Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File:                     201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier:          E0U2U3gL5gN6g/mfjdJn1do4FPhWdvpNmp3Zg0FzZow=
Subject key identifier:   18:18:09:A1:4E:F3:45:AE:4D:B1:F6:00:B8:30:00:81:50:88:8C:E9
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer:       /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial:       0198D4A8102D8EEB72BD9F08D736C42F2B62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 02:00:40 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:40 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:40 +0000
Files and hashes:         1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: ycdizrBz2Lihh5sIGj+e6UQBwEFTeQpl4GbtQ6ftdKc=)
                          2: p7ugqnkl0eeyrlpJX13_lCmtLp0.roa (hash: f1GZebrpy+RrPUG5oAnHmyhNSF3EcTIUbcYbxWqO8rs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:10:2d:8e:eb:72:bd:9f:08:d7:36:c4:2f:2b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
        Validity
            Not Before: Aug 23 02:00:40 2025 GMT
            Not After : Aug 24 02:00:40 2025 GMT
        Subject: CN=181809a14ef345ae4db1f600b830008150888ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:49:9f:e9:fc:07:67:11:13:6f:66:41:a5:
                    3b:b1:da:44:1a:df:52:44:d1:9b:74:21:28:eb:c3:
                    84:a9:4f:0f:13:33:db:c0:fd:ec:d3:ee:bf:fd:61:
                    74:cf:a0:07:52:99:fc:75:f3:19:ff:90:26:3b:4a:
                    22:41:58:8c:ce:08:1c:7d:ce:0b:6b:dc:37:7d:95:
                    2d:cd:ed:0c:fc:39:b6:c8:e3:79:ac:42:e9:96:fb:
                    e2:34:24:b5:15:9f:a2:b8:3f:64:29:d3:94:49:a9:
                    13:54:d4:5e:c3:7c:b0:66:d9:df:e2:f5:fb:ee:e3:
                    17:b8:99:41:8e:75:aa:63:de:7d:a4:5b:02:69:67:
                    a2:f7:7d:5f:c1:3c:77:1c:eb:45:ee:29:b4:d3:4e:
                    64:bb:18:67:48:ee:55:1e:84:fa:e2:07:be:79:df:
                    d0:4c:55:e9:66:f5:85:1b:d6:9b:11:c0:83:de:79:
                    2d:36:58:29:ec:d3:93:24:96:5e:c7:a8:2a:65:6f:
                    d4:9f:e3:d2:ae:de:9b:46:ae:ca:77:d1:45:82:95:
                    9c:bd:2f:e5:e9:7f:1f:3c:9d:11:1b:44:7a:00:2a:
                    4f:cb:be:12:a4:1b:b8:b7:d0:3a:ad:ea:3f:af:5f:
                    85:62:03:31:9a:5f:2d:60:22:c5:32:1e:a6:d0:cb:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:18:09:A1:4E:F3:45:AE:4D:B1:F6:00:B8:30:00:81:50:88:8C:E9
            X509v3 Authority Key Identifier:
                keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:6b:e6:d6:ee:80:f4:78:37:8a:a4:49:05:70:cc:f2:ea:b6:
         10:a2:cb:1c:b5:43:20:c5:d8:dc:fb:84:36:6f:96:92:36:bb:
         7a:b5:6e:e6:1f:1e:ba:00:ab:63:0c:f6:ad:9b:5b:80:d5:79:
         83:15:55:9a:6e:a1:3a:2d:b4:53:cc:e0:2e:a4:ee:6a:40:0f:
         13:9c:85:e2:70:4a:de:b8:4a:20:61:da:b7:55:e8:6a:0c:73:
         fc:58:c9:be:a6:06:6c:8d:5e:bf:77:6d:77:61:29:81:f6:00:
         c0:5a:5e:05:b1:fa:84:24:d8:39:94:e2:4c:cb:b5:8b:95:cd:
         5e:48:06:12:17:3e:53:b9:a8:6c:c2:e7:bc:7d:cf:8e:62:68:
         a7:5c:c5:46:99:dc:d9:72:25:56:d9:fb:07:84:39:b0:81:f9:
         79:76:86:e1:89:30:50:d3:b4:53:3d:ab:66:f7:8f:45:ac:5c:
         cb:f4:23:0b:b2:d2:40:28:ef:af:79:2f:c6:ef:97:9f:fa:93:
         23:cf:fb:9f:ce:82:f4:7a:c8:17:59:71:b7:d8:55:08:9a:6b:
         07:c1:e6:31:91:79:8d:76:3c:22:23:ae:81:35:87:02:99:72:
         8c:54:3c:29:f5:08:40:7a:b0:47:93:ac:11:e0:8c:d8:07:46:
         d5:2d:a0:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqBAtjutyvZ8I1zbELytiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNGQ1MmFiMDliMTZkNzJmNGMzZTQ4Y2M0YjQ5MDI1ZDA4
MzY3NmQwHhcNMjUwODIzMDIwMDQwWhcNMjUwODI0MDIwMDQwWjAzMTEwLwYDVQQD
EygxODE4MDlhMTRlZjM0NWFlNGRiMWY2MDBiODMwMDA4MTUwODg4Y2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseFJn+n8B2cRE29mQaU7sdpEGt9S
RNGbdCEo68OEqU8PEzPbwP3s0+6//WF0z6AHUpn8dfMZ/5AmO0oiQViMzggcfc4L
a9w3fZUtze0M/Dm2yON5rELplvviNCS1FZ+iuD9kKdOUSakTVNRew3ywZtnf4vX7
7uMXuJlBjnWqY959pFsCaWei931fwTx3HOtF7im0005kuxhnSO5VHoT64ge+ed/Q
TFXpZvWFG9abEcCD3nktNlgp7NOTJJZex6gqZW/Un+PSrt6bRq7Kd9FFgpWcvS/l
6X8fPJ0RG0R6ACpPy74SpBu4t9A6reo/r1+FYgMxml8tYCLFMh6m0Mvd+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgYCaFO80WuTbH2ALgwAIFQiIzpMB8GA1UdIwQY
MBaAFNtNUqsJsW1y9MPkjMS0kCXQg2dtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iYTJiYWQtZWQzNS00NWMzLWI4NGUt
MjJiZGVmOTliY2VhLzEvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iYTJiYWQtZWQzNS00NWMzLWI4NGUtMjJiZGVmOTliY2Vh
LzEvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWvm1u6A
9Hg3iqRJBXDM8uq2EKLLHLVDIMXY3PuENm+Wkja7erVu5h8eugCrYwz2rZtbgNV5
gxVVmm6hOi20U8zgLqTuakAPE5yF4nBK3rhKIGHat1Xoagxz/FjJvqYGbI1ev3dt
d2EpgfYAwFpeBbH6hCTYOZTiTMu1i5XNXkgGEhc+U7mobMLnvH3PjmJop1zFRpnc
2XIlVtn7B4Q5sIH5eXaG4YkwUNO0Uz2rZvePRaxcy/QjC7LSQCjvr3kvxu+Xn/qT
I8/7n86C9HrIF1lxt9hVCJprB8HmMZF5jXY8IiOugTWHAplyjFQ8KfUIQHqwR5Os
EeCM2AdG1S2gWQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:13 2025 by rpki-client