Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
File:                     gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft (raw, json)
Hash identifier:          M6WZVd+BBPByyYzhb8lBjWnOnFDRLQPE5qbeV5i8COg=
Subject key identifier:   51:C4:BE:D5:21:A5:B0:30:EF:0F:44:D3:5A:4A:5B:0E:BB:91:94:37
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Certificate issuer:       /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial:       0198D999432CF4347DF927B3C8EFE978A89B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
Manifest number:          164A
Signing time:             Sun 24 Aug 2025 01:02:36 +0000
Manifest this update:     Sun 24 Aug 2025 01:02:36 +0000
Manifest next update:     Mon 25 Aug 2025 01:02:36 +0000
Files and hashes:         1: X8y17pVc211N8MGfVTBzz81iEoA.roa (hash: Hl59xAoHLIR2ve7ZY+IGK+whUrubuEhh7gzRr94EmJM=)
                          2: gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl (hash: 1p1KX6YYN1YoZ4/YH0T7AHaTBAFhvetSQfQWg4IiPVE=)
                          3: xYBkOkdRt8PDKOH8dzQ2NTMqI8M.roa (hash: ITHwZydQPAzKvryYx9N44bQeMeKILW1oaBs72ARfdxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:99:43:2c:f4:34:7d:f9:27:b3:c8:ef:e9:78:a8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
        Validity
            Not Before: Aug 24 01:02:36 2025 GMT
            Not After : Aug 25 01:02:36 2025 GMT
        Subject: CN=51c4bed521a5b030ef0f44d35a4a5b0ebb919437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:f0:63:5a:b1:09:6c:2d:bc:a9:3d:31:e4:
                    a0:74:52:dc:9b:a8:de:72:74:00:ec:cf:26:66:9a:
                    54:26:a4:1b:ac:f3:4e:8a:fd:f2:0f:a8:4a:67:6f:
                    b3:2f:b3:23:9d:2b:9a:60:f9:0d:38:f1:d1:fc:d3:
                    75:71:18:b3:ec:bf:1e:fd:97:a8:32:f6:fb:ef:fd:
                    40:22:e0:7a:ff:94:df:65:02:c0:a9:41:7c:6d:3d:
                    b7:1a:1a:ef:5c:9a:a1:61:f8:81:b5:6d:fe:d0:c2:
                    16:46:ba:5e:12:4f:44:25:96:7d:25:40:2f:72:03:
                    dd:a2:89:03:40:87:34:2c:8f:7e:b6:6f:e3:a9:e5:
                    0a:d7:37:6c:82:8a:74:57:38:66:05:b5:05:55:bd:
                    50:37:e4:21:9a:46:b2:2a:86:35:c8:4d:dc:ac:f4:
                    c3:67:83:29:22:09:4a:3f:60:c8:85:c6:92:b6:e7:
                    3d:8f:e6:4a:46:ba:8d:3b:bf:f5:4b:38:72:29:2d:
                    05:0e:df:a2:84:64:80:55:3a:06:11:43:86:b9:03:
                    2b:2f:90:58:23:80:c1:12:08:7b:11:03:26:d5:45:
                    0b:a1:c9:2a:f5:bd:fe:2d:c3:cc:ef:00:92:bf:42:
                    fd:57:11:31:e9:27:72:65:31:ad:17:7d:79:70:84:
                    21:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C4:BE:D5:21:A5:B0:30:EF:0F:44:D3:5A:4A:5B:0E:BB:91:94:37
            X509v3 Authority Key Identifier:
                keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:2d:08:bc:8a:70:f7:32:fe:94:fa:a0:85:d1:f7:00:e5:6b:
         af:02:26:0a:5c:23:b2:3a:c9:e2:89:96:19:c6:73:94:5f:70:
         d7:34:02:f8:6e:77:01:cb:87:a4:5b:da:8f:47:39:2d:6e:13:
         b4:a5:9d:46:75:fa:61:c4:f4:b8:21:e6:f0:41:1c:69:e0:99:
         3e:0e:81:20:0e:0f:2c:0c:d7:a4:52:cd:35:77:61:ba:0f:a6:
         2b:62:f0:8f:a2:64:08:56:32:24:3a:c6:6f:73:a5:0a:52:16:
         a2:92:b7:63:60:36:0e:6c:73:98:67:5a:50:84:55:0d:4a:af:
         e7:ba:6f:f7:97:1a:4e:0c:0c:9a:b9:90:bc:f2:ab:e4:59:ca:
         c0:e8:8e:bb:3c:b5:99:79:40:a7:06:7c:06:49:1f:72:0c:41:
         b1:7c:02:31:33:14:d7:cf:fe:53:cb:df:91:ca:f5:94:fc:31:
         d0:96:91:5d:4a:65:f4:79:81:ba:22:2e:f0:41:9e:2e:ce:09:
         fc:79:5b:97:cb:f5:3e:f6:80:7c:c0:53:57:16:d6:8f:01:5d:
         da:e5:f7:73:f8:7a:30:b8:45:36:89:39:90:82:d2:ef:21:86:
         cb:4a:89:b5:1d:fb:8a:84:fb:9d:8f:8a:a4:81:b3:ba:bb:37:
         07:7d:19:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjZmUMs9DR9+SezyO/peKibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDU1NWYwMTFiZTVlMjQxZWIwYjQyNWRlNWZkODZjYzY4
MzRhNTQwHhcNMjUwODI0MDEwMjM2WhcNMjUwODI1MDEwMjM2WjAzMTEwLwYDVQQD
Eyg1MWM0YmVkNTIxYTViMDMwZWYwZjQ0ZDM1YTRhNWIwZWJiOTE5NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZvwY1qxCWwtvKk9MeSgdFLcm6je
cnQA7M8mZppUJqQbrPNOiv3yD6hKZ2+zL7MjnSuaYPkNOPHR/NN1cRiz7L8e/Zeo
Mvb77/1AIuB6/5TfZQLAqUF8bT23GhrvXJqhYfiBtW3+0MIWRrpeEk9EJZZ9JUAv
cgPdookDQIc0LI9+tm/jqeUK1zdsgop0VzhmBbUFVb1QN+QhmkayKoY1yE3crPTD
Z4MpIglKP2DIhcaStuc9j+ZKRrqNO7/1SzhyKS0FDt+ihGSAVToGEUOGuQMrL5BY
I4DBEgh7EQMm1UULockq9b3+LcPM7wCSv0L9VxEx6SdyZTGtF315cIQh1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHEvtUhpbAw7w9E01pKWw67kZQ3MB8GA1UdIwQY
MBaAFIMFVfARvl4kHrC0Jd5f2GzGg0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEt
ZDY5OWRkYzlkMDljLzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEtZDY5OWRkYzlkMDlj
LzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtC0IvIpw
9zL+lPqghdH3AOVrrwImClwjsjrJ4omWGcZzlF9w1zQC+G53AcuHpFvaj0c5LW4T
tKWdRnX6YcT0uCHm8EEcaeCZPg6BIA4PLAzXpFLNNXdhug+mK2Lwj6JkCFYyJDrG
b3OlClIWopK3Y2A2DmxzmGdaUIRVDUqv57pv95caTgwMmrmQvPKr5FnKwOiOuzy1
mXlApwZ8BkkfcgxBsXwCMTMU18/+U8vfkcr1lPwx0JaRXUpl9HmBuiIu8EGeLs4J
/Hlbl8v1PvaAfMBTVxbWjwFd2uX3c/h6MLhFNok5kILS7yGGy0qJtR37ioT7nY+K
pIGzurs3B30ZXQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:30:09 2025 by rpki-client