Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
File:                     IsFSYGEl62bVIiY_oDEJu_C7o9o.mft (raw, json)
Hash identifier:          9jOAwOUvNHeVxuC4jYpwo6i+h1wzqRVlrestsRn2UnM=
Subject key identifier:   80:81:60:74:35:87:E2:0C:D5:40:7E:E7:7A:62:CB:4A:07:8F:C8:18
Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
Certificate issuer:       /CN=22c152606125eb66d522263fa03109bbf0bba3da
Certificate serial:       0198D660FED6D77AACD5EA8F6DEFDA22024E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 10:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:17 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:17 +0000
Files and hashes:         1: IsFSYGEl62bVIiY_oDEJu_C7o9o.crl (hash: xw4Roq79PCrxApayEylW47yxgyyh+sPnZ+aZ+5j+K44=)
                          2: sY4zDGKaTiswT3v9bquB0z3xZ38.roa (hash: UFeTme0jN/PK2GkSjMta2wryPzRGN56pgsmPYrOPfD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:fe:d6:d7:7a:ac:d5:ea:8f:6d:ef:da:22:02:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da
        Validity
            Not Before: Aug 23 10:02:17 2025 GMT
            Not After : Aug 24 10:02:17 2025 GMT
        Subject: CN=808160743587e20cd5407ee77a62cb4a078fc818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:a0:df:33:4e:78:a4:cc:22:41:05:7e:5f:
                    a0:d0:49:16:57:e0:32:e5:32:ab:c4:8d:28:55:e8:
                    22:d2:67:4b:63:1f:0d:c9:17:ec:49:e3:3b:cc:9d:
                    6a:52:56:d0:09:17:4a:c7:f3:02:ce:be:3f:0d:c7:
                    6f:c1:36:a8:78:94:22:99:0d:d4:16:4c:e1:04:61:
                    0f:5b:77:fb:29:a9:81:26:ee:1b:4d:36:ac:77:02:
                    82:b0:ce:22:38:d1:58:2d:08:5e:8c:9b:dc:04:f6:
                    d3:c8:83:f4:7a:19:a6:8f:b5:36:db:7d:49:12:7f:
                    53:06:f2:de:ef:3e:33:0d:ce:51:a9:97:35:51:be:
                    24:c9:16:ae:0f:4e:a1:01:9b:1f:38:05:0a:22:e6:
                    ed:3f:78:5b:17:9f:3f:47:b9:ab:90:67:78:60:65:
                    db:18:83:5b:64:45:30:46:cb:bd:ae:88:cc:5a:0c:
                    06:55:1e:0e:b7:98:1d:c7:e0:01:5c:fd:f8:a1:a8:
                    cd:d2:14:fd:19:9a:15:df:b9:49:eb:a3:2d:16:ae:
                    ad:f5:ec:39:d0:27:e4:79:93:13:56:eb:bd:d3:36:
                    56:51:c4:31:93:db:fe:c7:75:85:7a:06:d3:9a:fd:
                    19:c3:4d:1b:ac:6e:df:7a:6c:67:6e:14:e9:11:e0:
                    af:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:81:60:74:35:87:E2:0C:D5:40:7E:E7:7A:62:CB:4A:07:8F:C8:18
            X509v3 Authority Key Identifier:
                keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:65:34:88:2f:fd:1e:1d:54:24:b3:42:ea:57:7c:21:8a:fe:
         82:2f:b2:4e:f9:e8:0a:06:cd:96:90:e1:c1:3c:5d:7f:18:77:
         04:c0:1f:61:7f:ea:0c:9b:0b:bb:fc:97:f7:83:41:25:56:04:
         15:51:63:7c:5f:d1:2b:26:71:c8:f0:ad:0d:6b:96:8a:56:2e:
         fa:64:ac:16:dc:1a:73:ce:a6:9a:f8:1b:b3:fe:dd:dc:8d:d0:
         ff:68:6f:97:96:a8:19:b2:a1:78:fe:34:e1:e8:2e:d6:2b:b9:
         f3:e7:fb:a9:86:b6:5d:48:48:de:6a:84:60:32:5f:d8:ce:07:
         1b:c3:e2:0f:c6:68:25:7c:0c:88:5b:5c:1b:73:03:7c:4d:2b:
         cf:40:73:1e:aa:78:d1:99:81:13:00:d2:09:f9:0f:9f:70:2d:
         77:67:c2:87:af:e4:5b:a3:fe:64:42:ab:39:36:29:94:66:1d:
         81:54:b9:e6:78:0f:bd:ae:e3:fb:e9:da:b6:26:44:93:98:a0:
         f2:a6:e7:24:6f:0c:3d:b6:28:8f:3e:14:38:bc:2a:dc:22:e9:
         0b:8c:46:1d:f2:0c:bb:0b:49:f6:1e:2b:e9:d0:f4:8b:b7:d4:
         7f:a3:32:30:d6:14:2c:5e:d4:93:4d:a3:25:a3:b6:24:d3:48:
         91:4e:52:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYP7W13qs1eqPbe/aIgJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzE1MjYwNjEyNWViNjZkNTIyMjYzZmEwMzEwOWJiZjBi
YmEzZGEwHhcNMjUwODIzMTAwMjE3WhcNMjUwODI0MTAwMjE3WjAzMTEwLwYDVQQD
Eyg4MDgxNjA3NDM1ODdlMjBjZDU0MDdlZTc3YTYyY2I0YTA3OGZjODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Byg3zNOeKTMIkEFfl+g0EkWV+Ay
5TKrxI0oVegi0mdLYx8NyRfsSeM7zJ1qUlbQCRdKx/MCzr4/DcdvwTaoeJQimQ3U
FkzhBGEPW3f7KamBJu4bTTasdwKCsM4iONFYLQhejJvcBPbTyIP0ehmmj7U2231J
En9TBvLe7z4zDc5RqZc1Ub4kyRauD06hAZsfOAUKIubtP3hbF58/R7mrkGd4YGXb
GINbZEUwRsu9rojMWgwGVR4Ot5gdx+ABXP34oajN0hT9GZoV37lJ66MtFq6t9ew5
0CfkeZMTVuu90zZWUcQxk9v+x3WFegbTmv0Zw00brG7femxnbhTpEeCvPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICBYHQ1h+IM1UB+53piy0oHj8gYMB8GA1UdIwQY
MBaAFCLBUmBhJetm1SImP6AxCbvwu6PaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEt
MGZlNGQ3ZjdkYjNkLzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEtMGZlNGQ3ZjdkYjNk
LzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWU0iC/9
Hh1UJLNC6ld8IYr+gi+yTvnoCgbNlpDhwTxdfxh3BMAfYX/qDJsLu/yX94NBJVYE
FVFjfF/RKyZxyPCtDWuWilYu+mSsFtwac86mmvgbs/7d3I3Q/2hvl5aoGbKheP40
4egu1iu58+f7qYa2XUhI3mqEYDJf2M4HG8PiD8ZoJXwMiFtcG3MDfE0rz0BzHqp4
0ZmBEwDSCfkPn3Atd2fCh6/kW6P+ZEKrOTYplGYdgVS55ngPva7j++natiZEk5ig
8qbnJG8MPbYojz4UOLwq3CLpC4xGHfIMuwtJ9h4r6dD0i7fUf6MyMNYULF7Uk02j
JaO2JNNIkU5Syg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:41 2025 by rpki-client