Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File:                     IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier:          mhR0LdO8L7aj5Gnz7AvwiNsbvUycJmbRWKa4CKgfnfU=
Subject key identifier:   DD:E5:10:4A:F4:43:CB:F3:E5:B9:6B:09:67:03:35:D3:A0:15:7F:D5
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer:       /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial:       0198D5F1724BCC88BEFD7D8B50A9D689592F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 08:00:27 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:27 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:27 +0000
Files and hashes:         1: CMn2soeES3hR-sK_8HvrSujpCpQ.roa (hash: VTuRr4KfXEripqS9AelciewMmdMPiSyij0Vs8ogbZ90=)
                          2: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: ySj8qmqD0YN8csMAttqmisa8PmnBX/LlnkTEEOxsx/g=)
                          3: Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa (hash: iGrYsnlws/ojR0+NVYUlir1CfMVL/ZNyCA/PzakH0rc=)
                          4: Z_2-Zbi4vsdnVpg2d_lnWwbhvN4.roa (hash: 8GDUJ7ZhRwTXBlYLdtF6LAMc571ge2c8D8UbSUf3lg0=)
                          5: gKn9w2HjuJeDuvDGB4i7KMCUEOw.roa (hash: 9RL0o8ItMk9D70n/zJYOrxlmErXzvmrmjIlOb2QhCXA=)
                          6: vobE3yEGfIGL1cB1AJTldnCRmXE.roa (hash: wMXrPRBz6jhuzSeDkQhA2W+belZhJmWY3V+ZCFJ8/9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:72:4b:cc:88:be:fd:7d:8b:50:a9:d6:89:59:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
        Validity
            Not Before: Aug 23 08:00:27 2025 GMT
            Not After : Aug 24 08:00:27 2025 GMT
        Subject: CN=dde5104af443cbf3e5b96b09670335d3a0157fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fa:6d:6a:dd:65:06:90:c0:ff:2a:1c:60:c9:
                    c0:db:a1:e5:31:0b:be:e4:40:bc:fc:fc:5e:5a:59:
                    25:02:74:38:c4:98:92:82:28:4f:df:cc:4e:2a:1a:
                    b5:12:9b:f3:cb:c7:54:2c:f2:1f:3a:0b:3c:8b:fe:
                    f7:f7:35:2a:fa:d1:89:ea:44:de:0e:e4:bb:73:7c:
                    bb:36:93:3d:94:0c:6e:94:39:dd:5c:c1:4a:b6:b7:
                    11:93:94:8c:c3:81:94:48:d6:74:da:a9:e1:b4:4c:
                    f0:e2:e1:ee:64:2b:5b:bf:19:f6:cd:26:d9:2c:fb:
                    df:96:ff:7f:09:1b:d5:52:a8:4b:e5:f1:a9:21:5f:
                    39:99:a9:48:17:cd:95:7c:0f:a5:67:d6:10:aa:79:
                    40:c8:de:84:49:7f:5d:c0:02:59:8e:86:63:18:57:
                    6e:12:18:b8:27:4c:a7:da:1b:4b:c6:21:03:04:6e:
                    94:e9:0c:bb:1b:4b:c6:ba:03:95:17:1c:4c:64:c2:
                    7b:a6:ad:64:6c:80:0e:b0:34:ab:12:4e:58:39:61:
                    1e:5c:c7:7b:67:8c:73:fd:25:08:fa:6c:98:39:77:
