Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
File:                     Dm2P132t49P5bLSZMZSMJymtoN4.mft (raw, json)
Hash identifier:          OSNtTXDl6zyHvVf9hj3d6V6OpcVhsOC9NhRhrqsixII=
Subject key identifier:   AA:2A:DE:A7:C5:51:14:08:0B:84:E6:AB:49:D5:CA:A3:ED:34:C1:62
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Certificate issuer:       /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial:       0198D47430BF452E628A51B02ACA0BB29559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 01:04:00 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:00 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:00 +0000
Files and hashes:         1: 7agd0xXHCJCEBXtCCNxD5ubRKuY.roa (hash: oQw/mKm0E4AJl8kl0WckRZJlnbPoPgaZD+9rJpy3frY=)
                          2: Dm2P132t49P5bLSZMZSMJymtoN4.crl (hash: zSunUCt4nwbyyoK1Sx6y8qscd0u1eok3oqwxKUjVbG4=)
                          3: LT-9VM8v74LKR6mHQpnPgQmq0Pc.roa (hash: DjF9+jZlXLi3uEoLKBvDZoW0dJ/H/LAI1EAde2tMt5g=)
                          4: wKqbNOLsqrVFYWVrfyYGqu1Sues.roa (hash: /xyx+mYRyXQ5PVlQrZvBX8K5l17ZBxWHv6YVrNpVAuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:30:bf:45:2e:62:8a:51:b0:2a:ca:0b:b2:95:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
        Validity
            Not Before: Aug 23 01:04:00 2025 GMT
            Not After : Aug 24 01:04:00 2025 GMT
        Subject: CN=aa2adea7c55114080b84e6ab49d5caa3ed34c162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:0a:58:b2:99:8d:82:fa:7c:c0:09:ff:45:
                    9c:52:38:eb:b9:4f:33:76:67:22:ab:53:35:b5:f9:
                    4c:27:bc:31:75:03:1d:fb:e4:43:9a:66:2a:4c:b2:
                    d6:11:01:07:11:08:06:c6:d7:3d:a8:ad:00:67:0c:
                    ba:c5:7d:79:82:01:42:b8:2a:df:b7:70:f9:70:fc:
                    ae:9f:d9:ed:6c:43:ce:98:bd:3f:0e:3d:39:3a:77:
                    71:82:3a:fd:c7:13:8c:4b:19:d9:58:36:9e:cf:77:
                    e9:2e:b7:80:9e:9d:e6:70:99:94:66:ca:57:8a:71:
                    9a:df:51:2f:de:f0:89:cc:75:06:5a:f7:89:2c:38:
                    20:72:e0:87:cb:19:1e:af:ae:40:8c:86:01:f3:72:
                    48:89:1f:e4:6c:b6:80:97:52:9d:e5:fd:3d:c7:07:
                    6a:a6:f2:ce:63:2b:04:63:60:00:6e:6d:96:bc:55:
                    64:4c:79:87:29:be:f7:59:34:06:c6:70:4e:35:29:
                    af:9b:75:f5:25:1d:1c:34:be:72:91:58:2a:c0:a0:
                    9a:f7:47:8c:47:b7:57:3c:9b:3e:96:09:9b:ea:99:
                    f5:af:8b:fc:76:5a:35:eb:ff:77:00:c7:2f:35:f3:
                    c4:e2:0d:ff:19:1e:af:4e:ba:bf:11:d2:79:ce:0f:
