Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
File:                     1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json)
Hash identifier:          m2rG4UAozythN78T40xlbN1rmfNti6MdJZtKPlSQEWs=
Subject key identifier:   BB:DF:A4:3D:2D:E4:44:55:2E:45:40:78:28:0D:F4:98:AD:DD:ED:C4
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Certificate issuer:       /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial:       0198D5BC2E340583509FE28264BFFBF93990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 07:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:16 +0000
Files and hashes:         1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: GFsfgGULerEr6T6uVYqYtSfgS8gY2kQ210825KvHe7A=)
                          2: lWvdh1tW9Nr29e037SncsLGwjfI.roa (hash: j1dUTiHWBt3aDo99E5yf928X8VvKCbJydPoVbx3OYLA=)
                          3: lv5jL_rYGh7Uv0rWQaR0zgeQbZY.roa (hash: aiK+jeojasCoIONEiBsew2dpW6Sl1vqGI4o1s3u6sNg=)
                          4: tpwCcvQj5buTsmFRUmHDkFF9loo.roa (hash: mW6eLdMENzR4XVFpPs8//f09RPHYqnyv9VrQnjo145o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:2e:34:05:83:50:9f:e2:82:64:bf:fb:f9:39:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
        Validity
            Not Before: Aug 23 07:02:16 2025 GMT
            Not After : Aug 24 07:02:16 2025 GMT
        Subject: CN=bbdfa43d2de444552e454078280df498adddedc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:44:50:4c:f5:1a:3d:7f:df:81:e3:1b:00:
                    c6:a4:bf:28:08:44:f0:bd:94:2c:87:db:d2:37:16:
                    98:a4:62:1c:4e:a3:da:7c:58:35:e1:42:67:17:38:
                    08:38:35:86:38:f5:d0:00:6f:f7:ad:96:e8:24:f2:
                    4d:fb:5a:78:08:e7:73:fb:1f:c1:b9:2d:ae:62:20:
                    35:6a:2c:84:cc:05:63:0f:b7:37:75:d9:0b:5b:7e:
                    a2:35:46:c7:a3:e6:db:2d:ac:92:90:9e:13:a4:1f:
                    04:1b:18:00:6c:a0:ea:89:9e:7f:ec:8f:83:a0:73:
                    e4:ea:79:3a:41:2b:97:dd:08:38:07:5a:47:35:db:
                    4e:40:79:30:64:30:b0:18:58:45:19:16:f1:74:64:
                    c9:91:5f:6a:bf:b8:73:c9:15:ab:b6:87:83:20:fb:
                    8e:38:de:35:45:1c:51:60:17:76:66:f3:13:98:4f:
                    35:6a:7e:01:25:52:5c:75:f8:8c:fa:f2:0c:64:7e:
                    cd:12:b2:cf:21:ca:05:a9:ee:01:f4:c1:e1:aa:ee:
                    f1:ce:c4:6e:3e:ee:f0:ec:55:c9:63:93:8f:c0:e6:
                    9d:b3:94:d5:04:76:22:6c:fd:1d:ec:b3:d4:6b:b7:
                    d7:97:de:54:18:ff:a0:9d:92:6b:88:28:d9:c0:1a:
                    87:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DF:A4:3D:2D:E4:44:55:2E:45:40:78:28:0D:F4:98:AD:DD:ED:C4
            X509v3 Authority Key Identifier:
                keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:df:57:b4:fa:bb:1d:27:24:92:3e:fe:e9:1b:7c:ea:83:77:
         52:74:45:ff:11:b8:cf:3c:32:54:c4:45:e7:31:e9:fc:c4:f9:
         60:24:24:38:14:e2:2f:98:9a:2e:ec:52:2b:96:f3:67:54:66:
         9a:7d:14:3b:4d:d4:ca:9c:42:86:33:c0:e7:b4:93:3d:36:d2:
         2d:d0:75:de:71:3b:21:96:72:df:98:f7:be:e6:74:4b:08:14:
         a4:c9:c6:27:87:e0:7e:d0:bc:35:ce:12:e2:65:26:27:ac:84:
         75:ef:f5:ec:6f:52:44:0c:7a:ec:74:eb:3f:f0:eb:34:63:0c:
         0a:e6:fe:e7:7f:d8:47:ba:01:1c:e0:0a:08:42:48:7d:57:b9:
         ba:2e:36:18:21:6d:35:14:40:8a:b8:8c:80:92:1d:5d:01:e8:
         eb:c8:ec:cd:13:cb:21:7a:3a:e2:32:61:e1:01:03:94:3b:90:
         0a:f3:af:ca:03:aa:e7:e1:07:41:4a:69:4d:5d:27:a1:b4:b2:
         ba:83:35:72:14:c0:2f:ca:2c:5a:43:97:b7:1c:c1:d6:bd:91:
         1f:ae:b6:c7:01:04:de:e6:d9:80:af:13:02:25:4c:f5:76:bf:
         c1:ce:19:81:70:d8:72:46:f0:38:0a:19:31:52:c6:45:32:11:
         e3:2e:d6:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvC40BYNQn+KCZL/7+TmQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OTVjYjg2NTg2Y2JmZDI0NjJhZmEwNTJjOTZhMjVjMTYy
ODMwYTgwHhcNMjUwODIzMDcwMjE2WhcNMjUwODI0MDcwMjE2WjAzMTEwLwYDVQQD
EyhiYmRmYTQzZDJkZTQ0NDU1MmU0NTQwNzgyODBkZjQ5OGFkZGRlZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sZEUEz1Gj1/34HjGwDGpL8oCETw
vZQsh9vSNxaYpGIcTqPafFg14UJnFzgIODWGOPXQAG/3rZboJPJN+1p4COdz+x/B
uS2uYiA1aiyEzAVjD7c3ddkLW36iNUbHo+bbLaySkJ4TpB8EGxgAbKDqiZ5/7I+D
oHPk6nk6QSuX3Qg4B1pHNdtOQHkwZDCwGFhFGRbxdGTJkV9qv7hzyRWrtoeDIPuO
ON41RRxRYBd2ZvMTmE81an4BJVJcdfiM+vIMZH7NErLPIcoFqe4B9MHhqu7xzsRu
Pu7w7FXJY5OPwOads5TVBHYibP0d7LPUa7fXl95UGP+gnZJriCjZwBqHFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvfpD0t5ERVLkVAeCgN9Jit3e3EMB8GA1UdIwQY
MBaAFNaVy4ZYbL/SRir6BSyWolwWKDCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTkt
YTVjZDgxYjVlMDBiLzEvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTktYTVjZDgxYjVlMDBi
LzEvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnN9XtPq7
HSckkj7+6Rt86oN3UnRF/xG4zzwyVMRF5zHp/MT5YCQkOBTiL5iaLuxSK5bzZ1Rm
mn0UO03UypxChjPA57STPTbSLdB13nE7IZZy35j3vuZ0SwgUpMnGJ4fgftC8Nc4S
4mUmJ6yEde/17G9SRAx67HTrP/DrNGMMCub+53/YR7oBHOAKCEJIfVe5ui42GCFt
NRRAiriMgJIdXQHo68jszRPLIXo64jJh4QEDlDuQCvOvygOq5+EHQUppTV0nobSy
uoM1chTAL8osWkOXtxzB1r2RH662xwEE3ubZgK8TAiVM9Xa/wc4ZgXDYckbwOAoZ
MVLGRTIR4y7WBQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:24:18 2025 by rpki-client