Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
File:                     cFo7sRdTjbbbnFz9WnlL899pfCc.mft (raw, json)
Hash identifier:          /KHNLb3qPCYWlcsT5+jNBYwCnUOMFQe5Qx7N0QZYNl0=
Subject key identifier:   74:7B:FC:0B:AF:B3:96:76:62:23:2E:E5:BB:A0:E0:9F:B5:49:8E:90
Authority key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
Certificate issuer:       /CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Certificate serial:       0198D6601396B0951E649B4536AFB6646D88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 10:01:17 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:17 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:17 +0000
Files and hashes:         1: cFo7sRdTjbbbnFz9WnlL899pfCc.crl (hash: fOeXLkyREGPjJpgod0Ef11s14D/uvzghi62aVxUNrwY=)
                          2: wL6tLZZKC26B362dOxei9VMeWYo.roa (hash: cyglEBGINCGd1/IgiI+VhGd2UBRJLqq47Yds0263110=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:13:96:b0:95:1e:64:9b:45:36:af:b6:64:6d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
        Validity
            Not Before: Aug 23 10:01:17 2025 GMT
            Not After : Aug 24 10:01:17 2025 GMT
        Subject: CN=747bfc0bafb3967662232ee5bba0e09fb5498e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:56:86:7d:b9:f3:7c:76:a5:29:b7:73:e1:
                    6c:62:42:8a:c1:81:25:d4:87:53:52:7f:f2:bb:de:
                    09:b7:cc:57:6a:bb:4b:ea:63:a1:58:e1:1a:0e:a6:
                    72:9a:9b:07:f9:43:a5:72:f0:ab:c4:6b:86:1f:03:
                    13:ff:af:86:31:44:43:d7:ed:49:9a:d8:63:7a:9c:
                    35:d8:3b:04:3e:e1:b9:88:ec:05:fd:3d:66:33:3b:
                    90:e9:19:56:7a:13:56:64:fe:dd:59:3a:1d:a1:37:
                    d9:97:8f:e1:7b:7e:18:ad:76:7a:bf:31:ac:1c:85:
                    7e:73:87:f6:21:74:5e:26:6a:3e:83:6d:de:15:ac:
                    86:dc:7b:a8:ce:a1:41:fe:38:1d:36:25:cf:28:fc:
                    4c:83:9d:c0:c3:f7:e4:e6:00:2b:d5:35:8a:89:48:
                    d3:e7:f7:13:0e:48:32:88:8c:5a:1a:6a:48:26:54:
                    cf:6e:7c:05:e2:fe:bc:c3:9b:56:ce:ea:bf:09:f4:
                    da:c9:0b:e7:e7:93:41:a1:b0:0d:dc:3a:37:e3:59:
                    d5:54:14:dd:01:1f:2e:73:78:26:29:9d:72:20:57:
                    18:1d:0c:55:2c:3d:0a:e6:a2:76:f0:7d:8e:9a:68:
                    9f:7a:49:5b:20:a8:7c:17:c1:27:1d:c2:e5:13:54:
                    58:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7B:FC:0B:AF:B3:96:76:62:23:2E:E5:BB:A0:E0:9F:B5:49:8E:90
            X509v3 Authority Key Identifier:
                keyid:70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:59:4a:8a:b2:30:a6:24:66:cd:a7:51:c1:08:c9:a1:7c:de:
         90:b6:bd:40:b8:e5:5d:e6:02:c1:a1:e2:be:99:4a:eb:37:2e:
         a7:39:2e:b8:c7:1c:a0:75:2e:46:63:b5:83:fa:cc:9e:a9:0d:
         c9:98:21:f0:db:87:a6:a3:b8:2b:0f:09:3f:2c:fa:96:52:b2:
         13:eb:b5:55:be:59:47:b1:d5:ce:fd:02:07:30:d9:48:49:ef:
         ca:90:3e:a4:88:8c:06:9f:3b:48:f5:fc:21:ce:d6:67:15:cb:
         ac:3f:0c:ce:58:ec:0c:25:c8:d7:36:13:31:33:a1:73:07:6a:
         46:75:6d:bf:96:d5:b3:f6:91:c8:33:40:8b:bf:c0:36:2a:77:
         25:98:bf:b3:c7:2b:db:57:26:d4:1d:2b:fc:c5:64:5a:71:78:
         a3:29:31:d0:da:1c:57:38:cc:b1:9c:50:ed:3e:5a:c1:31:25:
         32:8e:6f:3f:43:59:9b:f5:82:e7:48:d0:d6:8b:a2:a6:74:4b:
         e0:06:a4:ff:f7:91:57:83:83:47:37:c7:88:2a:67:59:dc:b7:
         59:9b:f7:a5:01:6f:da:16:56:ee:4d:92:0d:c5:46:7f:b3:19:
         f6:41:4d:7b:2b:e5:b9:7a:b7:44:0c:0e:5a:99:2d:e9:27:09:
         a2:bf:21:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYBOWsJUeZJtFNq+2ZG2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNWEzYmIxMTc1MzhkYjZkYjljNWNmZDVhNzk0YmYzZGY2
OTdjMjcwHhcNMjUwODIzMTAwMTE3WhcNMjUwODI0MTAwMTE3WjAzMTEwLwYDVQQD
Eyg3NDdiZmMwYmFmYjM5Njc2NjIyMzJlZTViYmEwZTA5ZmI1NDk4ZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF1Whn2583x2pSm3c+FsYkKKwYEl
1IdTUn/yu94Jt8xXartL6mOhWOEaDqZympsH+UOlcvCrxGuGHwMT/6+GMURD1+1J
mthjepw12DsEPuG5iOwF/T1mMzuQ6RlWehNWZP7dWTodoTfZl4/he34YrXZ6vzGs
HIV+c4f2IXReJmo+g23eFayG3HuozqFB/jgdNiXPKPxMg53Aw/fk5gAr1TWKiUjT
5/cTDkgyiIxaGmpIJlTPbnwF4v68w5tWzuq/CfTayQvn55NBobAN3Do341nVVBTd
AR8uc3gmKZ1yIFcYHQxVLD0K5qJ28H2OmmifeklbIKh8F8EnHcLlE1RYwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHR7/Auvs5Z2YiMu5bug4J+1SY6QMB8GA1UdIwQY
MBaAFHBaO7EXU42225xc/Vp5S/PfaXwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0ZvN3NSZFRqYmJibkZ6OVdubEw4OTlwZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zZjdhYjgtNmIzOS00MzYyLWEyN2Ut
Nzc2NjAzNzFhMWVjLzEvY0ZvN3NSZFRqYmJibkZ6OVdubEw4OTlwZkNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zZjdhYjgtNmIzOS00MzYyLWEyN2UtNzc2NjAzNzFhMWVj
LzEvY0ZvN3NSZFRqYmJibkZ6OVdubEw4OTlwZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVllKirIw
piRmzadRwQjJoXzekLa9QLjlXeYCwaHivplK6zcupzkuuMccoHUuRmO1g/rMnqkN
yZgh8NuHpqO4Kw8JPyz6llKyE+u1Vb5ZR7HVzv0CBzDZSEnvypA+pIiMBp87SPX8
Ic7WZxXLrD8MzljsDCXI1zYTMTOhcwdqRnVtv5bVs/aRyDNAi7/ANip3JZi/s8cr
21cm1B0r/MVkWnF4oykx0NocVzjMsZxQ7T5awTElMo5vP0NZm/WC50jQ1ouipnRL
4Aak//eRV4ODRzfHiCpnWdy3WZv3pQFv2hZW7k2SDcVGf7MZ9kFNeyvluXq3RAwO
Wpkt6ScJor8hkQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:47 2025 by rpki-client