                    86:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2A:DE:A7:C5:51:14:08:0B:84:E6:AB:49:D5:CA:A3:ED:34:C1:62
            X509v3 Authority Key Identifier:
                keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ee:5c:a1:a5:25:2a:76:26:ed:9e:33:59:20:5d:6a:b6:fa:
         b0:27:0e:f0:d5:62:a8:23:2a:8e:52:76:c8:97:88:90:3c:3f:
         21:07:b7:75:6b:39:db:01:d0:e9:f6:9f:64:58:a7:27:b8:e8:
         24:79:4c:b6:f6:c7:06:b3:05:15:bc:a7:cb:a3:cc:8f:9b:85:
         4d:df:35:e7:56:05:d1:a5:30:07:ff:ec:43:2a:49:be:e8:a5:
         c1:a1:0c:d3:6e:7f:5f:27:b1:0b:29:57:6a:64:28:b2:98:c7:
         a1:5f:26:44:0a:50:2f:4b:94:8a:b7:3e:10:e5:20:b3:b5:14:
         57:b7:b3:5f:fb:8a:38:54:fd:a8:2e:db:59:85:57:49:aa:3a:
         ce:82:35:02:71:fa:5c:b9:09:14:ff:be:87:bb:e8:72:d2:e1:
         3e:d0:43:c7:e9:d5:4a:6f:06:2c:f3:79:29:8e:b5:05:cb:2d:
         4d:e8:db:cb:aa:1a:69:cc:60:8d:26:eb:84:64:c4:3c:34:0a:
         8e:27:d9:24:5d:06:ea:a8:25:be:a3:29:05:84:72:7b:b7:cd:
         a0:d8:70:30:30:8d:06:5e:2b:b4:68:c9:91:7a:a5:58:09:bc:
         8c:33:b6:56:91:7f:dd:4c:58:e5:fc:a4:f5:91:62:7b:ce:a5:
         14:dd:da:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdDC/RS5iilGwKsoLspVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmQ4ZmQ3N2RhZGUzZDNmOTZjYjQ5OTMxOTQ4YzI3Mjlh
ZGEwZGUwHhcNMjUwODIzMDEwNDAwWhcNMjUwODI0MDEwNDAwWjAzMTEwLwYDVQQD
EyhhYTJhZGVhN2M1NTExNDA4MGI4NGU2YWI0OWQ1Y2FhM2VkMzRjMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAoKWLKZjYL6fMAJ/0WcUjjruU8z
dmciq1M1tflMJ7wxdQMd++RDmmYqTLLWEQEHEQgGxtc9qK0AZwy6xX15ggFCuCrf
t3D5cPyun9ntbEPOmL0/Dj05Ondxgjr9xxOMSxnZWDaez3fpLreAnp3mcJmUZspX
inGa31Ev3vCJzHUGWveJLDggcuCHyxker65AjIYB83JIiR/kbLaAl1Kd5f09xwdq
pvLOYysEY2AAbm2WvFVkTHmHKb73WTQGxnBONSmvm3X1JR0cNL5ykVgqwKCa90eM
R7dXPJs+lgmb6pn1r4v8dlo16/93AMcvNfPE4g3/GR6vTrq/EdJ5zg+GQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoq3qfFURQIC4Tmq0nVyqPtNMFiMB8GA1UdIwQY
MBaAFA5tj9d9rePT+Wy0mTGUjCcpraDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82OTc3Y2QtNDM0My00YjRjLThjZWEt
YmQzNWMwNDhiOTMwLzEvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82OTc3Y2QtNDM0My00YjRjLThjZWEtYmQzNWMwNDhiOTMw
LzEvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVu5coaUl
KnYm7Z4zWSBdarb6sCcO8NViqCMqjlJ2yJeIkDw/IQe3dWs52wHQ6fafZFinJ7jo
JHlMtvbHBrMFFbyny6PMj5uFTd8151YF0aUwB//sQypJvuilwaEM025/XyexCylX
amQospjHoV8mRApQL0uUirc+EOUgs7UUV7ezX/uKOFT9qC7bWYVXSao6zoI1AnH6
XLkJFP++h7voctLhPtBDx+nVSm8GLPN5KY61BcstTejby6oaacxgjSbrhGTEPDQK
jifZJF0G6qglvqMpBYRye7fNoNhwMDCNBl4rtGjJkXqlWAm8jDO2VpF/3UxY5fyk
9ZFie86lFN3auQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:03 2025 by rpki-client