Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
File:                     mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json)
Hash identifier:          VJfkacKutQkLar8z8xfK/vxS2FP4CM59XHRS61NqIIw=
Subject key identifier:   EB:81:96:61:80:85:81:6F:38:9E:4D:70:16:95:71:0A:2A:0E:B1:60
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Certificate issuer:       /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial:       0198D4733ED4878C48A353EDA6D260C8CFDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 01:02:59 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:59 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:59 +0000
Files and hashes:         1: 5qz81vMuyN5eYJ6zyRRelyT4XK0.roa (hash: 0LizoQ7sooXP56qjV8fYtL2cZDWoYFEUv70QcevbSss=)
                          2: Oo8Lhh4RlCa7xttIyBwx5LDEUoc.roa (hash: wrOx7qjHfGVS+J5guJXeAV7Who7QhhesA0WvqwwUSt0=)
                          3: bred8jKnNPms1BCagsD8kMQFkWQ.roa (hash: VvTTWuUY3ocSZzeJdjIHCKMe7BquJDgv+iCTQ7eJzuc=)
                          4: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: jHVUSxLbOfDMIigIdfi5ZUcp/XLa0lvb0Fl3UQT7qfA=)
                          5: orjkFnmOp2fkt5BOjfHTUe1SFM8.roa (hash: VR0THqWhrxUSaUWx/H66JHdMtnv+5/NgmHEPJq0RqoM=)
                          6: vHN5MXtzccXdspQhStY4Z57CoPM.roa (hash: 4HXRwfo/a7HGgHSGpok7A4ldu5noCeEQDTLX8aICufE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:3e:d4:87:8c:48:a3:53:ed:a6:d2:60:c8:cf:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
        Validity
            Not Before: Aug 23 01:02:59 2025 GMT
            Not After : Aug 24 01:02:59 2025 GMT
        Subject: CN=eb8196618085816f389e4d701695710a2a0eb160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:03:dc:cf:be:15:42:fa:89:5e:4e:27:41:b6:
                    fa:6a:3b:6a:4e:e3:82:79:5a:0e:7b:b6:e8:8d:f7:
                    48:30:74:d1:4b:6b:c9:c3:11:4b:89:f4:d2:ef:42:
                    1a:17:a9:f9:e4:af:4a:72:02:e8:f4:24:41:c9:58:
                    fd:23:d4:fe:68:16:33:40:e7:7f:9e:ac:2d:62:42:
                    cd:64:04:97:93:2b:ea:dc:ce:6f:23:09:01:dd:10:
                    20:b3:2b:a2:68:e4:93:13:dd:74:6e:63:68:9d:94:
                    2c:1e:73:41:fc:18:e4:df:b7:ac:1e:8c:da:a0:82:
                    5a:01:59:5f:54:9a:2e:a9:7f:f6:02:a6:ee:f2:01:
                    f0:2b:56:5d:b7:f8:5b:91:35:06:f2:f3:7d:e9:b2:
                    4e:d5:10:d0:f5:cd:52:f3:e4:7f:1f:26:d7:d9:1b:
                    1c:fe:ed:51:6c:17:95:91:25:e8:b0:f2:8a:ef:54:
                    42:27:d6:4d:11:b6:c1:ab:25:4b:e0:a6:4f:9a:ca:
                    05:e5:f4:b9:88:6d:e7:2b:3f:41:4c:05:7f:45:83:
                    df:4f:6d:98:2c:09:f9:24:26:5d:7c:ee:30:af:fe:
