Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File:                     gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier:          xd+FzjhFlLEJCeKsUHeTXKkqddj0N8ABFUxhDHPKcl4=
Subject key identifier:   36:5D:AD:EA:9D:61:23:A8:4F:72:98:B2:84:23:32:16:FD:89:C7:2C
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer:       /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial:       0198D515CE374C6A68907FB134D8FE9C8C8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 04:00:32 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:32 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:32 +0000
Files and hashes:         1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: +ed/ssLFNtHUUVLTJuzdIcmplTa0R3XSsdivUzzmg3A=)
                          2: salIHPhc1-U7JhA1wMdzrHIbzfs.roa (hash: nprIOebSdd8+BuExt2/8vOEgtfIuud16f9G3kU2RIx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:ce:37:4c:6a:68:90:7f:b1:34:d8:fe:9c:8c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
        Validity
            Not Before: Aug 23 04:00:32 2025 GMT
            Not After : Aug 24 04:00:32 2025 GMT
        Subject: CN=365dadea9d6123a84f7298b284233216fd89c72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:8d:4b:00:5f:c7:2c:06:e9:cc:3e:9f:ca:
                    80:4d:0b:d5:3e:5f:7c:b4:bf:72:04:2b:71:3f:25:
                    e2:3d:62:da:e7:00:a9:67:f7:3b:36:2a:99:64:b1:
                    b4:6e:d2:3d:5c:7b:7c:dd:53:3c:f1:1c:0b:8c:71:
                    5e:4b:64:d8:e3:7e:c2:a2:7b:de:22:26:95:59:37:
                    77:cf:f3:e2:5b:1e:a7:a7:95:ea:e0:0e:82:a1:aa:
                    55:ab:9a:4a:ff:f5:7d:55:b4:76:63:78:b7:a1:d0:
                    d9:17:71:06:31:27:14:af:2f:7b:4c:6e:90:a0:5a:
                    08:e6:3f:36:50:ee:e1:ed:6b:fa:55:ef:c1:7a:21:
                    a7:df:f8:65:c0:1f:38:c5:b1:84:f7:54:16:a9:31:
                    3a:78:a6:47:06:57:06:8c:d8:c4:75:97:54:5c:a9:
                    98:47:8e:43:c1:a0:0c:dd:b9:46:08:a2:cc:ea:7a:
                    7b:59:52:85:73:4c:2e:14:56:54:73:2f:04:94:d1:
                    7a:fd:41:1d:dd:7d:26:56:07:6f:8c:c8:94:9b:60:
                    ee:e6:7d:a9:a3:41:cd:7e:76:4d:fa:9a:af:81:d3:
                    ce:bc:a0:dd:ad:f1:41:b9:a0:a4:78:7e:ab:47:4c:
                    44:e8:45:c3:7a:d1:84:6c:85:17:74:6f:46:28:38:
                    db:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5D:AD:EA:9D:61:23:A8:4F:72:98:B2:84:23:32:16:FD:89:C7:2C
            X509v3 Authority Key Identifier:
                keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3a:13:d8:69:8e:da:17:be:94:bc:76:a0:83:45:d0:9e:ef:
         6f:c4:f3:ae:68:1d:7d:7c:5b:2e:1e:2d:60:fd:47:46:5d:7f:
         0c:e2:00:d9:5d:41:aa:78:51:2d:77:92:c8:c0:73:f1:f9:1c:
         21:36:9e:07:13:f2:95:45:25:b0:27:76:63:c1:14:89:ba:cb:
         1f:18:d2:dc:be:3b:f3:15:7f:7a:9b:c8:89:bb:cd:55:5d:ed:
         d9:d9:d2:c1:69:f7:f6:f0:9a:02:85:00:cc:7d:68:12:f4:bc:
         53:71:8a:c6:94:8b:08:18:9a:f7:ff:e5:60:0a:db:f4:8b:15:
         63:9a:01:b8:8a:56:ea:d5:52:1b:df:04:83:0e:d5:89:5b:e8:
         52:f4:85:e0:ad:82:9b:9a:e5:18:a8:34:c3:c7:0e:39:a2:ca:
         f2:b4:4b:bc:26:d1:64:cc:e5:5f:69:32:2c:8e:81:d1:88:52:
         f7:a3:5b:93:7b:25:29:e3:ac:ef:1f:46:5e:1b:ad:f2:a8:9f:
         eb:24:e7:28:a6:45:03:fb:6d:a6:0d:9a:69:9a:60:eb:f8:af:
         6d:c8:d9:07:62:c9:19:36:67:8c:67:a8:39:03:11:72:1c:bd:
         02:01:2b:53:d2:97:30:0a:8f:08:eb:58:37:4f:98:cf:e8:52:
         1b:dd:f0:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFc43TGpokH+xNNj+nIyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYWI0YzA5NDViNzM4ZWRkYTA1ODNhMjc0YjYzYzFiODY3
M2E2MzAwHhcNMjUwODIzMDQwMDMyWhcNMjUwODI0MDQwMDMyWjAzMTEwLwYDVQQD
EygzNjVkYWRlYTlkNjEyM2E4NGY3Mjk4YjI4NDIzMzIxNmZkODljNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMyNSwBfxywG6cw+n8qATQvVPl98
tL9yBCtxPyXiPWLa5wCpZ/c7NiqZZLG0btI9XHt83VM88RwLjHFeS2TY437Conve
IiaVWTd3z/PiWx6np5Xq4A6CoapVq5pK//V9VbR2Y3i3odDZF3EGMScUry97TG6Q
oFoI5j82UO7h7Wv6Ve/BeiGn3/hlwB84xbGE91QWqTE6eKZHBlcGjNjEdZdUXKmY
R45DwaAM3blGCKLM6np7WVKFc0wuFFZUcy8ElNF6/UEd3X0mVgdvjMiUm2Du5n2p
o0HNfnZN+pqvgdPOvKDdrfFBuaCkeH6rR0xE6EXDetGEbIUXdG9GKDjbbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZdreqdYSOoT3KYsoQjMhb9iccsMB8GA1UdIwQY
MBaAFICrTAlFtzjt2gWDonS2PBuGc6YwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mNmZlZTYtYzBhMi00YTAzLWE5ODEt
ZjVmZGEwZWEzMDBkLzEvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9mNmZlZTYtYzBhMi00YTAzLWE5ODEtZjVmZGEwZWEzMDBk
LzEvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPToT2GmO
2he+lLx2oINF0J7vb8TzrmgdfXxbLh4tYP1HRl1/DOIA2V1BqnhRLXeSyMBz8fkc
ITaeBxPylUUlsCd2Y8EUibrLHxjS3L478xV/epvIibvNVV3t2dnSwWn39vCaAoUA
zH1oEvS8U3GKxpSLCBia9//lYArb9IsVY5oBuIpW6tVSG98Egw7ViVvoUvSF4K2C
m5rlGKg0w8cOOaLK8rRLvCbRZMzlX2kyLI6B0YhS96Nbk3slKeOs7x9GXhut8qif
6yTnKKZFA/ttpg2aaZpg6/ivbcjZB2LJGTZnjGeoOQMRchy9AgErU9KXMAqPCOtY
N0+Yz+hSG93wyQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:12 2025 by rpki-client