Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File:                     B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier:          3grTXlZtwhdUQPK5DSGH10Ura9VoczNxC5G/+bPxBe4=
Subject key identifier:   08:79:A2:03:34:0B:F2:42:EF:FB:F5:99:5C:6D:04:CF:9A:A7:E0:EF
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer:       /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial:       0198D472D894E025AC5A82E8310E136E1A62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 01:02:32 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:32 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:32 +0000
Files and hashes:         1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: O5/T8YZv2HU3zIq7gOFf9QnHkGciir7xtZEy5HBeXZY=)
                          2: lW93GA1GW7tkRrvTWbYjnCQPx5E.roa (hash: EIz+VNjlZLw/OZlxy/agv5UkJ/Oxh/UU8FDTP682cjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:d8:94:e0:25:ac:5a:82:e8:31:0e:13:6e:1a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
        Validity
            Not Before: Aug 23 01:02:32 2025 GMT
            Not After : Aug 24 01:02:32 2025 GMT
        Subject: CN=0879a203340bf242effbf5995c6d04cf9aa7e0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:94:7d:27:b4:f4:c7:fe:83:6d:65:95:1b:53:
                    d2:1d:57:eb:8c:5d:6c:3d:1f:a4:ba:83:0c:7a:26:
                    a9:f0:aa:07:f6:b1:57:06:b9:0a:7b:04:d0:3b:a9:
                    a6:63:6c:92:02:28:75:7d:6c:06:9c:91:ce:a0:36:
                    1a:46:c0:5e:23:a5:33:4f:21:68:ac:40:13:cb:6a:
                    f8:2e:16:68:32:2d:a3:38:81:c0:51:d5:b7:25:41:
                    49:9d:ae:61:c9:b6:9e:60:fc:04:a4:8c:d3:1d:68:
                    5e:76:dd:1f:40:5a:63:8b:0c:2f:ee:a9:c5:4c:70:
                    69:2e:0e:fe:6a:29:64:1c:50:0d:dd:89:37:83:e0:
                    13:ce:7b:75:50:58:3c:50:50:94:66:8d:5a:4b:76:
                    0a:50:96:9e:3a:6b:b0:01:f7:fd:3e:d0:23:8e:73:
                    44:ab:a7:19:79:99:6f:06:6b:9e:df:ca:35:3d:f6:
                    f0:e8:0b:8a:37:df:a0:85:c6:c3:29:5e:da:ee:d9:
                    a3:04:b1:38:43:78:f1:65:24:2f:83:48:75:25:1f:
                    fa:d1:b4:a9:4e:ce:f8:5e:2b:93:bb:e2:a8:d3:61:
                    ad:93:17:f5:c2:61:9c:92:a9:cc:25:c1:b1:a8:a3:
                    ce:1e:6c:bf:ec:c9:d4:00:96:29:dc:71:92:15:7e:
                    33:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:79:A2:03:34:0B:F2:42:EF:FB:F5:99:5C:6D:04:CF:9A:A7:E0:EF
            X509v3 Authority Key Identifier:
                keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:cb:f2:53:0d:0e:7c:85:99:8f:10:8a:b4:8f:4a:ab:33:2e:
         6a:82:99:db:45:e3:33:13:f4:7e:c7:16:c1:cd:a9:d2:c3:e4:
         6c:e8:4e:45:21:8c:5e:55:c0:16:e6:86:35:03:c8:8a:e1:7e:
         69:06:04:55:b0:47:f2:7a:66:9b:d8:ca:88:1b:c2:5f:c6:c7:
         23:97:cd:e4:69:83:dc:1c:91:a0:69:f8:8c:20:46:47:4e:20:
         dc:72:65:65:eb:cf:69:bc:d7:74:6a:b4:9c:b7:13:49:18:c9:
         3b:c6:36:82:96:fe:d0:b6:72:17:9e:92:b3:41:a1:7c:a4:f8:
         11:44:c2:6b:ae:c5:eb:b7:00:83:8a:85:ad:42:2d:78:e6:31:
         02:a0:c8:a0:54:6e:fe:55:8d:dc:ea:91:9f:e5:7d:7f:70:74:
         47:38:ad:db:12:44:df:ea:04:a6:bd:a4:ab:0d:de:95:b6:8f:
         aa:98:c1:e9:01:b3:c3:47:6b:58:f9:bd:3f:be:16:93:03:94:
         ae:bd:72:ad:30:f9:ce:2d:de:5a:9f:39:48:c7:90:ce:b3:3b:
         8b:ca:5f:d6:01:69:d5:c3:3c:4e:6e:b6:b9:c4:d5:e6:36:3b:
         24:a7:aa:7a:3b:a5:9a:a8:c5:b9:66:fc:a6:38:24:c6:82:41:
         0c:3e:17:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUctiU4CWsWoLoMQ4TbhpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NTYwZTNlNzJjNjA3OWEwNGU3ZDFmNjEwM2I5ZGY3ODk3
OWE1MjIwHhcNMjUwODIzMDEwMjMyWhcNMjUwODI0MDEwMjMyWjAzMTEwLwYDVQQD
EygwODc5YTIwMzM0MGJmMjQyZWZmYmY1OTk1YzZkMDRjZjlhYTdlMGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pR9J7T0x/6DbWWVG1PSHVfrjF1s
PR+kuoMMeiap8KoH9rFXBrkKewTQO6mmY2ySAih1fWwGnJHOoDYaRsBeI6UzTyFo
rEATy2r4LhZoMi2jOIHAUdW3JUFJna5hybaeYPwEpIzTHWhedt0fQFpjiwwv7qnF
THBpLg7+ailkHFAN3Yk3g+ATznt1UFg8UFCUZo1aS3YKUJaeOmuwAff9PtAjjnNE
q6cZeZlvBmue38o1Pfbw6AuKN9+ghcbDKV7a7tmjBLE4Q3jxZSQvg0h1JR/60bSp
Ts74XiuTu+Ko02Gtkxf1wmGckqnMJcGxqKPOHmy/7MnUAJYp3HGSFX4z2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAh5ogM0C/JC7/v1mVxtBM+ap+DvMB8GA1UdIwQY
MBaAFAdWDj5yxgeaBOfR9hA7nfeJeaUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTct
ODIyMWQyMTQzNzk2LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTctODIyMWQyMTQzNzk2
LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMvyUw0O
fIWZjxCKtI9KqzMuaoKZ20XjMxP0fscWwc2p0sPkbOhORSGMXlXAFuaGNQPIiuF+
aQYEVbBH8npmm9jKiBvCX8bHI5fN5GmD3ByRoGn4jCBGR04g3HJlZevPabzXdGq0
nLcTSRjJO8Y2gpb+0LZyF56Ss0GhfKT4EUTCa67F67cAg4qFrUIteOYxAqDIoFRu
/lWN3OqRn+V9f3B0Rzit2xJE3+oEpr2kqw3elbaPqpjB6QGzw0drWPm9P74WkwOU
rr1yrTD5zi3eWp85SMeQzrM7i8pf1gFp1cM8Tm62ucTV5jY7JKeqejulmqjFuWb8
pjgkxoJBDD4XAQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:15 2025 by rpki-client