Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
File:                     x-nHqlNLEwC_ck__DwwbBRnVBbs.mft (raw, json)
Hash identifier:          Gp6ljAmdDQC8og6HdN2WUBFWiBs8kd7Be4EsGJLH64c=
Subject key identifier:   A8:07:39:40:AE:E9:77:5A:6F:DD:9B:93:55:1A:2F:85:D1:FC:1F:88
Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
Certificate issuer:       /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Certificate serial:       0198D5BBA47B6685017843B57DA0EED1B7BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
Manifest number:          0F16
Signing time:             Sat 23 Aug 2025 07:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:40 +0000
Files and hashes:         1: R1q5L0zSprSAMUcFtGlF7mc7J1s.roa (hash: UB22RcCCLLp3yH1mo89+o+fdr51fmFuQRSq5JlKphYY=)
                          2: WaUyoH7ArWppJQRKLhGMYkgHut0.roa (hash: 8DW7q1K5wRRXnMeS2PwcrC66JmhaaTvLKjvouwdrBiw=)
                          3: vYPLmVZ63lzXpMA3lFBdPO3gT0g.roa (hash: NafLcW9ler7jv8ZnfOLoMEHPRe+4IL3+O4WsYS0XH1Y=)
                          4: x-nHqlNLEwC_ck__DwwbBRnVBbs.crl (hash: dvEWKLiW71I+GJiTRavDQMCx0EXqN1XESNifyHqN8Lg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:a4:7b:66:85:01:78:43:b5:7d:a0:ee:d1:b7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
        Validity
            Not Before: Aug 23 07:01:40 2025 GMT
            Not After : Aug 24 07:01:40 2025 GMT
        Subject: CN=a8073940aee9775a6fdd9b93551a2f85d1fc1f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:6f:1f:10:0d:59:9c:41:43:aa:84:ae:68:
                    24:24:0f:fd:c6:25:35:3d:5b:32:b4:65:57:be:f2:
                    c6:a0:16:0a:a2:2c:f7:d6:f9:91:25:34:41:a7:1b:
                    58:f2:67:15:77:4a:af:63:c9:ab:ff:35:19:d3:51:
                    08:1f:b5:b6:cc:a3:8e:e2:88:ea:30:0a:20:18:ce:
                    5e:b7:b1:27:70:2b:51:21:55:ee:e2:b3:07:50:c6:
                    0b:70:3a:2c:4d:26:f6:8b:71:6f:70:b6:ba:cf:d5:
                    9b:57:8e:39:31:0a:96:a8:aa:5b:0f:f5:e7:54:69:
                    78:25:bc:6a:90:8f:1d:54:36:be:83:47:8c:69:82:
                    77:51:5c:a8:1d:7d:27:98:ec:17:c8:73:7f:15:ba:
                    bb:b6:f9:04:56:66:cf:28:b2:7f:e6:42:f7:97:f2:
                    89:91:cf:27:97:27:05:82:46:25:d8:d2:3a:76:fa:
                    a6:c9:7a:3e:91:be:34:8e:f2:93:c6:7c:b0:a2:6c:
                    eb:00:a6:82:c7:d6:89:95:ad:25:be:5f:a7:77:52:
                    de:62:14:81:44:bf:cc:3f:e1:f9:4a:32:e8:2c:17:
                    6a:05:8d:0a:98:43:21:08:4f:41:51:2b:75:4d:44:
                    27:09:6f:ba:25:3e:4e:99:7e:a7:26:52:fb:31:34:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:07:39:40:AE:E9:77:5A:6F:DD:9B:93:55:1A:2F:85:D1:FC:1F:88
            X509v3 Authority Key Identifier:
                keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d2:c8:81:a4:c4:0e:93:33:ee:71:c3:3f:7a:28:cf:e1:dc:
         3b:9e:a3:09:e7:20:70:7c:f1:95:78:4f:39:10:bb:c4:79:8d:
         10:87:ca:51:32:48:81:da:18:21:4c:43:2d:d1:87:92:35:98:
         cc:f5:e7:dd:cc:da:44:70:40:ed:c0:98:3d:18:5b:8e:82:79:
         51:0f:31:1a:4e:d2:57:98:e3:fe:93:23:fc:2f:91:d1:31:54:
         39:15:7c:59:ff:1f:cf:c8:e7:c0:49:fd:79:b9:d5:f7:22:f5:
         e1:20:4a:cd:62:c0:99:c0:d7:81:f4:1b:05:0e:c1:16:3f:34:
         33:9c:16:ea:f6:67:ac:42:35:c1:57:a2:ca:63:f4:c4:0b:f3:
         57:2a:6f:a9:ab:3c:1e:b5:eb:e7:20:0a:7b:06:74:4c:95:0d:
         91:bc:b1:06:f3:ec:00:bb:31:74:dd:00:83:79:bc:dd:33:d1:
         28:16:77:7c:89:d1:d7:0c:bc:0d:45:08:80:16:f8:cb:d4:e4:
         02:56:7d:91:b3:dd:f6:21:b2:81:72:a8:cb:70:cf:00:03:8b:
         ab:eb:ad:c1:c4:31:ac:25:1b:2c:65:45:4d:81:fd:f3:54:5b:
         d8:eb:7f:85:11:b9:e7:27:5a:de:23:74:6c:cb:54:8c:d4:42:
         83:31:dd:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6R7ZoUBeEO1faDu0be6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZTljN2FhNTM0YjEzMDBiZjcyNGZmZjBmMGMxYjA1MTlk
NTA1YmIwHhcNMjUwODIzMDcwMTQwWhcNMjUwODI0MDcwMTQwWjAzMTEwLwYDVQQD
EyhhODA3Mzk0MGFlZTk3NzVhNmZkZDliOTM1NTFhMmY4NWQxZmMxZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppxvHxANWZxBQ6qErmgkJA/9xiU1
PVsytGVXvvLGoBYKoiz31vmRJTRBpxtY8mcVd0qvY8mr/zUZ01EIH7W2zKOO4ojq
MAogGM5et7EncCtRIVXu4rMHUMYLcDosTSb2i3FvcLa6z9WbV445MQqWqKpbD/Xn
VGl4JbxqkI8dVDa+g0eMaYJ3UVyoHX0nmOwXyHN/Fbq7tvkEVmbPKLJ/5kL3l/KJ
kc8nlycFgkYl2NI6dvqmyXo+kb40jvKTxnywomzrAKaCx9aJla0lvl+nd1LeYhSB
RL/MP+H5SjLoLBdqBY0KmEMhCE9BUSt1TUQnCW+6JT5OmX6nJlL7MTRviwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgHOUCu6Xdab92bk1UaL4XR/B+IMB8GA1UdIwQY
MBaAFMfpx6pTSxMAv3JP/w8MGwUZ1QW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQt
Y2U1MDA4MjdmZjdmLzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQtY2U1MDA4MjdmZjdm
LzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9LIgaTE
DpMz7nHDP3ooz+HcO56jCecgcHzxlXhPORC7xHmNEIfKUTJIgdoYIUxDLdGHkjWY
zPXn3czaRHBA7cCYPRhbjoJ5UQ8xGk7SV5jj/pMj/C+R0TFUORV8Wf8fz8jnwEn9
ebnV9yL14SBKzWLAmcDXgfQbBQ7BFj80M5wW6vZnrEI1wVeiymP0xAvzVypvqas8
HrXr5yAKewZ0TJUNkbyxBvPsALsxdN0Ag3m83TPRKBZ3fInR1wy8DUUIgBb4y9Tk
AlZ9kbPd9iGygXKoy3DPAAOLq+utwcQxrCUbLGVFTYH981Rb2Ot/hRG55yda3iN0
bMtUjNRCgzHdgg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:37 2025 by rpki-client