Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
File:                     FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json)
Hash identifier:          UagbzEhrrkB1n02JY1TfRqGHRitO+dlOiNC3m2sXsEY=
Subject key identifier:   C0:D2:8F:EA:31:81:A4:B2:FF:72:EA:3E:E0:AC:23:2B:B1:01:48:6A
Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Certificate issuer:       /CN=153d757b77067befd9446694748ad2b04e97b38c
Certificate serial:       0198D4E0AAC67C2A9B3AB3A7AA822FBB907B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 03:02:30 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:30 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:30 +0000
Files and hashes:         1: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: r1OU8pJHjvPxg2aVMeQ0AsEMDu53cdeJiDRVhZ0xdgE=)
                          2: r7lFXPa807MfacPLjTifqcio5eE.roa (hash: uWVAVnCuqwCuf5rQTJ4k2G3R8ObiUvivLPLiht6CJGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:aa:c6:7c:2a:9b:3a:b3:a7:aa:82:2f:bb:90:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c
        Validity
            Not Before: Aug 23 03:02:30 2025 GMT
            Not After : Aug 24 03:02:30 2025 GMT
        Subject: CN=c0d28fea3181a4b2ff72ea3ee0ac232bb101486a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:75:ed:a7:8c:ff:1e:40:b0:aa:80:7b:08:
                    b0:5f:93:e1:d0:69:b5:f7:01:80:99:27:0f:ec:8a:
                    20:11:b0:0b:49:d5:b3:47:4c:28:bb:9d:db:63:f0:
                    75:f3:8a:b2:0a:00:85:a0:9a:80:f4:7e:30:ab:72:
                    b2:07:a9:9c:99:35:76:10:aa:a8:38:6a:d7:5c:60:
                    b2:21:c5:eb:e4:70:cb:87:af:2d:f1:6c:f0:54:a2:
                    00:9a:e8:ff:9b:2d:df:19:c5:d5:04:64:83:c7:f7:
                    8d:a2:2e:3c:95:a4:e1:35:1d:c0:4e:cb:b9:6d:59:
                    11:de:44:80:e6:62:cf:86:a5:60:93:2d:0e:25:60:
                    59:ab:7c:f2:6a:3f:08:92:6c:65:97:f9:af:76:c4:
                    d9:4f:40:53:3c:cb:38:17:d0:6d:cc:55:2a:00:c7:
                    8e:ac:ac:d9:af:54:94:80:35:fc:cc:8e:0c:bd:81:
                    af:f2:a2:d3:a8:0b:96:aa:54:6f:06:a0:7e:6b:8c:
                    e7:7a:76:81:4f:2a:95:b0:9b:77:e7:e5:cb:32:17:
                    82:4e:84:40:4c:d9:7d:e0:cc:9d:b4:6d:c8:76:9a:
                    38:f1:bc:3c:c2:f5:51:1a:db:01:98:ae:00:84:66:
                    17:1c:28:e0:13:8b:52:54:bb:cf:dd:f9:4e:0a:45:
                    91:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D2:8F:EA:31:81:A4:B2:FF:72:EA:3E:E0:AC:23:2B:B1:01:48:6A
            X509v3 Authority Key Identifier:
                keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:65:79:a4:ef:2a:1f:81:80:89:fe:71:e6:c9:f6:73:1d:
         cc:31:29:53:3c:a5:4e:69:35:c1:87:74:f9:99:e6:2d:2a:19:
         8c:64:04:69:12:9b:d7:5d:02:56:5f:12:07:ee:f7:4c:a9:24:
         4e:4f:d2:be:16:cd:95:16:c9:36:23:78:8f:6f:a8:da:be:35:
         66:c6:8b:46:fa:ca:68:c0:13:a0:3c:01:ff:44:70:9f:ef:8e:
         8b:cc:fe:cb:bd:c6:93:36:8f:9a:02:32:d6:f9:36:8b:b6:89:
         92:84:67:a4:ef:84:18:d6:aa:10:e0:b3:48:95:48:44:fb:8b:
         62:23:ea:f8:b8:a8:ca:dd:40:0e:fa:17:f2:8c:7a:f7:4a:d9:
         e2:8e:8c:a0:e3:66:f9:55:77:5d:21:ed:c8:93:5d:07:8e:85:
         7f:b6:4f:08:62:7c:39:64:f8:a3:4c:ab:38:ce:33:db:65:ea:
         f5:0f:40:61:71:c3:40:4d:ef:8c:04:74:f0:b9:63:4f:f0:ba:
         86:a9:8e:1e:64:cd:94:68:aa:63:23:03:ed:32:a2:bb:24:a2:
         37:b5:46:86:65:48:3d:df:62:4f:f1:df:56:64:ff:3c:2e:d2:
         f2:ae:39:ee:75:50:33:7b:22:a6:e7:17:84:28:38:56:ff:5f:
         0d:55:68:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4KrGfCqbOrOnqoIvu5B7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2Q3NTdiNzcwNjdiZWZkOTQ0NjY5NDc0OGFkMmIwNGU5
N2IzOGMwHhcNMjUwODIzMDMwMjMwWhcNMjUwODI0MDMwMjMwWjAzMTEwLwYDVQQD
EyhjMGQyOGZlYTMxODFhNGIyZmY3MmVhM2VlMGFjMjMyYmIxMDE0ODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptl17aeM/x5AsKqAewiwX5Ph0Gm1
9wGAmScP7IogEbALSdWzR0wou53bY/B184qyCgCFoJqA9H4wq3KyB6mcmTV2EKqo
OGrXXGCyIcXr5HDLh68t8WzwVKIAmuj/my3fGcXVBGSDx/eNoi48laThNR3ATsu5
bVkR3kSA5mLPhqVgky0OJWBZq3zyaj8Ikmxll/mvdsTZT0BTPMs4F9BtzFUqAMeO
rKzZr1SUgDX8zI4MvYGv8qLTqAuWqlRvBqB+a4znenaBTyqVsJt35+XLMheCToRA
TNl94MydtG3Idpo48bw8wvVRGtsBmK4AhGYXHCjgE4tSVLvP3flOCkWRvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDSj+oxgaSy/3LqPuCsIyuxAUhqMB8GA1UdIwQY
MBaAFBU9dXt3Bnvv2URmlHSK0rBOl7OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84YTk0YjktNzBmZS00NmZmLWE0ZTYt
MDE5ZTFmODQwM2RkLzEvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi84YTk0YjktNzBmZS00NmZmLWE0ZTYtMDE5ZTFmODQwM2Rk
LzEvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqBleaTv
Kh+BgIn+cebJ9nMdzDEpUzylTmk1wYd0+ZnmLSoZjGQEaRKb110CVl8SB+73TKkk
Tk/SvhbNlRbJNiN4j2+o2r41ZsaLRvrKaMAToDwB/0Rwn++Oi8z+y73GkzaPmgIy
1vk2i7aJkoRnpO+EGNaqEOCzSJVIRPuLYiPq+Lioyt1ADvoX8ox690rZ4o6MoONm
+VV3XSHtyJNdB46Ff7ZPCGJ8OWT4o0yrOM4z22Xq9Q9AYXHDQE3vjAR08LljT/C6
hqmOHmTNlGiqYyMD7TKiuySiN7VGhmVIPd9iT/HfVmT/PC7S8q457nVQM3sipucX
hCg4Vv9fDVVojg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:13 2025 by rpki-client