Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
File:                     hXosdK9aRNmq5HoLiUJfpPf8fBk.mft (raw, json)
Hash identifier:          tVoxBgVobgL6WkNoRYBj274Gci2FhN8/sWHIwi7lEOY=
Subject key identifier:   88:54:D9:37:20:4F:8F:AE:D6:27:75:44:DB:E4:D6:6F:81:2C:0B:A3
Authority key identifier: 85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
Certificate issuer:       /CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Certificate serial:       0198D8507553F049D43F94F5032341FC8783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 19:03:28 +0000
Manifest this update:     Sat 23 Aug 2025 19:03:28 +0000
Manifest next update:     Sun 24 Aug 2025 19:03:28 +0000
Files and hashes:         1: 2ocBNxmBQmUkoRPjhlhWgOYgiMs.roa (hash: vHBT5RZYwMgp/JaFcd7djyz4ta6PJ5W0BzdunzoRb3k=)
                          2: GLrf-4476lN-mWAGatfWehKzDpo.roa (hash: UBhmVRo+40lzdmL/jOTwvI0uo4yogaRRq+nqy+WHQ4s=)
                          3: bAf4pYlPQH01VJAbtj0tnC5SXTs.roa (hash: Is6byuQI/ji+q5pWZ94ZQraf9joydkFIunAau5zwEaA=)
                          4: hXosdK9aRNmq5HoLiUJfpPf8fBk.crl (hash: gxvrG8TKmiK/FaKhbzL6O8/SgsSlGLuip1HF6RKNmxI=)
                          5: t7q0gRp_Rjm1TKofQQJGVXRxiQ4.roa (hash: 8i0M18hNbssP3r3dcfAr+F0zW7Rf4keL31Nq8c6T/TQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:50:75:53:f0:49:d4:3f:94:f5:03:23:41:fc:87:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
        Validity
            Not Before: Aug 23 19:03:28 2025 GMT
            Not After : Aug 24 19:03:28 2025 GMT
        Subject: CN=8854d937204f8faed6277544dbe4d66f812c0ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:33:d3:04:44:37:a2:df:a6:a5:5e:82:e6:
                    df:77:52:98:b7:6a:60:a1:3a:6a:07:58:ea:c3:6c:
                    a8:06:97:16:d6:b1:ed:67:7a:aa:b9:f2:80:8b:02:
                    75:a6:a6:55:86:4a:7e:36:a1:03:d9:b1:1c:67:8d:
                    a1:bf:85:e3:44:df:53:ce:0c:c9:ca:3a:4a:90:fd:
                    3f:2f:13:64:73:79:82:35:77:91:ad:89:07:92:a1:
                    71:c5:b8:bf:a1:03:4b:ab:5e:ca:19:3e:49:8d:7a:
                    f0:c7:4b:61:66:d5:37:09:1e:ee:0d:58:a7:8a:3e:
                    0b:36:35:22:be:c2:ae:1b:50:8c:d2:8c:98:88:6a:
                    64:ee:1b:d7:4c:06:9b:58:bf:eb:c5:56:e2:1c:61:
                    21:31:b2:33:8b:7d:97:d0:18:d9:5d:03:25:d8:60:
                    27:26:4f:a7:c4:20:7a:90:bc:ec:05:80:a2:93:fa:
                    27:f6:f5:b7:e1:4b:49:3d:14:2c:5b:15:fd:14:82:
                    9b:f5:d6:54:7f:0a:c5:75:76:87:52:ee:ee:d5:22:
                    71:c8:af:c6:2a:06:2f:f9:1e:93:1f:de:d9:0a:7c:
                    43:4b:a9:e2:5c:6a:f8:0f:34:a2:44:5c:80:f9:fb:
                    e6:2f:d2:3a:eb:ce:50:cf:19:f5:7d:4b:95:c1:1d:
