Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File:                     42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier:          Gwmmv6r9X0mIl9ipWaL2nSUcuYTmWcfsv8D5nEDMWs4=
Subject key identifier:   51:D3:CA:45:BF:0B:32:2F:48:C2:4C:82:BC:22:93:8C:2E:DF:BB:B2
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer:       /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial:       0198D4A807F0A11B556256EA45F984DFE999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 02:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:38 +0000
Files and hashes:         1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: xBKU0o1UGG9KzOCqd/wlsJBWA3OD6fzfC+ty/ieohwM=)
                          2: OS--Lk_-r0Q1zq4QqDjYyZsHuMY.roa (hash: MVTlexALEq+OtJ89dtjZODG5hLFqDXsO9MxPnvJn09w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:07:f0:a1:1b:55:62:56:ea:45:f9:84:df:e9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
        Validity
            Not Before: Aug 23 02:00:38 2025 GMT
            Not After : Aug 24 02:00:38 2025 GMT
        Subject: CN=51d3ca45bf0b322f48c24c82bc22938c2edfbbb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:07:4b:bc:e2:4f:32:82:7a:b0:01:28:de:
                    13:35:06:20:79:0c:78:4e:10:57:75:c4:33:2a:0e:
                    1a:54:1d:df:3f:bf:8a:1d:61:81:43:80:68:8e:35:
                    05:1f:84:b7:08:34:5c:77:b0:4d:1c:ea:a1:46:64:
                    94:2e:c0:1c:99:fe:39:a5:7e:c8:6c:c4:2e:ac:d8:
                    6a:3d:ba:9a:49:b5:bc:9a:e1:a4:03:4b:26:71:a6:
                    02:1b:c6:ed:e9:79:8d:23:2c:91:9e:5f:3b:74:50:
                    2b:52:c8:85:55:47:2b:78:a4:07:5d:20:f7:04:06:
                    ff:80:63:5a:8e:26:3b:b2:02:29:ca:b8:58:f6:1d:
                    27:10:e8:e2:eb:c0:73:28:ca:23:20:4d:9c:50:f4:
                    bd:08:71:95:1c:48:e0:94:db:42:a1:30:a7:ad:5c:
                    d0:4d:8e:58:e8:75:21:7a:b4:56:c2:d0:a2:2d:b1:
                    06:ad:06:8f:9b:56:9d:88:f6:7d:c9:6e:14:89:1e:
                    5d:67:41:9a:d4:c0:58:66:31:8e:42:37:5b:0d:b3:
                    27:61:6f:cd:aa:e7:37:91:32:18:2f:c0:00:9a:fc:
                    cd:5d:7c:ed:de:1d:d4:13:b2:60:fd:36:b7:5f:ea:
                    ed:aa:23:36:c6:56:65:6e:67:21:7b:4c:47:c5:7e:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D3:CA:45:BF:0B:32:2F:48:C2:4C:82:BC:22:93:8C:2E:DF:BB:B2
            X509v3 Authority Key Identifier:
                keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e0:ec:2b:90:5b:48:9d:48:3b:39:bd:ef:dc:31:e5:b8:e5:
         00:54:0a:52:64:93:03:bf:51:45:b4:78:b9:8f:b8:8f:94:98:
         87:a2:42:71:fe:1d:2f:1e:f1:11:99:92:59:5e:61:d7:17:d0:
         de:75:ae:3c:81:46:21:a4:3d:1f:a0:df:db:51:7d:0d:43:1e:
         ca:d6:1a:00:33:ee:5f:78:d5:66:d0:53:6a:b0:08:01:f6:cc:
         93:9e:27:58:d4:38:3e:0a:5e:05:3d:7c:fe:80:89:ec:a6:b9:
         aa:6e:b7:cb:d0:38:1f:61:ce:6e:95:a6:04:98:07:3c:27:b9:
         0d:8b:9f:ba:2d:26:91:7e:5f:e2:b2:e1:df:ac:d6:68:ff:68:
         90:85:54:5d:22:13:69:e1:eb:d7:e5:8f:1f:09:d3:a0:67:70:
         37:ae:77:99:e0:3e:f4:3e:44:7d:55:41:2b:87:e7:ee:55:be:
         2b:b3:b6:60:02:20:07:04:43:f5:41:77:38:93:89:5f:a1:d0:
         3a:49:de:ff:b1:6c:97:9c:28:a9:8b:a4:0a:66:c9:93:fc:6e:
         bd:88:89:eb:7c:99:1f:6a:2b:fd:2b:44:99:04:d8:9c:b2:17:
         34:5d:26:6e:95:53:de:16:64:f4:67:8e:6d:10:95:26:9c:04:
         60:62:d5:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqAfwoRtVYlbqRfmE3+mZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNmI0YzU4ZTZjZmQ5ZmE3ZTcyMjJhNThiMzYyNmRiN2I5
ODUzMjQwHhcNMjUwODIzMDIwMDM4WhcNMjUwODI0MDIwMDM4WjAzMTEwLwYDVQQD
Eyg1MWQzY2E0NWJmMGIzMjJmNDhjMjRjODJiYzIyOTM4YzJlZGZiYmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHAHS7ziTzKCerABKN4TNQYgeQx4
ThBXdcQzKg4aVB3fP7+KHWGBQ4BojjUFH4S3CDRcd7BNHOqhRmSULsAcmf45pX7I
bMQurNhqPbqaSbW8muGkA0smcaYCG8bt6XmNIyyRnl87dFArUsiFVUcreKQHXSD3
BAb/gGNajiY7sgIpyrhY9h0nEOji68BzKMojIE2cUPS9CHGVHEjglNtCoTCnrVzQ
TY5Y6HUherRWwtCiLbEGrQaPm1adiPZ9yW4UiR5dZ0Ga1MBYZjGOQjdbDbMnYW/N
quc3kTIYL8AAmvzNXXzt3h3UE7Jg/Ta3X+rtqiM2xlZlbmche0xHxX4W8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHTykW/CzIvSMJMgrwik4wu37uyMB8GA1UdIwQY
MBaAFONrTFjmz9n6fnIipYs2Jtt7mFMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZDdkZjgtYjQ2NC00Y2E3LWJhNmMt
ODAwYzk5ODUxMzY4LzEvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZDdkZjgtYjQ2NC00Y2E3LWJhNmMtODAwYzk5ODUxMzY4
LzEvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACODsK5Bb
SJ1IOzm979wx5bjlAFQKUmSTA79RRbR4uY+4j5SYh6JCcf4dLx7xEZmSWV5h1xfQ
3nWuPIFGIaQ9H6Df21F9DUMeytYaADPuX3jVZtBTarAIAfbMk54nWNQ4PgpeBT18
/oCJ7Ka5qm63y9A4H2HObpWmBJgHPCe5DYufui0mkX5f4rLh36zWaP9okIVUXSIT
aeHr1+WPHwnToGdwN653meA+9D5EfVVBK4fn7lW+K7O2YAIgBwRD9UF3OJOJX6HQ
Okne/7Fsl5woqYukCmbJk/xuvYiJ63yZH2or/StEmQTYnLIXNF0mbpVT3hZk9GeO
bRCVJpwEYGLVzw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:35 2025 by rpki-client