Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File:                     HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier:          O/jeyRB2Ihm4eluOKTo3N7D62ucJeECXw21Ki9wz048=
Subject key identifier:   CF:7E:21:BD:73:0A:13:8F:F5:E8:40:E0:66:08:65:35:69:E8:0A:21
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer:       /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial:       0198D583632F60E07B07307215CA43A5E80F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 06:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:14 +0000
Files and hashes:         1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: cku/PfU5YRFvXHlL90ZHVM3C44EZo95tnduZjK0ImDU=)
                          2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:63:2f:60:e0:7b:07:30:72:15:ca:43:a5:e8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
        Validity
            Not Before: Aug 23 06:00:14 2025 GMT
            Not After : Aug 24 06:00:14 2025 GMT
        Subject: CN=cf7e21bd730a138ff5e840e06608653569e80a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:07:1a:08:bb:b0:86:b5:9a:f2:10:08:96:
                    88:42:48:00:dc:3a:6c:af:06:ff:f1:d2:bc:90:1c:
                    00:a7:c4:c2:73:5c:12:2a:a1:de:38:98:d0:87:57:
                    ca:e2:09:ab:b9:4a:db:a1:01:a7:4b:cc:0e:18:63:
                    6b:b0:15:2a:7c:fc:41:1a:2d:e2:2c:f7:a0:fd:4a:
                    e4:82:31:4f:2a:70:61:38:0f:14:c5:9a:ef:ba:12:
                    35:36:f5:2f:90:85:00:36:92:15:39:06:a0:68:02:
                    21:1c:b9:0a:09:a2:68:f4:ad:41:e7:53:a3:36:0c:
                    f3:12:e8:7b:e7:6b:6c:8f:47:d2:cd:84:07:6a:71:
                    49:34:51:ce:c4:65:cc:d7:f1:37:31:ef:83:6d:b3:
                    af:13:32:df:8e:8b:64:8a:b7:02:d5:e3:8c:2c:75:
                    b8:3d:ea:c1:f7:85:a1:78:70:45:e8:b9:d9:0e:18:
                    c2:79:3a:d2:bf:e4:2e:eb:8f:bc:d3:09:05:b8:13:
                    77:e1:f3:a4:28:db:a8:c2:db:f4:ed:1e:4f:73:73:
                    76:21:2d:5e:bc:36:31:10:9c:3c:46:94:3f:3e:9d:
                    9c:3e:95:03:15:8e:73:6f:f0:45:ee:c1:24:ec:43:
                    ac:c5:40:6c:af:05:41:ca:c6:c9:5d:28:6d:7e:d3:
                    99:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7E:21:BD:73:0A:13:8F:F5:E8:40:E0:66:08:65:35:69:E8:0A:21
            X509v3 Authority Key Identifier:
                keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:bf:38:60:83:77:68:53:60:dc:39:d1:f8:ab:59:67:81:9f:
         10:cd:3f:9c:9b:6a:5f:ff:c9:c1:f8:7b:64:b4:08:95:47:6c:
         83:f4:d6:3d:d1:f7:fe:9c:9b:18:1b:e8:77:02:e7:64:f1:b2:
         65:08:29:1c:ea:6b:60:49:ea:a3:65:3b:8c:21:6d:45:8f:a5:
         10:c8:7d:50:e4:b6:1e:c1:07:e3:d0:47:6a:99:c5:22:b5:7d:
         40:06:f7:81:91:df:e7:39:ea:ab:d4:9d:5e:58:6d:8b:9a:d4:
         d2:07:51:2f:62:b8:bf:a9:22:df:a7:7c:b5:18:5f:a4:a4:4f:
         6b:dd:f4:9e:3b:ca:05:54:3c:90:cd:4b:81:e9:97:36:b6:1d:
         71:e3:35:47:a3:5b:dc:b1:c2:68:70:8f:57:50:c2:b7:b4:49:
         a7:26:6a:07:4d:03:2f:1c:1c:61:38:f5:db:5e:52:6f:ed:b6:
         7b:19:30:50:31:c1:ee:a1:65:c0:cf:06:e4:7b:08:55:d2:c8:
         10:9d:61:2b:72:f7:e7:77:e9:c3:b6:87:35:6b:4a:7b:59:48:
         01:57:d5:87:51:2c:e3:5b:47:04:dc:13:a7:4a:be:d6:62:ed:
         38:92:de:fd:b2:d1:71:06:38:da:74:95:bd:f0:dd:5f:cb:42:
         a2:3f:2f:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg2MvYOB7BzByFcpDpegPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMGUyMTZlNTc5MWUxYjAxZGEyMWJjYWYzMzAwNDFhZDcy
YTdlNmMwHhcNMjUwODIzMDYwMDE0WhcNMjUwODI0MDYwMDE0WjAzMTEwLwYDVQQD
EyhjZjdlMjFiZDczMGExMzhmZjVlODQwZTA2NjA4NjUzNTY5ZTgwYTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdgHGgi7sIa1mvIQCJaIQkgA3Dps
rwb/8dK8kBwAp8TCc1wSKqHeOJjQh1fK4gmruUrboQGnS8wOGGNrsBUqfPxBGi3i
LPeg/UrkgjFPKnBhOA8UxZrvuhI1NvUvkIUANpIVOQagaAIhHLkKCaJo9K1B51Oj
NgzzEuh752tsj0fSzYQHanFJNFHOxGXM1/E3Me+DbbOvEzLfjotkircC1eOMLHW4
PerB94WheHBF6LnZDhjCeTrSv+Qu64+80wkFuBN34fOkKNuowtv07R5Pc3N2IS1e
vDYxEJw8RpQ/Pp2cPpUDFY5zb/BF7sEk7EOsxUBsrwVBysbJXShtftOZYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9+Ib1zChOP9ehA4GYIZTVp6AohMB8GA1UdIwQY
MBaAFBwOIW5XkeGwHaIbyvMwBBrXKn5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEt
MmMwZmM2YmUxZTU3LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEtMmMwZmM2YmUxZTU3
LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADb84YIN3
aFNg3DnR+KtZZ4GfEM0/nJtqX//Jwfh7ZLQIlUdsg/TWPdH3/pybGBvodwLnZPGy
ZQgpHOprYEnqo2U7jCFtRY+lEMh9UOS2HsEH49BHapnFIrV9QAb3gZHf5znqq9Sd
Xlhti5rU0gdRL2K4v6ki36d8tRhfpKRPa930njvKBVQ8kM1LgemXNrYdceM1R6Nb
3LHCaHCPV1DCt7RJpyZqB00DLxwcYTj1215Sb+22exkwUDHB7qFlwM8G5HsIVdLI
EJ1hK3L353fpw7aHNWtKe1lIAVfVh1Es41tHBNwTp0q+1mLtOJLe/bLRcQY42nSV
vfDdX8tCoj8vvA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:37 2025 by rpki-client