Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          v/jt5BrXvObDjYBIslfu/CE1rDKG/VlyuyXeRoO7vCQ=
Subject key identifier:   59:22:E0:E4:1A:E3:C7:C5:88:5F:9B:C8:87:FC:7E:DD:3B:62:74:76
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       0198D472A53C004E48E97ADCD1BB6F9C9FF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          165E
Signing time:             Sat 23 Aug 2025 01:02:19 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:19 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:19 +0000
Files and hashes:         1: 8YTLS_1mFrh55A62a2mBS518iAg.roa (hash: b+QiLic550TpA6gu3XGSKkJ7N3n9C2SCnWL5+/s9Vr0=)
                          2: W7Jge6ghVHbAsdaSdITf8b_3aVQ.roa (hash: eGgmHuw9ea32mMeNaCzUMNBUiaRSSoMmW6d0dFZkj5k=)
                          3: cOy-CAvP6otn2DzWCwsJGJTydS0.roa (hash: 0R2NVVpBG6pXvGjfU3eH+cXTry9Vt5bvO9CjIpEY18Q=)
                          4: oz-gpVKEUvOG9fOS01I-1A1aI-Y.roa (hash: 0NG9CVuIlSmbnaNtm7cZXsbOMNvpcIJrtm880P+NpNc=)
                          5: q9IaYjcr5RObBrW7hey_hpAIvpg.roa (hash: 2MfulwyVlfgKmQicfk78T3sq4tPTxMleY1Rp41M0dbI=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: LUErTkNi9MX2XdftMrioUt+RZ3spjZXHzJy2RYhy8Ls=)
                          7: vcy7WC8JEz9GH2wrI2xSRGFOQ8M.roa (hash: ppq+e7eDeIpGmxTNUn9DHommsEQqQfIeqXbSiT0TQpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:a5:3c:00:4e:48:e9:7a:dc:d1:bb:6f:9c:9f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: Aug 23 01:02:19 2025 GMT
            Not After : Aug 24 01:02:19 2025 GMT
        Subject: CN=5922e0e41ae3c7c5885f9bc887fc7edd3b627476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:19:5d:47:50:54:c7:f1:dd:10:50:65:ad:
                    1b:c2:43:cf:a2:0e:96:4f:8a:01:f7:84:09:06:69:
                    f2:05:c3:ce:d1:1c:68:42:96:be:09:c5:8a:37:08:
                    73:13:4f:06:ed:ca:ef:0c:fe:32:6c:89:de:26:bb:
                    a1:a3:6d:e6:83:a7:38:0b:60:47:6e:89:d4:04:7d:
                    97:98:a8:bc:c6:d0:ff:8e:22:44:70:ea:52:45:0a:
                    54:93:d3:b7:df:18:74:a4:41:97:b7:85:19:35:38:
                    bf:c4:78:bf:e1:0c:58:57:e9:55:23:1f:44:0d:0a:
                    e9:3c:ab:1f:79:51:91:29:2a:71:3c:b9:c2:95:41:
                    64:f8:5c:45:9f:8f:e7:54:02:e4:75:f8:81:8b:b0:
                    a2:78:d0:7d:66:1b:c5:5f:91:86:f4:a4:9e:2d:2c:
                    ed:38:5c:63:b6:fb:25:28:3e:04:05:36:c3:5e:2b:
                    be:66:dc:56:06:75:22:22:9f:fa:bd:b9:fb:f9:4d:
                    e4:c0:96:78:cd:37:f6:64:67:be:b7:65:5f:97:72:
