Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File:                     jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier:          UVYwpRfIZjICQlVhAVhfgpLUeCbivH9ULEcNf+Rhox0=
Subject key identifier:   29:B2:03:9E:96:8A:BF:1A:8C:F7:55:25:AA:D5:47:31:26:86:FC:E8
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer:       /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial:       0198D4E0C8E608EB30C920813D816D2B864A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 03:02:37 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:37 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:37 +0000
Files and hashes:         1: _xcIQcrm4noRq8C0ZoCPTZiOCWs.roa (hash: +umQkbTDLA3XudEv4u8EibqqHd0r0Zew/gszN5k+/5Y=)
                          2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: d3JyIKGzyePU/N+oPuud0kc17GfTqWi6m08ONIJgkz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:c8:e6:08:eb:30:c9:20:81:3d:81:6d:2b:86:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
        Validity
            Not Before: Aug 23 03:02:37 2025 GMT
            Not After : Aug 24 03:02:37 2025 GMT
        Subject: CN=29b2039e968abf1a8cf75525aad547312686fce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:a9:8f:58:9f:28:12:97:ba:4f:1b:e8:54:
                    77:73:27:95:47:dc:d4:3c:88:2d:04:82:c9:eb:27:
                    da:f7:36:30:8d:94:21:b2:5b:51:89:7a:16:6f:18:
                    ec:0c:b0:c7:3d:29:c4:a4:89:4c:cb:dd:83:48:d7:
                    49:05:d5:74:3d:1b:f2:94:e9:38:bc:1d:55:2b:d6:
                    ae:59:46:b8:ab:05:a1:8e:eb:fd:9e:ef:8d:42:f9:
                    33:24:a6:41:0a:ee:7d:e1:55:2e:01:1d:61:dd:8e:
                    94:ea:b6:c8:67:75:68:6d:6a:4a:37:05:7a:b3:28:
                    fb:f6:dd:2a:24:a5:d5:4f:c1:81:f2:e3:7f:b6:bb:
                    fb:3f:3e:24:bc:71:43:0c:c0:60:04:c7:33:b5:50:
                    b5:b3:e0:3c:1c:c3:f5:71:61:bc:4a:a8:2a:fc:5c:
                    14:18:0e:3b:8c:4a:b4:88:ec:37:23:e8:85:90:3f:
                    26:9c:9d:38:2b:a6:03:cd:4c:25:5f:78:41:1f:0c:
                    70:a4:03:b5:1b:75:44:8d:5c:af:f6:34:4d:8a:9c:
                    e9:d3:6a:d5:0c:63:8c:f2:69:3f:c5:51:7a:c0:72:
                    24:81:eb:ec:83:d3:27:28:90:03:25:0d:5f:f7:6a:
                    87:bc:1a:8d:32:f0:b1:2d:b2:97:5f:94:6d:09:84:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B2:03:9E:96:8A:BF:1A:8C:F7:55:25:AA:D5:47:31:26:86:FC:E8
            X509v3 Authority Key Identifier:
                keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fb:90:56:45:40:8a:6b:c8:38:9e:93:d8:16:ae:8e:5a:c0:
         11:98:e6:6c:b2:eb:5d:22:66:9b:15:7e:af:1e:ff:e4:c7:a4:
         23:16:f5:d1:68:18:67:94:4d:07:c0:e8:01:24:e5:02:b2:5a:
         07:3d:de:6d:41:f0:67:9b:84:74:e3:ad:66:8c:b5:4b:f0:e5:
         e6:e8:7f:60:47:24:a9:74:81:5f:af:ab:cc:45:38:fb:92:67:
         04:eb:8a:17:cb:20:ec:0a:1d:02:4e:21:e1:79:02:ff:b7:c0:
         ae:fb:3f:ec:50:f5:4d:c6:b9:33:d8:69:d0:6d:ca:a0:79:89:
         c9:89:ca:2f:8f:64:73:95:df:8c:98:21:e8:c8:86:c5:7a:79:
         dc:c3:4e:33:e5:2f:59:2e:8e:41:70:01:9d:67:61:0d:c3:63:
         3e:c3:3d:3c:9e:9f:a6:1e:2b:e6:6e:63:65:c2:6d:95:90:d7:
         de:87:dd:ad:47:b6:55:ce:ee:40:f0:c9:77:e3:c6:55:86:50:
         e6:91:e2:af:72:43:24:d1:a0:b3:a0:67:a5:22:cc:6f:37:ee:
         5d:a0:71:17:a6:48:7b:92:54:c6:5d:d6:bf:f1:e5:48:c0:b7:
         b4:c0:b7:39:17:6f:37:8b:fe:78:92:0e:1b:6d:3d:77:33:d1:
         97:9a:27:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4MjmCOswySCBPYFtK4ZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzRlMjkzOGRkNjg4NDliYjQwNmU5ZWI3OWM4OTNlNmMx
MmM3OGEwHhcNMjUwODIzMDMwMjM3WhcNMjUwODI0MDMwMjM3WjAzMTEwLwYDVQQD
EygyOWIyMDM5ZTk2OGFiZjFhOGNmNzU1MjVhYWQ1NDczMTI2ODZmY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra+pj1ifKBKXuk8b6FR3cyeVR9zU
PIgtBILJ6yfa9zYwjZQhsltRiXoWbxjsDLDHPSnEpIlMy92DSNdJBdV0PRvylOk4
vB1VK9auWUa4qwWhjuv9nu+NQvkzJKZBCu594VUuAR1h3Y6U6rbIZ3VobWpKNwV6
syj79t0qJKXVT8GB8uN/trv7Pz4kvHFDDMBgBMcztVC1s+A8HMP1cWG8Sqgq/FwU
GA47jEq0iOw3I+iFkD8mnJ04K6YDzUwlX3hBHwxwpAO1G3VEjVyv9jRNipzp02rV
DGOM8mk/xVF6wHIkgevsg9MnKJADJQ1f92qHvBqNMvCxLbKXX5RtCYQD8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmyA56Wir8ajPdVJarVRzEmhvzoMB8GA1UdIwQY
MBaAFIw04pON1ohJu0BunreciT5sEseKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2Mt
ODNjMzhiNzc3NDc4LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2MtODNjMzhiNzc3NDc4
LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfuQVkVA
imvIOJ6T2BaujlrAEZjmbLLrXSJmmxV+rx7/5MekIxb10WgYZ5RNB8DoASTlArJa
Bz3ebUHwZ5uEdOOtZoy1S/Dl5uh/YEckqXSBX6+rzEU4+5JnBOuKF8sg7AodAk4h
4XkC/7fArvs/7FD1Tca5M9hp0G3KoHmJyYnKL49kc5XfjJgh6MiGxXp53MNOM+Uv
WS6OQXABnWdhDcNjPsM9PJ6fph4r5m5jZcJtlZDX3ofdrUe2Vc7uQPDJd+PGVYZQ
5pHir3JDJNGgs6BnpSLMbzfuXaBxF6ZIe5JUxl3Wv/HlSMC3tMC3ORdvN4v+eJIO
G209dzPRl5onBg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:20 2025 by rpki-client