:13:b7:e4:1a:ab:1d:
                    42:0d:3a:7a:9b:1b:9d:70:eb:b2:a7:7e:9d:21:6f:
                    53:94:bf:6e:c1:2d:7a:56:7a:01:c1:69:db:a1:30:
                    69:b0:7d:2e:68:72:cb:21:75:31:f2:dc:2f:6c:71:
                    74:2e:22:13:15:f6:24:98:88:79:7a:18:79:9f:64:
                    d1:bb:40:bd:24:f3:33:68:9a:3f:d1:5d:cc:9f:d5:
                    81:93:d1:66:16:97:99:9c:d4:b9:90:f9:bc:60:1a:
                    e7:81:1b:0a:f5:24:74:61:ef:d2:d6:05:39:32:8d:
                    45:85:b6:eb:70:0d:6f:9d:e6:d0:01:3f:fc:54:59:
                    de:22:ad:0c:99:59:db:1b:b8:83:87:e7:08:25:de:
                    f3:98:b3:26:30:80:3b:f4:0e:2b:d2:52:42:66:6a:
                    98:f2:b3:28:b4:88:a9:d3:58:81:0a:ff:b2:7c:07:
                    5b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:50:5C:6D:EA:1E:A6:12:D7:88:C0:34:3F:F0:25:E9:19:6C:3E:29
            X509v3 Authority Key Identifier:
                keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8f:b3:40:03:3d:08:e7:06:08:94:5f:69:06:8b:d2:63:61:
         ee:52:b5:0a:47:f2:2c:4b:61:ff:26:8e:8b:e7:53:4f:85:9e:
         4f:54:86:53:68:14:61:5b:fe:03:da:40:4c:4e:a0:fb:08:9d:
         79:9d:f0:3c:b5:d0:f4:39:57:55:fc:02:c1:fd:9d:90:57:fb:
         4c:7f:ed:ee:50:b2:23:b0:8c:f2:a9:63:37:6e:c6:7e:47:3c:
         a1:6e:30:25:c0:b6:7a:f1:4e:67:0b:54:b6:23:7b:f7:7b:ab:
         82:14:0c:66:c6:10:66:eb:f7:b1:d4:3f:7a:1a:4c:11:66:4a:
         46:97:0c:b9:c6:bc:c2:ba:73:c0:4b:1b:f8:22:70:5d:71:4c:
         a0:43:0b:73:bb:9e:5c:11:78:bb:8b:84:51:90:b4:75:70:55:
         08:f4:09:8e:5f:65:06:a1:06:33:3c:34:43:45:a4:f3:2c:9e:
         ef:71:f5:0f:1d:57:a3:72:cd:b7:7a:31:50:f1:4e:eb:f5:52:
         de:b3:ab:7f:67:67:c8:00:fd:8a:c1:e7:3f:f1:96:1c:00:45:
         dd:36:c8:38:61:d1:e3:da:ff:90:1a:ef:a4:6f:7b:89:2e:84:
         24:8f:17:b0:cd:2b:24:4c:70:d5:10:4b:e9:25:ad:87:a3:c3:
         3b:98:60:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWze2/C6RgS9briieTqP3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OTgyYjAwZGM2MDAzZGNjNWNmZDdkMjdiNTU5NWQwY2Fj
YTVkYTEwHhcNMjUwODIzMTIwMTE2WhcNMjUwODI0MTIwMTE2WjAzMTEwLwYDVQQD
EyhlMjUwNWM2ZGVhMWVhNjEyZDc4OGMwMzQzZmYwMjVlOTE5NmMzZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjLnenPf4aefkdot7Y0EeRmF0hqD
U1DEGskRXhs6P0keaH4aL5T/f6KTyMSSe51CHq408/xV+iaIhIerwY2G90Pmf7YU
HTfYZlWd91ifS/z8DOcTt+Qaqx1CDTp6mxudcOuyp36dIW9TlL9uwS16VnoBwWnb
oTBpsH0uaHLLIXUx8twvbHF0LiITFfYkmIh5ehh5n2TRu0C9JPMzaJo/0V3Mn9WB
k9FmFpeZnNS5kPm8YBrngRsK9SR0Ye/S1gU5Mo1FhbbrcA1vnebQAT/8VFneIq0M
mVnbG7iDh+cIJd7zmLMmMIA79A4r0lJCZmqY8rMotIip01iBCv+yfAdb3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJQXG3qHqYS14jAND/wJekZbD4pMB8GA1UdIwQY
MBaAFMiYKwDcYAPcxc/X0ntVldDKyl2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yMTY4YmEtMWM0Yy00MjA2LTkyOTkt
MTY1M2UwZGU0MDUwLzEveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8yMTY4YmEtMWM0Yy00MjA2LTkyOTktMTY1M2UwZGU0MDUw
LzEveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnI+zQAM9
COcGCJRfaQaL0mNh7lK1CkfyLEth/yaOi+dTT4WeT1SGU2gUYVv+A9pATE6g+wid
eZ3wPLXQ9DlXVfwCwf2dkFf7TH/t7lCyI7CM8qljN27Gfkc8oW4wJcC2evFOZwtU
tiN793urghQMZsYQZuv3sdQ/ehpMEWZKRpcMuca8wrpzwEsb+CJwXXFMoEMLc7ue
XBF4u4uEUZC0dXBVCPQJjl9lBqEGMzw0Q0Wk8yye73H1Dx1Xo3LNt3oxUPFO6/VS
3rOrf2dnyAD9isHnP/GWHABF3TbIOGHR49r/kBrvpG97iS6EJI8XsM0rJExw1RBL
6SWth6PDO5hgSQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:23:54 2025 by rpki-client