Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
File:                     C-d565C-fVvgwdxIps0j29Q7l8g.mft (raw, json)
Hash identifier:          dNyK/V+DKBz9bnzrghcLE4JiTcHWK1ZrV5wT+BEvejE=
Subject key identifier:   D4:CC:0A:33:41:78:61:58:D5:CF:FB:FC:0A:29:0C:28:16:AF:72:5C
Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
Certificate issuer:       /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Certificate serial:       0198D515A9D53BE274DED6C1FAA00BBCAEBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 04:00:23 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:23 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:23 +0000
Files and hashes:         1: C-d565C-fVvgwdxIps0j29Q7l8g.crl (hash: fyPreSGakkNFhCIsNZ2DFxwDw1PkXT29bQ0DxYNpCFI=)
                          2: x1_M_bS9TlyMefn7CSi3G_mxYag.roa (hash: r//WWHJ2T37fR9nqbc3jvubetwXeg8fgWHiHdZB+Qv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:a9:d5:3b:e2:74:de:d6:c1:fa:a0:0b:bc:ae:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
        Validity
            Not Before: Aug 23 04:00:23 2025 GMT
            Not After : Aug 24 04:00:23 2025 GMT
        Subject: CN=d4cc0a3341786158d5cffbfc0a290c2816af725c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c2:c3:07:15:33:9e:b0:99:45:ca:46:88:7a:
                    e2:02:a4:67:2c:93:7c:c7:31:bd:42:f0:fb:d2:e8:
                    be:e0:af:c5:43:e6:a3:b2:9b:7e:71:8a:cb:24:41:
                    e4:ef:23:bb:67:9e:24:18:ad:aa:f7:ba:fe:62:97:
                    53:ba:41:f5:28:a7:00:45:fc:0a:64:60:b8:4c:ff:
                    d8:55:9a:d1:32:db:f0:a7:da:b5:cd:43:cc:e8:01:
                    b7:33:5d:ad:f9:3a:e8:3b:d1:8a:b0:0b:d7:cb:27:
                    0b:a9:7d:92:a5:85:bc:12:fe:d5:80:66:a1:17:9e:
                    bc:46:93:d8:b0:2f:af:ff:db:6e:07:07:ad:fc:9f:
                    ea:0b:55:32:22:6c:4e:dd:63:ae:af:b1:4c:06:89:
                    71:64:09:45:e7:83:fd:af:66:df:4b:e1:2a:77:d0:
                    6f:ba:d0:d8:96:71:8d:f5:c7:80:6b:bb:ba:bd:ae:
                    78:0e:18:40:74:6e:11:b1:1e:c2:d2:61:c3:c5:e0:
                    4b:1f:bf:57:da:bb:d0:ad:74:ea:7b:b2:a4:e5:77:
                    aa:52:d0:9b:d4:7e:72:ea:97:d6:d3:3f:c8:f5:64:
                    6c:97:3d:c3:c4:76:3f:33:49:41:ec:c1:87:22:85:
                    14:0b:ff:ad:a6:b2:c1:e5:29:ca:63:8f:3e:de:7b:
                    9a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CC:0A:33:41:78:61:58:D5:CF:FB:FC:0A:29:0C:28:16:AF:72:5C
            X509v3 Authority Key Identifier:
                keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:20:5f:dc:82:75:e7:28:dc:56:6d:4c:e9:8f:40:3d:7f:28:
         90:6c:4b:b4:98:37:e4:9f:1f:7b:85:46:32:73:f3:82:7f:80:
         7f:90:03:17:88:d4:61:e7:f1:68:f4:85:d8:a9:a9:79:6c:f2:
         13:2a:5e:3b:fa:8e:14:32:b0:6d:2f:6b:0f:e1:12:c7:ab:05:
         c6:ef:0b:5a:6e:47:eb:4b:95:94:f2:39:09:29:c8:b0:00:60:
         c9:7b:e9:b8:4a:66:7e:b1:8d:c4:ca:a2:79:14:a6:5b:a4:d9:
         1e:59:0d:60:4d:12:32:42:73:bc:e2:81:90:b3:12:5d:8e:cc:
         d6:99:c1:43:46:72:77:d7:73:ba:a5:d8:fb:15:b1:95:c7:f3:
         70:da:dd:7d:9d:6e:fe:e6:e3:b0:34:5d:fb:68:5b:b3:93:ef:
         77:71:53:41:64:51:17:92:80:d2:93:48:ed:a7:91:60:ab:01:
         fb:db:62:fa:76:b1:70:19:72:85:d0:31:ec:b8:df:f1:a6:61:
         64:e9:92:0f:d8:6e:bb:0e:99:43:3f:58:67:58:b7:7f:ac:5e:
         fd:56:b6:92:da:57:6c:60:22:a8:79:ff:5b:24:53:83:eb:41:
         9c:fe:d9:f5:31:18:4c:ee:80:b6:33:03:10:67:88:3b:e3:f6:
         f3:23:82:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFanVO+J03tbB+qALvK69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZTc3OWViOTBiZTdkNWJlMGMxZGM0OGE2Y2QyM2RiZDQz
Yjk3YzgwHhcNMjUwODIzMDQwMDIzWhcNMjUwODI0MDQwMDIzWjAzMTEwLwYDVQQD
EyhkNGNjMGEzMzQxNzg2MTU4ZDVjZmZiZmMwYTI5MGMyODE2YWY3MjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8LDBxUznrCZRcpGiHriAqRnLJN8
xzG9QvD70ui+4K/FQ+ajspt+cYrLJEHk7yO7Z54kGK2q97r+YpdTukH1KKcARfwK
ZGC4TP/YVZrRMtvwp9q1zUPM6AG3M12t+TroO9GKsAvXyycLqX2SpYW8Ev7VgGah
F568RpPYsC+v/9tuBwet/J/qC1UyImxO3WOur7FMBolxZAlF54P9r2bfS+Eqd9Bv
utDYlnGN9ceAa7u6va54DhhAdG4RsR7C0mHDxeBLH79X2rvQrXTqe7Kk5XeqUtCb
1H5y6pfW0z/I9WRslz3DxHY/M0lB7MGHIoUUC/+tprLB5SnKY48+3nuaewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTMCjNBeGFY1c/7/AopDCgWr3JcMB8GA1UdIwQY
MBaAFAvneeuQvn1b4MHcSKbNI9vUO5fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1kNTY1Qy1mVnZnd2R4SXBzMGoyOVE3bDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jZjhiMTQtYjdmNy00MDVhLWI2NmUt
Mzg3YThmYmIxMDQyLzEvQy1kNTY1Qy1mVnZnd2R4SXBzMGoyOVE3bDhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jZjhiMTQtYjdmNy00MDVhLWI2NmUtMzg3YThmYmIxMDQy
LzEvQy1kNTY1Qy1mVnZnd2R4SXBzMGoyOVE3bDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyBf3IJ1
5yjcVm1M6Y9APX8okGxLtJg35J8fe4VGMnPzgn+Af5ADF4jUYefxaPSF2KmpeWzy
EypeO/qOFDKwbS9rD+ESx6sFxu8LWm5H60uVlPI5CSnIsABgyXvpuEpmfrGNxMqi
eRSmW6TZHlkNYE0SMkJzvOKBkLMSXY7M1pnBQ0Zyd9dzuqXY+xWxlcfzcNrdfZ1u
/ubjsDRd+2hbs5Pvd3FTQWRRF5KA0pNI7aeRYKsB+9ti+naxcBlyhdAx7Ljf8aZh
ZOmSD9huuw6ZQz9YZ1i3f6xe/Va2ktpXbGAiqHn/WyRTg+tBnP7Z9TEYTO6AtjMD
EGeIO+P28yOCaw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:33 2025 by rpki-client