                    46:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:54:D9:37:20:4F:8F:AE:D6:27:75:44:DB:E4:D6:6F:81:2C:0B:A3
            X509v3 Authority Key Identifier:
                keyid:85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:10:87:56:57:ab:66:3f:37:bc:9e:ef:56:6c:7c:7d:d1:cc:
         55:b7:ef:c2:b2:af:39:a9:59:81:c3:3c:bc:5c:6a:59:e9:e6:
         89:14:35:96:97:1d:26:01:44:64:8d:0a:2e:1a:38:80:e2:47:
         de:c5:1c:ff:d7:11:0a:e4:6f:08:b1:b0:dd:d2:7d:a1:55:78:
         1c:36:08:87:ad:d7:5a:3e:64:5c:3a:4f:c6:cb:b6:fd:3d:15:
         e3:8e:e3:dc:db:07:7a:74:62:4b:fb:6b:6c:f4:7d:d7:44:e5:
         34:dd:cd:a1:35:f3:b4:85:f1:9e:4c:bc:f8:d9:63:1b:81:bc:
         40:b6:03:b4:20:a8:fe:6d:78:86:74:4d:9a:17:ba:32:47:43:
         fb:d6:9b:11:45:66:93:77:f9:73:8d:63:37:bf:9f:8f:57:8f:
         0f:54:52:02:ef:22:04:c3:fe:eb:b5:5c:6a:1f:97:e4:fc:79:
         09:27:74:6a:43:3d:5a:84:ab:c1:24:1c:11:5f:b0:f3:4e:be:
         a7:61:d7:d5:5d:32:da:21:fa:70:7b:46:91:40:c2:56:c5:91:
         0c:54:bd:5a:83:b5:53:0b:cd:81:d4:8d:f5:e8:ee:71:cc:f4:
         a2:b3:ac:a3:e1:8c:3a:02:fe:53:eb:e5:39:45:36:68:20:1c:
         7a:88:d5:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUHVT8EnUP5T1AyNB/IeDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1N2EyYzc0YWY1YTQ0ZDlhYWU0N2EwYjg5NDI1ZmE0Zjdm
YzdjMTkwHhcNMjUwODIzMTkwMzI4WhcNMjUwODI0MTkwMzI4WjAzMTEwLwYDVQQD
Eyg4ODU0ZDkzNzIwNGY4ZmFlZDYyNzc1NDRkYmU0ZDY2ZjgxMmMwYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGcz0wREN6LfpqVegubfd1KYt2pg
oTpqB1jqw2yoBpcW1rHtZ3qqufKAiwJ1pqZVhkp+NqED2bEcZ42hv4XjRN9TzgzJ
yjpKkP0/LxNkc3mCNXeRrYkHkqFxxbi/oQNLq17KGT5JjXrwx0thZtU3CR7uDVin
ij4LNjUivsKuG1CM0oyYiGpk7hvXTAabWL/rxVbiHGEhMbIzi32X0BjZXQMl2GAn
Jk+nxCB6kLzsBYCik/on9vW34UtJPRQsWxX9FIKb9dZUfwrFdXaHUu7u1SJxyK/G
KgYv+R6TH97ZCnxDS6niXGr4DzSiRFyA+fvmL9I6685Qzxn1fUuVwR1GYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhU2TcgT4+u1id1RNvk1m+BLAujMB8GA1UdIwQY
MBaAFIV6LHSvWkTZquR6C4lCX6T3/HwZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFhvc2RLOWFSTm1xNUhvTGlVSmZwUGY4ZkJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wYTlhMzMtOTlkYy00YjkyLThjZWQt
ODM2YWM5N2MwMWJiLzEvaFhvc2RLOWFSTm1xNUhvTGlVSmZwUGY4ZkJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wYTlhMzMtOTlkYy00YjkyLThjZWQtODM2YWM5N2MwMWJi
LzEvaFhvc2RLOWFSTm1xNUhvTGlVSmZwUGY4ZkJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBCHVler
Zj83vJ7vVmx8fdHMVbfvwrKvOalZgcM8vFxqWenmiRQ1lpcdJgFEZI0KLho4gOJH
3sUc/9cRCuRvCLGw3dJ9oVV4HDYIh63XWj5kXDpPxsu2/T0V447j3NsHenRiS/tr
bPR910TlNN3NoTXztIXxnky8+NljG4G8QLYDtCCo/m14hnRNmhe6MkdD+9abEUVm
k3f5c41jN7+fj1ePD1RSAu8iBMP+67Vcah+X5Px5CSd0akM9WoSrwSQcEV+w806+
p2HX1V0y2iH6cHtGkUDCVsWRDFS9WoO1UwvNgdSN9ejuccz0orOso+GMOgL+U+vl
OUU2aCAceojVxg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:06:38 2025 by rpki-client