Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
File:                     aZhQBALIIVz1cQc6SVzcgMdC8sw.mft (raw, json)
Hash identifier:          Ncue2Xc07SVcNULMDwXXh8kMo+tsFtytgoq0DR48nmo=
Subject key identifier:   51:75:A7:08:FE:52:2D:B3:BD:AC:8E:0C:CE:8B:2B:D1:E9:97:20:7B
Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
Certificate issuer:       /CN=6998500402c8215cf571073a495cdc80c742f2cc
Certificate serial:       0198D40456F1CFA6C65D2DDE19B2FBF92AC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
Manifest number:          164B
Signing time:             Fri 22 Aug 2025 23:01:50 +0000
Manifest this update:     Fri 22 Aug 2025 23:01:50 +0000
Manifest next update:     Sat 23 Aug 2025 23:01:50 +0000
Files and hashes:         1: aZhQBALIIVz1cQc6SVzcgMdC8sw.crl (hash: 0ba4XxcVKhojGQIylG+3bCdK/aAOvInDZZs5e/Lmhns=)
                          2: k8TvgiNHhv0gMh1GPOWO0OlVTqY.roa (hash: NYQN/yytkqzN4XlRmytmTH29q1AoSwj6G4FODHWQARM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:56:f1:cf:a6:c6:5d:2d:de:19:b2:fb:f9:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc
        Validity
            Not Before: Aug 22 23:01:50 2025 GMT
            Not After : Aug 23 23:01:50 2025 GMT
        Subject: CN=5175a708fe522db3bdac8e0cce8b2bd1e997207b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:49:75:ef:6d:d9:5f:56:37:1e:73:42:84:
                    19:05:df:42:a3:df:e1:6f:04:e5:31:b2:83:9a:36:
                    94:36:34:0f:9d:f8:fe:55:af:a6:1f:46:cc:c0:35:
                    f9:a8:77:63:d1:e8:b8:55:5b:3a:ae:ca:62:13:8e:
                    e5:e4:7d:b0:df:b8:7d:c8:df:77:f3:c9:09:e4:45:
                    db:40:1b:c0:61:9c:3a:5c:40:9b:94:19:3b:71:2b:
                    34:fd:3c:5f:4e:5f:9c:69:68:c6:47:3d:a2:be:d7:
                    4e:63:ac:c3:57:a0:40:3f:06:57:e5:82:d0:87:bb:
                    e3:4f:c7:76:e1:36:08:f9:78:9c:b1:77:28:50:ce:
                    4a:0d:6d:99:dd:d2:0b:1f:cb:a4:35:85:f5:c5:5c:
                    58:79:bc:cc:9c:35:50:48:47:1c:bb:3e:da:50:fa:
                    ed:25:12:f7:72:e6:4a:e2:5c:d6:38:c5:50:8a:3d:
                    bb:be:98:a3:f2:38:0e:00:26:ad:36:a6:36:5a:f3:
                    b0:01:a8:ca:14:8e:25:86:bd:cb:22:e6:42:66:71:
                    3c:cf:03:77:d7:08:f5:91:83:78:ad:ac:c3:03:2f:
                    06:d6:64:06:7b:6d:11:48:e1:b3:d3:59:57:2e:99:
                    97:3d:60:a2:96:cb:d1:51:04:e3:bf:d7:bc:18:c5:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:75:A7:08:FE:52:2D:B3:BD:AC:8E:0C:CE:8B:2B:D1:E9:97:20:7B
            X509v3 Authority Key Identifier:
                keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:83:61:2c:e6:8e:6b:f6:52:eb:c0:66:16:32:8c:1b:2f:e8:
         02:7e:5c:38:9d:8a:0e:6f:22:15:22:73:f1:61:69:91:ce:44:
         90:f1:51:0b:87:d2:df:79:d6:73:bc:36:5b:6b:b6:e3:6b:c6:
         b6:55:00:8f:e7:15:a0:de:73:bf:fd:7a:4e:1a:d5:07:b9:62:
         b9:93:e8:d0:ed:67:d9:90:6b:05:fc:e6:59:d5:8a:ad:2b:de:
         ba:96:ef:4c:57:ee:53:50:d3:40:73:b4:93:e9:7b:fc:61:e8:
         bd:91:ed:57:f5:56:63:fe:84:92:e2:d8:78:32:83:e8:b5:60:
         e1:b7:d5:ab:bc:4e:79:e3:5f:39:1a:3a:95:d3:5d:f9:b2:98:
         99:a7:48:0e:1a:00:fb:a1:6d:b2:6d:6e:45:a6:f6:17:a2:92:
         53:64:ec:87:12:33:36:08:8d:e8:af:98:1d:70:0a:b8:92:16:
         90:0f:8b:db:6d:ce:be:ce:7c:a3:06:45:95:3a:31:44:ee:34:
         e8:70:db:43:79:62:d2:38:8b:c5:44:fc:37:a7:69:ac:ab:7b:
         83:e2:92:dd:08:30:65:bc:af:f5:59:40:44:ff:23:9c:63:9a:
         ad:23:42:7f:d7:10:d9:a2:29:d0:5b:74:59:94:c8:b8:5d:83:
         97:eb:af:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBFbxz6bGXS3eGbL7+SrAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTg1MDA0MDJjODIxNWNmNTcxMDczYTQ5NWNkYzgwYzc0
MmYyY2MwHhcNMjUwODIyMjMwMTUwWhcNMjUwODIzMjMwMTUwWjAzMTEwLwYDVQQD
Eyg1MTc1YTcwOGZlNTIyZGIzYmRhYzhlMGNjZThiMmJkMWU5OTcyMDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllxJde9t2V9WNx5zQoQZBd9Co9/h
bwTlMbKDmjaUNjQPnfj+Va+mH0bMwDX5qHdj0ei4VVs6rspiE47l5H2w37h9yN93
88kJ5EXbQBvAYZw6XECblBk7cSs0/TxfTl+caWjGRz2ivtdOY6zDV6BAPwZX5YLQ
h7vjT8d24TYI+XicsXcoUM5KDW2Z3dILH8ukNYX1xVxYebzMnDVQSEccuz7aUPrt
JRL3cuZK4lzWOMVQij27vpij8jgOACatNqY2WvOwAajKFI4lhr3LIuZCZnE8zwN3
1wj1kYN4razDAy8G1mQGe20RSOGz01lXLpmXPWCilsvRUQTjv9e8GMVtJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFF1pwj+Ui2zvayODM6LK9HplyB7MB8GA1UdIwQY
MBaAFGmYUAQCyCFc9XEHOklc3IDHQvLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpoUUJBTElJVnoxY1FjNlNWemNnTWRDOHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wNTdhZTgtMGNiNy00ZTE0LThhNWIt
MTg5MDI4ZjMzOTZjLzEvYVpoUUJBTElJVnoxY1FjNlNWemNnTWRDOHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wNTdhZTgtMGNiNy00ZTE0LThhNWItMTg5MDI4ZjMzOTZj
LzEvYVpoUUJBTElJVnoxY1FjNlNWemNnTWRDOHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAINhLOaO
a/ZS68BmFjKMGy/oAn5cOJ2KDm8iFSJz8WFpkc5EkPFRC4fS33nWc7w2W2u242vG
tlUAj+cVoN5zv/16ThrVB7liuZPo0O1n2ZBrBfzmWdWKrSveupbvTFfuU1DTQHO0
k+l7/GHovZHtV/VWY/6EkuLYeDKD6LVg4bfVq7xOeeNfORo6ldNd+bKYmadIDhoA
+6Ftsm1uRab2F6KSU2TshxIzNgiN6K+YHXAKuJIWkA+L223Ovs58owZFlToxRO40
6HDbQ3li0jiLxUT8N6dprKt7g+KS3QgwZbyv9VlARP8jnGOarSNCf9cQ2aIp0Ft0
WZTIuF2Dl+uvYA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:49 2025 by rpki-client