                    5b:c8:51:9e:41:74:13:fd:c9:89:de:72:e2:1c:7b:
                    7c:cc:40:8f:0c:f4:20:d4:ee:63:fc:2b:e3:8a:d1:
                    a9:5e:80:db:5a:8f:74:75:74:04:ac:17:6c:64:65:
                    e9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:22:E0:E4:1A:E3:C7:C5:88:5F:9B:C8:87:FC:7E:DD:3B:62:74:76
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ac:de:85:7d:ad:61:f2:6a:72:cc:67:ea:98:dd:72:d1:e6:
         01:98:85:a2:94:b6:ec:ff:dd:65:c4:33:ec:da:3f:86:ac:3c:
         5e:1e:fa:53:ec:af:b5:ab:96:d0:fb:38:e0:12:54:07:09:c1:
         74:ef:ed:a4:77:ba:8c:c0:a5:6f:68:ca:b3:15:8c:96:61:eb:
         49:c7:62:fd:24:78:be:10:57:0f:a7:2d:ab:66:19:84:26:d2:
         07:6d:23:2f:df:c5:22:8f:60:29:c8:87:4c:07:60:b6:a3:3a:
         0f:c2:b4:df:5e:21:ff:4b:dd:47:07:6f:3d:93:1f:70:ea:b9:
         7d:60:4e:20:31:6d:7a:08:58:32:10:f5:00:5d:59:47:bc:ae:
         bc:ce:18:38:50:b3:23:26:76:8a:ca:b6:7e:1c:11:8f:b8:55:
         fe:05:19:9f:4d:d9:06:60:b4:98:a8:54:bb:37:68:69:93:59:
         ab:fe:d1:fa:13:56:5c:76:44:cc:46:53:b4:a4:40:b8:4a:6e:
         8c:f1:e9:6b:b5:c9:91:0f:79:fc:c5:60:61:d5:91:6e:79:15:
         9a:89:09:99:09:a7:4a:f7:fc:9c:5d:28:e1:01:6f:e0:18:7f:
         75:61:c7:2c:04:63:87:bf:a2:75:11:18:a1:9d:2a:53:83:e4:
         bf:47:17:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcqU8AE5I6Xrc0btvnJ/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjUwODIzMDEwMjE5WhcNMjUwODI0MDEwMjE5WjAzMTEwLwYDVQQD
Eyg1OTIyZTBlNDFhZTNjN2M1ODg1ZjliYzg4N2ZjN2VkZDNiNjI3NDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbEZXUdQVMfx3RBQZa0bwkPPog6W
T4oB94QJBmnyBcPO0RxoQpa+CcWKNwhzE08G7crvDP4ybIneJruho23mg6c4C2BH
bonUBH2XmKi8xtD/jiJEcOpSRQpUk9O33xh0pEGXt4UZNTi/xHi/4QxYV+lVIx9E
DQrpPKsfeVGRKSpxPLnClUFk+FxFn4/nVALkdfiBi7CieNB9ZhvFX5GG9KSeLSzt
OFxjtvslKD4EBTbDXiu+ZtxWBnUiIp/6vbn7+U3kwJZ4zTf2ZGe+t2Vfl3JbyFGe
QXQT/cmJ3nLiHHt8zECPDPQg1O5j/CvjitGpXoDbWo90dXQErBdsZGXp/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFki4OQa48fFiF+byIf8ft07YnR2MB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6zehX2t
YfJqcsxn6pjdctHmAZiFopS27P/dZcQz7No/hqw8Xh76U+yvtauW0Ps44BJUBwnB
dO/tpHe6jMClb2jKsxWMlmHrScdi/SR4vhBXD6ctq2YZhCbSB20jL9/FIo9gKciH
TAdgtqM6D8K0314h/0vdRwdvPZMfcOq5fWBOIDFteghYMhD1AF1ZR7yuvM4YOFCz
IyZ2isq2fhwRj7hV/gUZn03ZBmC0mKhUuzdoaZNZq/7R+hNWXHZEzEZTtKRAuEpu
jPHpa7XJkQ95/MVgYdWRbnkVmokJmQmnSvf8nF0o4QFv4Bh/dWHHLARjh7+idREY
oZ0qU4Pkv0cXLg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:15 2025 by rpki-client