Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File:                     67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier:          K7N0OjjwtW+hWJ+kTXNylwlxtakDFsPErnr2a0kTroY=
Subject key identifier:   6E:DD:8D:DC:25:B8:70:67:D1:66:C6:2D:D3:28:04:90:26:D0:F5:CF
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer:       /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial:       0198D5160C4B3D161F73AE252B3AD08638EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number:          016D
Signing time:             Sat 23 Aug 2025 04:00:48 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:48 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:48 +0000
Files and hashes:         1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: zNdRKf4eruDCW0n11C9Hn6h9bpdzgqTc2q1WLnTPLBA=)
                          2: R2qc8xIB7ETeFtMUELFMOTQfjZ4.roa (hash: BfeJlxl1OQPY3ScyZzCp1zSxOdUPgq5TTtPThWNATH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:0c:4b:3d:16:1f:73:ae:25:2b:3a:d0:86:38:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
        Validity
            Not Before: Aug 23 04:00:48 2025 GMT
            Not After : Aug 24 04:00:48 2025 GMT
        Subject: CN=6edd8ddc25b87067d166c62dd328049026d0f5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:49:6b:a4:ce:c2:cb:40:e4:60:6a:9c:40:65:
                    b4:52:00:00:58:3c:eb:f0:c4:60:a6:cd:75:62:f7:
                    48:cb:33:98:b3:16:ae:cd:2c:b3:f8:20:3d:0a:ec:
                    f3:ff:80:4a:c5:ad:97:42:e9:46:6c:6d:a9:ed:54:
                    ca:04:43:3f:ea:7a:72:ef:e3:36:6b:57:a8:81:6c:
                    13:1b:cf:da:fc:25:d4:34:84:c8:b9:f4:59:99:4b:
                    d8:06:d1:84:8d:1e:e6:b4:3a:88:c2:5d:e9:4e:51:
                    b7:f0:a0:4d:c8:f3:72:9d:0a:00:be:10:36:fd:16:
                    ab:75:3a:56:ce:a6:f0:cd:24:d0:a4:6a:22:bd:9e:
                    46:83:99:23:3b:d9:53:a0:bc:1b:55:6f:22:66:9b:
                    aa:23:45:e4:60:ee:40:f9:26:2a:a4:bf:0f:bd:9a:
                    3d:59:f8:8b:c5:b7:3d:f6:a0:92:e2:4e:ed:2c:a5:
                    1d:52:98:4c:81:ef:46:6d:18:2d:62:31:2c:dc:a9:
                    7e:a1:d4:8a:91:d9:a5:1c:1c:30:fc:ec:98:4d:b0:
                    24:19:5c:b7:51:f4:44:9c:cb:fd:91:c9:bf:87:30:
                    cb:9c:28:50:f8:99:28:45:5d:bc:f3:c7:70:fe:7d:
                    b0:19:dc:25:85:ef:42:7d:99:73:82:06:d4:e4:f5:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DD:8D:DC:25:B8:70:67:D1:66:C6:2D:D3:28:04:90:26:D0:F5:CF
            X509v3 Authority Key Identifier:
                keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d9:4e:01:0a:47:aa:81:f9:24:11:85:e9:70:f0:49:a9:a6:
         c1:6d:d1:42:ee:4e:c4:fc:db:38:99:08:2a:68:3d:09:b6:ef:
         f2:3c:b2:70:d7:6a:0b:b3:84:10:54:0c:b9:d4:5a:10:80:ab:
         de:9b:bf:17:25:00:d0:39:61:d7:c0:4d:c5:d4:78:12:12:ea:
         aa:97:33:72:f5:25:17:27:88:0b:98:65:06:84:29:b9:a3:b3:
         09:35:75:86:a1:73:b5:8a:d6:a2:d0:3a:1c:17:19:bb:50:d5:
         4f:06:f0:75:63:da:b2:5d:b9:9b:ba:4c:ea:6f:05:19:bc:c2:
         f0:27:f1:14:f5:0b:25:44:c1:70:44:75:13:e2:1a:ca:55:71:
         b2:52:ba:84:d8:c1:d7:8d:8b:8e:d5:78:39:bb:0a:7f:49:fd:
         bb:a7:46:e6:44:2a:45:7e:74:71:41:b9:8d:18:58:85:40:bc:
         7a:1b:b3:cf:07:07:49:75:e2:7d:4c:cf:3a:3a:6d:f0:60:79:
         1f:42:f2:d6:02:5c:1c:16:4f:37:ff:54:fa:ea:db:54:1a:31:
         fc:8a:7f:1d:ba:2d:bd:1c:75:35:6e:2e:54:1c:d5:20:43:90:
         52:74:1b:61:ff:5b:51:79:c8:29:4e:bd:6a:90:37:bf:e4:39:
         38:db:b1:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFgxLPRYfc64lKzrQhjjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjUyNTZmZTNlMDczMDJhYjczMjdiNzQ3YjhkZjM4MjQ1
YzRlZGYwHhcNMjUwODIzMDQwMDQ4WhcNMjUwODI0MDQwMDQ4WjAzMTEwLwYDVQQD
Eyg2ZWRkOGRkYzI1Yjg3MDY3ZDE2NmM2MmRkMzI4MDQ5MDI2ZDBmNWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUlrpM7Cy0DkYGqcQGW0UgAAWDzr
8MRgps11YvdIyzOYsxauzSyz+CA9Cuzz/4BKxa2XQulGbG2p7VTKBEM/6npy7+M2
a1eogWwTG8/a/CXUNITIufRZmUvYBtGEjR7mtDqIwl3pTlG38KBNyPNynQoAvhA2
/RardTpWzqbwzSTQpGoivZ5Gg5kjO9lToLwbVW8iZpuqI0XkYO5A+SYqpL8PvZo9
WfiLxbc99qCS4k7tLKUdUphMge9GbRgtYjEs3Kl+odSKkdmlHBww/OyYTbAkGVy3
UfREnMv9kcm/hzDLnChQ+JkoRV2888dw/n2wGdwlhe9CfZlzggbU5PW/wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7djdwluHBn0WbGLdMoBJAm0PXPMB8GA1UdIwQY
MBaAFOu1JW/j4HMCq3Mnt0e43zgkXE7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80MGIyYTktYjJjNy00MjIzLTg4NDgt
MGQyZTQyMDU2ODZmLzEvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS80MGIyYTktYjJjNy00MjIzLTg4NDgtMGQyZTQyMDU2ODZm
LzEvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNlOAQpH
qoH5JBGF6XDwSammwW3RQu5OxPzbOJkIKmg9Cbbv8jyycNdqC7OEEFQMudRaEICr
3pu/FyUA0Dlh18BNxdR4EhLqqpczcvUlFyeIC5hlBoQpuaOzCTV1hqFztYrWotA6
HBcZu1DVTwbwdWPasl25m7pM6m8FGbzC8CfxFPULJUTBcER1E+IaylVxslK6hNjB
142LjtV4ObsKf0n9u6dG5kQqRX50cUG5jRhYhUC8ehuzzwcHSXXifUzPOjpt8GB5
H0Ly1gJcHBZPN/9U+urbVBox/Ip/HbotvRx1NW4uVBzVIEOQUnQbYf9bUXnIKU69
apA3v+Q5ONuxUg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:48 2025 by rpki-client