                    37:0c:07:90:a1:a3:cb:57:8a:b9:d8:f8:17:01:66:
                    15:68:d1:24:97:fa:96:b6:b0:87:c2:ce:04:86:40:
                    fd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E5:10:4A:F4:43:CB:F3:E5:B9:6B:09:67:03:35:D3:A0:15:7F:D5
            X509v3 Authority Key Identifier:
                keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c6:db:dd:cf:5f:f4:cd:44:c2:97:fe:57:ee:85:92:97:b9:
         d6:1a:47:ae:43:b8:9e:dc:0d:69:ee:8e:a9:bb:84:98:89:53:
         c9:db:63:11:50:ad:2e:58:b7:cf:53:67:0e:9e:40:92:e3:51:
         fa:14:b1:8c:4b:1e:f7:7b:b6:df:f3:37:22:e5:61:90:bd:0a:
         42:37:d8:92:ee:9e:6b:c4:53:98:83:ad:a4:00:f8:f3:56:e8:
         98:98:b6:e0:ca:a7:bd:dd:4a:aa:b8:6e:14:05:ff:84:42:24:
         3a:4d:6f:49:bc:2f:4c:21:b9:6c:00:7c:ca:01:66:fb:30:e1:
         be:71:89:0f:06:86:9a:97:75:45:f1:38:21:9d:5b:66:f6:1f:
         92:44:bc:75:eb:43:5f:87:ce:5f:8d:98:a1:06:47:3c:88:38:
         f8:f2:40:68:dc:73:eb:df:ce:50:d6:06:7d:7e:32:5b:2a:df:
         6f:cc:78:ce:3e:2b:d5:05:23:20:27:99:e2:90:d4:a2:df:e5:
         5d:74:f4:5c:d1:62:44:cf:6b:7c:c5:35:18:43:1c:ba:89:b5:
         97:56:38:c4:f0:17:dd:04:a5:6e:19:31:d0:d2:e5:1e:5f:b5:
         1e:0a:57:d2:63:ff:95:72:e9:46:1d:c2:df:2d:fc:41:ae:96:
         b1:7f:ef:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8XJLzIi+/X2LUKnWiVkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjk4YzFjZGM2NmRjMjg1ZDBmODA3NjI5YzQ2MjYxYTg4
YjJkZTcwHhcNMjUwODIzMDgwMDI3WhcNMjUwODI0MDgwMDI3WjAzMTEwLwYDVQQD
EyhkZGU1MTA0YWY0NDNjYmYzZTViOTZiMDk2NzAzMzVkM2EwMTU3ZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vptat1lBpDA/yocYMnA26HlMQu+
5EC8/PxeWlklAnQ4xJiSgihP38xOKhq1Epvzy8dULPIfOgs8i/739zUq+tGJ6kTe
DuS7c3y7NpM9lAxulDndXMFKtrcRk5SMw4GUSNZ02qnhtEzw4uHuZCtbvxn2zSbZ
LPvflv9/CRvVUqhL5fGpIV85malIF82VfA+lZ9YQqnlAyN6ESX9dwAJZjoZjGFdu
Ehi4J0yn2htLxiEDBG6U6Qy7G0vGugOVFxxMZMJ7pq1kbIAOsDSrEk5YOWEeXMd7
Z4xz/SUI+myYOXc3DAeQoaPLV4q52PgXAWYVaNEkl/qWtrCHws4EhkD9dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3lEEr0Q8vz5blrCWcDNdOgFX/VMB8GA1UdIwQY
MBaAFCFpjBzcZtwoXQ+AdinEYmGoiy3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWIt
NGQ3MzczMGY3ZDMyLzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWItNGQ3MzczMGY3ZDMy
LzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8bb3c9f
9M1Ewpf+V+6Fkpe51hpHrkO4ntwNae6OqbuEmIlTydtjEVCtLli3z1NnDp5AkuNR
+hSxjEse93u23/M3IuVhkL0KQjfYku6ea8RTmIOtpAD481bomJi24Mqnvd1Kqrhu
FAX/hEIkOk1vSbwvTCG5bAB8ygFm+zDhvnGJDwaGmpd1RfE4IZ1bZvYfkkS8detD
X4fOX42YoQZHPIg4+PJAaNxz69/OUNYGfX4yWyrfb8x4zj4r1QUjICeZ4pDUot/l
XXT0XNFiRM9rfMU1GEMcuom1l1Y4xPAX3QSlbhkx0NLlHl+1HgpX0mP/lXLpRh3C
3y38Qa6WsX/vKQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:14:06 2025 by rpki-client