Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
File:                     fmdQ5YygordfLFO99vYf9j7IMcs.mft (raw, json)
Hash identifier:          iegCvpf1A7xQqz236jJrx7Ndtgto1hzd8QM2gTdp6pE=
Subject key identifier:   97:2E:9D:81:67:C6:56:36:E0:29:63:DA:0F:DB:F6:A8:2A:01:1F:59
Authority key identifier: 7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
Certificate issuer:       /CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Certificate serial:       0198D65FD2D77CF3C65D3D3EF7341918F639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 10:01:00 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:00 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:00 +0000
Files and hashes:         1: 1jPmqvt1ilYlmNcTs9vv0mQwV2Y.roa (hash: eLo4dRJvSmA8RvGBVuxw5fjwL9gDtsf1LW0xwTy98e0=)
                          2: fmdQ5YygordfLFO99vYf9j7IMcs.crl (hash: R9ZiId71dpQKHG3UcwvUEppBEbDh3VV/LUlF73za9vM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:d2:d7:7c:f3:c6:5d:3d:3e:f7:34:19:18:f6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
        Validity
            Not Before: Aug 23 10:01:00 2025 GMT
            Not After : Aug 24 10:01:00 2025 GMT
        Subject: CN=972e9d8167c65636e02963da0fdbf6a82a011f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:96:69:24:e9:e3:c1:51:b7:e5:b0:45:84:f4:
                    10:69:20:51:a8:58:1c:f3:e5:0b:ef:a5:14:53:25:
                    43:3b:21:08:b5:3f:64:cc:9e:62:e2:e8:9d:c1:52:
                    a2:24:18:16:bc:46:f1:29:42:ed:9f:68:c0:4a:7b:
                    41:2b:41:3f:40:f5:41:fc:b8:05:15:34:8b:ce:7f:
                    21:44:42:8b:55:e9:e7:08:14:51:74:f7:a9:8a:ea:
                    72:81:be:ba:7f:33:6c:1b:66:27:db:6a:37:d2:7a:
                    9f:e6:f6:cc:2d:5a:26:f0:ea:3d:9c:c2:c8:c1:ce:
                    f3:00:1c:59:f1:6d:ed:3b:83:ff:50:92:1d:a2:7c:
                    44:a2:58:4a:57:a4:37:01:cd:d3:47:4b:f9:28:dd:
                    ee:80:bf:78:a2:cf:bb:f9:61:7b:c8:b2:7c:01:7e:
                    d4:35:3f:9c:cc:62:07:62:a0:a2:56:45:a8:26:3a:
                    ce:12:57:a8:83:da:81:f8:b4:2c:47:71:96:80:e5:
                    79:be:bd:82:2b:e9:4b:26:e4:78:fa:7f:6b:6f:e1:
                    e2:28:a9:25:b4:a2:14:0c:7b:5a:40:6e:f5:e2:69:
                    39:8c:2a:45:ae:66:57:84:a8:41:53:0a:8c:cc:9b:
                    da:d0:1f:9d:84:72:37:1d:52:fb:1b:0e:98:d9:e7:
                    25:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2E:9D:81:67:C6:56:36:E0:29:63:DA:0F:DB:F6:A8:2A:01:1F:59
            X509v3 Authority Key Identifier:
                keyid:7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:cd:4c:8c:c3:d5:99:03:19:84:e9:6b:8c:4c:d3:d6:7a:4f:
         21:87:10:e6:86:65:c7:67:43:bb:32:3a:2d:6c:70:01:71:d9:
         c8:64:f9:0d:72:67:a4:cd:d6:dd:b0:3e:52:7a:a9:4b:17:16:
         fd:26:0a:54:7a:fd:f1:90:7c:26:ca:e2:2d:4c:db:bb:a8:40:
         59:9a:f2:6b:9d:d4:ef:9e:f9:a9:e8:7f:d4:07:1f:2a:8c:70:
         3a:23:87:ce:b5:61:5c:70:ae:07:79:6a:05:dc:ba:1e:9b:3e:
         39:6e:fa:60:9e:2b:ce:13:7b:db:59:b0:08:56:73:bf:39:d3:
         69:d5:a3:f9:41:da:23:bf:92:f1:b7:c2:c9:6f:c4:ee:43:8b:
         3c:ca:03:f5:6b:55:4d:1a:b8:3c:9a:4e:d5:15:23:69:f2:b7:
         1a:2d:4d:a1:de:67:e0:29:78:65:11:04:f4:87:1c:37:94:5a:
         32:86:60:ef:3a:74:b4:ae:5d:e8:e4:c2:39:a1:f2:2f:fc:69:
         ca:18:e4:d1:02:56:68:b9:a2:a4:78:a8:77:c3:91:6f:46:63:
         75:8e:c3:b6:d2:8b:3d:4f:5a:ac:2c:46:3b:61:48:6d:f0:dd:
         14:cd:8a:57:6f:07:76:e7:e5:03:59:d4:30:be:e1:ea:1a:08:
         00:82:d6:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX9LXfPPGXT0+9zQZGPY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjc1MGU1OGNhMGEyYjc1ZjJjNTNiZGY2ZjYxZmY2M2Vj
ODMxY2IwHhcNMjUwODIzMTAwMTAwWhcNMjUwODI0MTAwMTAwWjAzMTEwLwYDVQQD
Eyg5NzJlOWQ4MTY3YzY1NjM2ZTAyOTYzZGEwZmRiZjZhODJhMDExZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJZpJOnjwVG35bBFhPQQaSBRqFgc
8+UL76UUUyVDOyEItT9kzJ5i4uidwVKiJBgWvEbxKULtn2jASntBK0E/QPVB/LgF
FTSLzn8hREKLVennCBRRdPepiupygb66fzNsG2Yn22o30nqf5vbMLVom8Oo9nMLI
wc7zABxZ8W3tO4P/UJIdonxEolhKV6Q3Ac3TR0v5KN3ugL94os+7+WF7yLJ8AX7U
NT+czGIHYqCiVkWoJjrOEleog9qB+LQsR3GWgOV5vr2CK+lLJuR4+n9rb+HiKKkl
tKIUDHtaQG714mk5jCpFrmZXhKhBUwqMzJva0B+dhHI3HVL7Gw6Y2eclowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcunYFnxlY24Clj2g/b9qgqAR9ZMB8GA1UdIwQY
MBaAFH5nUOWMoKK3XyxTvfb2H/Y+yDHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1kUTVZeWdvcmRmTEZPOTl2WWY5ajdJTWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS83OGJkMDUtNjAwNi00NjJmLWExODct
MGVjZjQyMjAwMjNlLzEvZm1kUTVZeWdvcmRmTEZPOTl2WWY5ajdJTWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS83OGJkMDUtNjAwNi00NjJmLWExODctMGVjZjQyMjAwMjNl
LzEvZm1kUTVZeWdvcmRmTEZPOTl2WWY5ajdJTWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYM1MjMPV
mQMZhOlrjEzT1npPIYcQ5oZlx2dDuzI6LWxwAXHZyGT5DXJnpM3W3bA+UnqpSxcW
/SYKVHr98ZB8JsriLUzbu6hAWZrya53U7575qeh/1AcfKoxwOiOHzrVhXHCuB3lq
Bdy6Hps+OW76YJ4rzhN721mwCFZzvznTadWj+UHaI7+S8bfCyW/E7kOLPMoD9WtV
TRq4PJpO1RUjafK3Gi1Nod5n4Cl4ZREE9IccN5RaMoZg7zp0tK5d6OTCOaHyL/xp
yhjk0QJWaLmipHiod8ORb0ZjdY7DttKLPU9arCxGO2FIbfDdFM2KV28HduflA1nU
ML7h6hoIAILWPw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:48:52 2025 by rpki-client