Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
File:                     dvkMwSPQ0gRp05xsNFXzHqYSP04.mft (raw, json)
Hash identifier:          GUWJkaRAxo1/V4mMqPyt8nzEh0ZVGKOoJHk3Q9QZJPs=
Subject key identifier:   AD:7C:04:68:A7:47:F5:CF:50:97:E5:FF:02:E8:84:ED:94:86:4B:0D
Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
Certificate issuer:       /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Certificate serial:       0198D8509BD7D6CDDCB61F8625EE073F1CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 19:03:37 +0000
Manifest this update:     Sat 23 Aug 2025 19:03:37 +0000
Manifest next update:     Sun 24 Aug 2025 19:03:37 +0000
Files and hashes:         1: dvkMwSPQ0gRp05xsNFXzHqYSP04.crl (hash: fluVb32Rsa7DbvRBT98wg/kP/pnc7Xqr6qccPI7XY5c=)
                          2: u3lxxc1lkavM0xc30bqZfpWxvHo.roa (hash: UHLRAbtjmSCDadx2fBrU+RDEoeooREQATwB2er11mzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:50:9b:d7:d6:cd:dc:b6:1f:86:25:ee:07:3f:1c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
        Validity
            Not Before: Aug 23 19:03:37 2025 GMT
            Not After : Aug 24 19:03:37 2025 GMT
        Subject: CN=ad7c0468a747f5cf5097e5ff02e884ed94864b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f8:29:9b:22:9f:87:91:e9:f1:a7:9c:0f:c3:
                    0f:ad:3f:f2:5a:a5:3b:9d:1f:88:fe:d4:3a:00:02:
                    93:1b:2e:c7:9c:af:b4:56:73:d2:3e:51:cd:e1:fb:
                    3d:76:31:f7:9c:9b:e9:34:8d:d9:d8:c4:35:e3:c1:
                    7c:e9:91:95:16:c7:df:6a:ec:f8:9a:57:38:c2:17:
                    2f:74:43:7e:1d:83:3b:65:ee:9d:02:84:3e:71:c7:
                    0f:74:a6:87:de:c0:c6:e8:a6:d4:b2:63:22:2b:e8:
                    e5:b7:72:37:0c:53:8e:c1:0a:e5:68:4c:3a:c5:c3:
                    c8:d8:96:18:c9:24:0e:75:a9:e1:96:08:da:bb:23:
                    1c:da:b4:78:50:d8:92:9f:b6:67:de:49:af:a4:6f:
                    81:5a:04:1e:f4:9c:e9:ab:8d:c9:c5:99:a5:98:bf:
                    a4:7f:d2:fc:5f:c7:d6:5b:51:25:af:cb:05:f0:83:
                    08:cd:e5:96:f6:44:7e:ad:78:7c:2c:8b:21:f7:30:
                    41:7a:82:5a:b6:ba:71:b5:8d:0c:0c:e0:85:d7:3b:
                    20:14:0f:8f:49:93:30:f1:85:fb:17:ed:9f:0b:68:
                    d2:83:60:1e:67:d4:3c:98:18:29:c6:48:db:31:ca:
                    3e:7e:8f:ca:32:b9:b8:80:b7:b8:be:0e:7a:af:fe:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7C:04:68:A7:47:F5:CF:50:97:E5:FF:02:E8:84:ED:94:86:4B:0D
            X509v3 Authority Key Identifier:
                keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f2:ef:47:39:f3:0a:a0:6e:8f:b9:5d:c7:95:dd:57:7c:ce:
         b7:64:ca:7d:0d:49:ea:e3:dd:a6:fd:0c:f1:aa:13:df:e2:03:
         43:e7:a5:d0:0a:79:80:45:ea:77:e1:cb:dd:8e:bc:26:8b:cf:
         88:30:a1:c8:98:6a:d1:d1:31:4c:89:41:d9:67:30:8c:99:36:
         88:30:68:5b:c7:a5:9d:97:7a:3e:c2:75:d5:d0:ac:a6:b2:9b:
         13:c6:ba:68:d2:f4:c0:63:9a:bc:b1:fb:5b:e4:3d:f0:27:e1:
         4c:ff:9f:43:af:d0:01:8a:de:13:e7:19:86:7e:05:63:e5:57:
         f2:55:8a:2b:ea:e9:e4:63:d5:f0:ef:03:5c:f6:6d:11:69:0d:
         30:2e:07:6b:cf:02:47:43:6c:37:e9:41:ab:a6:5c:20:ec:24:
         3a:8a:0e:d1:c6:ba:08:34:c3:60:ae:d5:b2:e3:b5:26:5c:43:
         3a:73:b1:38:ff:3a:73:09:5f:6d:3d:17:ba:ca:1d:2c:91:ec:
         8f:ce:19:76:e9:3b:dd:f7:b4:7b:e2:05:e1:ce:9d:f8:6c:7c:
         0a:72:7c:ee:de:de:17:04:60:89:99:2e:3b:f6:0f:f8:e2:89:
         f0:29:a0:78:3e:ed:7e:42:84:ca:93:9a:bc:03:46:45:01:5d:
         fd:2e:aa:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUJvX1s3cth+GJe4HPxzEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZjkwY2MxMjNkMGQyMDQ2OWQzOWM2YzM0NTVmMzFlYTYx
MjNmNGUwHhcNMjUwODIzMTkwMzM3WhcNMjUwODI0MTkwMzM3WjAzMTEwLwYDVQQD
EyhhZDdjMDQ2OGE3NDdmNWNmNTA5N2U1ZmYwMmU4ODRlZDk0ODY0YjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PgpmyKfh5Hp8aecD8MPrT/yWqU7
nR+I/tQ6AAKTGy7HnK+0VnPSPlHN4fs9djH3nJvpNI3Z2MQ148F86ZGVFsffauz4
mlc4whcvdEN+HYM7Ze6dAoQ+cccPdKaH3sDG6KbUsmMiK+jlt3I3DFOOwQrlaEw6
xcPI2JYYySQOdanhlgjauyMc2rR4UNiSn7Zn3kmvpG+BWgQe9Jzpq43JxZmlmL+k
f9L8X8fWW1Elr8sF8IMIzeWW9kR+rXh8LIsh9zBBeoJatrpxtY0MDOCF1zsgFA+P
SZMw8YX7F+2fC2jSg2AeZ9Q8mBgpxkjbMco+fo/KMrm4gLe4vg56r/67jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK18BGinR/XPUJfl/wLohO2UhksNMB8GA1UdIwQY
MBaAFHb5DMEj0NIEadOcbDRV8x6mEj9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHZrTXdTUFEwZ1JwMDV4c05GWHpIcVlTUDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84MmY5MDEtM2Y0OC00MjlhLTgzNjUt
N2FmNTc0OTQxOTM2LzEvZHZrTXdTUFEwZ1JwMDV4c05GWHpIcVlTUDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84MmY5MDEtM2Y0OC00MjlhLTgzNjUtN2FmNTc0OTQxOTM2
LzEvZHZrTXdTUFEwZ1JwMDV4c05GWHpIcVlTUDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfLvRznz
CqBuj7ldx5XdV3zOt2TKfQ1J6uPdpv0M8aoT3+IDQ+el0Ap5gEXqd+HL3Y68JovP
iDChyJhq0dExTIlB2WcwjJk2iDBoW8elnZd6PsJ11dCsprKbE8a6aNL0wGOavLH7
W+Q98CfhTP+fQ6/QAYreE+cZhn4FY+VX8lWKK+rp5GPV8O8DXPZtEWkNMC4Ha88C
R0NsN+lBq6ZcIOwkOooO0ca6CDTDYK7VsuO1JlxDOnOxOP86cwlfbT0XusodLJHs
j84Zduk73fe0e+IF4c6d+Gx8CnJ87t7eFwRgiZkuO/YP+OKJ8CmgeD7tfkKEypOa
vANGRQFd/S6qkQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:11:03 2025 by rpki-client