                    72:ba:79:ba:9f:79:bc:a1:c4:41:7e:96:1c:35:6c:
                    90:81:d1:b2:bb:4f:91:ca:c9:5d:ae:cb:3d:39:6e:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:81:96:61:80:85:81:6F:38:9E:4D:70:16:95:71:0A:2A:0E:B1:60
            X509v3 Authority Key Identifier:
                keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:62:0a:9b:c4:a2:5c:d5:3a:90:80:61:d2:92:a6:f3:71:46:
         23:a5:92:29:92:ec:f5:12:df:68:51:c4:0d:84:ea:3e:50:47:
         73:92:46:85:bc:1f:14:2c:c7:3a:2a:a6:ab:9e:83:d8:3d:c9:
         15:b5:0c:12:f5:80:77:72:6b:dc:37:f7:70:a0:ee:68:a0:6d:
         14:2b:8b:cc:b5:41:2d:4b:1f:9c:35:0b:03:55:37:dc:b8:de:
         f9:05:24:9e:eb:dd:ad:96:75:64:e7:c6:17:c0:ab:52:3e:a5:
         0c:80:3a:42:d1:02:14:8e:75:7e:9f:ff:50:11:82:2c:f6:de:
         6d:e2:6b:27:b1:59:23:2a:d2:4b:ac:a9:72:21:c6:6a:07:7a:
         db:2a:a9:f0:8b:02:7b:e0:64:fa:a1:53:79:72:bb:7c:d0:a1:
         f2:09:19:62:99:bf:4d:df:5d:59:fb:be:9b:45:6a:de:88:43:
         0b:94:58:57:c6:cb:b2:10:65:87:55:5d:98:46:93:d9:1a:b9:
         90:7e:0b:ed:ab:f6:5e:08:10:ef:ef:15:3e:80:e2:69:40:0f:
         bf:fb:9d:ce:74:04:c5:40:dc:61:26:7e:a4:74:8f:f7:ad:0e:
         a3:67:b0:ff:57:61:7b:03:1e:8f:64:4a:15:24:37:5f:4e:c7:
         88:df:24:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcz7Uh4xIo1PtptJgyM/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NWFlNmM1OWMzNWU0NjAzODdkYWViY2ZiODY2ZjhhMWVi
YjM2ODYwHhcNMjUwODIzMDEwMjU5WhcNMjUwODI0MDEwMjU5WjAzMTEwLwYDVQQD
EyhlYjgxOTY2MTgwODU4MTZmMzg5ZTRkNzAxNjk1NzEwYTJhMGViMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wPcz74VQvqJXk4nQbb6ajtqTuOC
eVoOe7bojfdIMHTRS2vJwxFLifTS70IaF6n55K9KcgLo9CRByVj9I9T+aBYzQOd/
nqwtYkLNZASXkyvq3M5vIwkB3RAgsyuiaOSTE910bmNonZQsHnNB/Bjk37esHoza
oIJaAVlfVJouqX/2Aqbu8gHwK1Zdt/hbkTUG8vN96bJO1RDQ9c1S8+R/HybX2Rsc
/u1RbBeVkSXosPKK71RCJ9ZNEbbBqyVL4KZPmsoF5fS5iG3nKz9BTAV/RYPfT22Y
LAn5JCZdfO4wr/5yunm6n3m8ocRBfpYcNWyQgdGyu0+Rysldrss9OW4g9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuBlmGAhYFvOJ5NcBaVcQoqDrFgMB8GA1UdIwQY
MBaAFJha5sWcNeRgOH2uvPuGb4oeuzaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEt
YzdmZTYyMjI3ZGYzLzEvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEtYzdmZTYyMjI3ZGYz
LzEvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGIKm8Si
XNU6kIBh0pKm83FGI6WSKZLs9RLfaFHEDYTqPlBHc5JGhbwfFCzHOiqmq56D2D3J
FbUMEvWAd3Jr3Df3cKDuaKBtFCuLzLVBLUsfnDULA1U33Lje+QUknuvdrZZ1ZOfG
F8CrUj6lDIA6QtECFI51fp//UBGCLPbebeJrJ7FZIyrSS6ypciHGagd62yqp8IsC
e+Bk+qFTeXK7fNCh8gkZYpm/Td9dWfu+m0Vq3ohDC5RYV8bLshBlh1VdmEaT2Rq5
kH4L7av2XggQ7+8VPoDiaUAPv/udznQExUDcYSZ+pHSP960Oo2ew/1dhewMej2RK
FSQ3X07HiN8kdw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:49 2025 by rpki-client