Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File:                     Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier:          QaWf6yrhsjxGasItYTro1VQX93ZezAisd6TGGSXFbec=
Subject key identifier:   A5:39:16:A6:16:29:91:69:37:52:12:C1:CC:50:39:5D:C0:AF:A1:B5
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer:       /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial:       0198D4A84000EC6A13ECE5327EC36EE90E02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 02:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:52 +0000
Files and hashes:         1: DkHIx2qomTMRxi5txwcyeQJUMC4.roa (hash: aUooC/gZIs2knffE4CSZxz4fOwgHg5KB9hMX38VnhFA=)
                          2: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=)
                          3: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: wwTqGALoGtC9/7dGwGcffmftHehwYVk13tTFUSsTwWk=)
                          4: YPWPyR2PrV8C7bZPatIE86usWRg.roa (hash: oPtwylk/25k8zLps+NlaEoKI3y6QpsbDE1m1nmcztaE=)
                          5: bOO4UAkgvXb-rMii_89NfL-6bTI.roa (hash: NL1lyy08FzW+vpLdiv9to5VdvnEWSxR942DR56bOFW4=)
                          6: gVKSPISn7WOtLgcYX82T_CB0k8w.roa (hash: Ym9+8pOqwFm62YT9wllYnMmkH1dr3oLLznDhqgDjeLA=)
                          7: gincnI_gYVCe8a-UMsJw8uGTHk4.roa (hash: /B3bMOP6Q4JtPQrlZm8v7Y12jGfc6csMXusEpKv3HP0=)
                          8: pjijzSQUxqzDP8xeNUFbC_-9WRc.roa (hash: idDVoTbAeotEcfiyv3LfRPsc1HSc8qISJahqgpNH+A0=)
                          9: sbcX3dD-IzvBjjiuOceGuIya184.roa (hash: OgKPXFMnHlbOLdXfkb/OHlLV/72L9AOodiZ4Hgh7ss4=)
                          10: tmZ0o6fg7g2ZAFjY0aabWuJemGY.roa (hash: a2zNXAKUIiHFRxrlG+HegKhw0N5htHdLY3b/L14Vpl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:40:00:ec:6a:13:ec:e5:32:7e:c3:6e:e9:0e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
        Validity
            Not Before: Aug 23 02:00:52 2025 GMT
            Not After : Aug 24 02:00:52 2025 GMT
        Subject: CN=a53916a616299169375212c1cc50395dc0afa1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:47:73:99:04:98:49:14:5a:a4:99:fe:3b:
                    cf:c0:af:a4:bc:6e:33:63:52:01:24:f0:3e:9b:b5:
                    1c:01:25:39:9c:27:e7:af:68:c8:60:5d:e4:7c:10:
                    0f:d8:df:90:e9:f7:12:d9:c4:af:af:03:bc:d0:1b:
                    a7:37:99:9d:27:4f:39:e0:be:58:b4:30:0b:6d:55:
                    fe:fc:45:a3:71:a6:f8:6d:4b:a3:14:16:c0:23:d6:
                    60:a8:72:ec:97:c2:d6:32:43:ff:d9:a0:01:29:4a:
                    c0:ff:5e:f0:fe:45:b8:79:0e:61:13:97:d2:fb:8a:
                    02:24:19:14:2d:2b:a6:12:44:68:aa:65:03:35:e1:
                    08:cd:8a:2d:20:d6:4f:5c:fd:6a:ce:bb:e2:7c:75:
                    cf:18:b7:4c:42:d4:fa:85:9a:f9:7d:62:08:bc:fe:
                    8a:b4:05:5d:50:60:63:8e:27:01:2c:d9:b6:8f:a8:
                    32:bd:dd:06:bf:a9:51:aa:9b:f4:b9:fd:7d:15:85:
                    c9:76:a2:ad:0d:78:dc:c8:6e:70:64:5e:d4:90:06:
                    b4:ca:c0:91:16:fa:69:3b:5d:40:3b:e8:66:21:c6:
                    13:59:e0:ea:35:6d:e9:ed:2a:a8:67:4b:2d:30:02:
                    98:f0:99:05:60:c9:fc:78:79:3e:c9:fa:1c:84:a2:
                    4a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:39:16:A6:16:29:91:69:37:52:12:C1:CC:50:39:5D:C0:AF:A1:B5
            X509v3 Authority Key Identifier:
                keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:94:20:58:12:c9:db:80:97:4f:61:27:92:b2:e0:0c:4b:a8:
         fb:0f:f0:de:c4:30:cd:df:32:17:04:fd:33:56:9e:d9:d6:10:
         a0:aa:23:5e:45:c4:1a:e6:a0:b3:32:11:b8:52:a1:23:91:7e:
         9a:9f:6a:80:76:3a:50:75:25:d7:53:b8:01:76:7d:20:c0:73:
         9b:8c:51:18:77:b7:37:e6:e8:60:0e:b4:50:69:d2:10:7e:ec:
         36:9c:c4:5b:bd:2c:f5:90:0b:8a:7b:34:51:fc:53:f6:8b:e2:
         00:d2:44:a7:a1:61:cf:24:84:2e:e1:c8:5b:3f:c8:d5:ab:08:
         f9:92:c1:9d:41:0e:b7:a0:23:c4:37:9e:a4:6f:de:a9:bf:82:
         9d:3c:96:5a:94:66:28:15:5a:ea:6d:8b:73:f6:f6:a9:2a:44:
         f9:d8:5d:72:66:ea:59:6c:4c:84:f6:b7:58:2e:66:d2:3a:86:
         a0:41:d8:45:b5:09:84:be:bf:65:12:cf:58:18:74:64:b3:2e:
         ea:04:f0:1c:4e:b2:58:aa:76:b4:41:8e:56:b2:49:9d:4e:1a:
         69:a0:68:6b:69:a7:a9:42:df:38:83:6f:8d:4e:95:0e:c4:0c:
         2b:0d:10:7e:47:33:0a:f9:e1:ec:3c:b1:36:cf:de:eb:78:53:
         67:a4:71:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqEAA7GoT7OUyfsNu6Q4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDczMzZmYTkxNTcyMWNlM2JmZWUyMTdmNGU5OTE2NGRi
OTUzMmIwHhcNMjUwODIzMDIwMDUyWhcNMjUwODI0MDIwMDUyWjAzMTEwLwYDVQQD
EyhhNTM5MTZhNjE2Mjk5MTY5Mzc1MjEyYzFjYzUwMzk1ZGMwYWZhMWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzJHc5kEmEkUWqSZ/jvPwK+kvG4z
Y1IBJPA+m7UcASU5nCfnr2jIYF3kfBAP2N+Q6fcS2cSvrwO80BunN5mdJ0854L5Y
tDALbVX+/EWjcab4bUujFBbAI9ZgqHLsl8LWMkP/2aABKUrA/17w/kW4eQ5hE5fS
+4oCJBkULSumEkRoqmUDNeEIzYotINZPXP1qzrvifHXPGLdMQtT6hZr5fWIIvP6K
tAVdUGBjjicBLNm2j6gyvd0Gv6lRqpv0uf19FYXJdqKtDXjcyG5wZF7UkAa0ysCR
FvppO11AO+hmIcYTWeDqNW3p7SqoZ0stMAKY8JkFYMn8eHk+yfochKJK8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU5FqYWKZFpN1ISwcxQOV3Ar6G1MB8GA1UdIwQY
MBaAFF3XM2+pFXIc47/uIX9OmRZNuVMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEt
OGM0YmM0NTkyN2EzLzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEtOGM0YmM0NTkyN2Ez
LzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZQgWBLJ
24CXT2EnkrLgDEuo+w/w3sQwzd8yFwT9M1ae2dYQoKojXkXEGuagszIRuFKhI5F+
mp9qgHY6UHUl11O4AXZ9IMBzm4xRGHe3N+boYA60UGnSEH7sNpzEW70s9ZALins0
UfxT9oviANJEp6FhzySELuHIWz/I1asI+ZLBnUEOt6AjxDeepG/eqb+CnTyWWpRm
KBVa6m2Lc/b2qSpE+dhdcmbqWWxMhPa3WC5m0jqGoEHYRbUJhL6/ZRLPWBh0ZLMu
6gTwHE6yWKp2tEGOVrJJnU4aaaBoa2mnqULfOINvjU6VDsQMKw0QfkczCvnh7Dyx
Ns/e63hTZ6RxEA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:37 2025 by rpki-client