Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
File:                     q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json)
Hash identifier:          YBsSwxGAdpZ9Tfhz+zVeeOJafHZXOHGliS16lgxLtYg=
Subject key identifier:   C8:5C:DE:C2:F6:F0:39:5A:26:D4:D2:EB:8A:32:1B:07:E9:94:DF:9E
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Certificate issuer:       /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial:       0198D54DC7693291E1A469A8920DFF108152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
Manifest number:          168D
Signing time:             Sat 23 Aug 2025 05:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:40 +0000
Files and hashes:         1: OWpwpyh1mzp7VRLchsqWjA7Bd6c.roa (hash: oss82o3LFtVmuDKRa45drAtMghVcyPl5JboekWr/Lf4=)
                          2: VAImUOtIDMTUQI76JnLfRrvllyo.roa (hash: 4SRj/s3ojBfQysGt03CIZScJZWxzkyEXZbgo7Y3hEkk=)
                          3: a-k-PpKc_hbf1tf8ym45DzWV9JI.roa (hash: CGjB95jiiaCzW7zL6nSnhujYT7ypy6568fnCUOok1Hk=)
                          4: cqMsKKEpjqP4gOzkP6YxkMm3WxE.roa (hash: cpcpc/9CzEy+wkt4CwIjle5PkQNTLuHjrssCk9RjDo4=)
                          5: hJ2Q_kNZVtX9DYCp6pRdbULfToU.roa (hash: Bj3orwiHHH0lwtlViSgWz8igoGg/S7618D6XjO8Tllo=)
                          6: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: cricxOO3n7qEDcVwR+Gi32AmdtHXYYi0NVD5yTTmCC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:c7:69:32:91:e1:a4:69:a8:92:0d:ff:10:81:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
        Validity
            Not Before: Aug 23 05:01:40 2025 GMT
            Not After : Aug 24 05:01:40 2025 GMT
        Subject: CN=c85cdec2f6f0395a26d4d2eb8a321b07e994df9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:00:de:6c:1e:c5:77:4e:e1:7b:69:97:fc:94:
                    4c:2a:93:1c:c3:bc:6e:0e:8d:8d:a7:65:d5:ad:ee:
                    62:81:8c:02:c6:62:a1:58:8f:27:04:fe:db:47:ff:
                    f4:a2:d4:4a:98:a1:2b:ae:28:08:5d:6d:b6:f3:b3:
                    72:9f:7b:a6:82:3a:4f:cb:e1:79:09:15:f0:fc:8b:
                    59:f2:dd:56:a2:4f:21:04:7c:cd:16:de:cf:fe:d1:
                    45:fe:02:c6:d8:1c:8a:2a:9f:a9:ec:69:cc:85:1b:
                    27:15:a3:1c:14:32:70:df:fb:d5:fa:68:04:4d:45:
                    4a:aa:5a:26:7c:c5:2c:6e:99:68:7a:a2:96:4e:42:
                    32:9f:24:d1:9e:39:33:1c:fa:66:e3:8e:ec:2a:23:
                    c4:5c:fa:de:2e:71:82:23:35:18:a1:70:ba:2f:0d:
                    85:f2:02:62:51:a4:75:1a:d1:be:4f:24:04:2f:38:
                    fc:4a:80:06:0e:52:90:83:73:c7:50:49:35:dd:12:
                    87:62:b5:e1:9d:f0:be:8c:f3:d0:3a:01:8b:20:eb:
                    f8:35:aa:2e:25:ab:99:34:25:cc:50:97:5e:a8:cf:
                    59:39:dd:fc:2a:76:4d:4a:78:27:70:8c:d9:3d:a4:
                    7d:6c:b9:2c:65:a7:14:4e:1c:90:94:e9:e4:e3:41:
                    18:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5C:DE:C2:F6:F0:39:5A:26:D4:D2:EB:8A:32:1B:07:E9:94:DF:9E
            X509v3 Authority Key Identifier:
                keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:48:18:56:d1:b6:ae:d1:0a:f8:f9:fe:63:93:f1:5e:77:74:
         b8:ed:cd:d4:27:02:26:36:10:69:da:91:7d:76:7a:c2:7c:69:
         52:31:03:54:0b:e5:c7:a3:76:d5:e4:35:56:36:44:53:3d:64:
         d5:65:7d:e7:ee:6b:ed:eb:5c:0e:ad:11:ff:64:7b:2b:de:2f:
         d7:7d:90:4a:3f:5f:db:8c:af:ae:c0:df:8f:20:35:52:e2:c5:
         3c:95:18:78:24:dc:68:3e:e8:92:ee:f3:43:7e:21:33:81:3f:
         92:c6:fa:8e:0b:d5:fa:4b:7b:16:30:87:56:23:ee:91:5b:6d:
         ee:95:86:8b:7f:34:e2:82:93:f7:bc:70:d3:5e:0b:43:fb:fb:
         92:bc:5a:15:cc:ee:60:11:a0:fa:18:3e:55:10:aa:ee:38:23:
         ee:74:ae:65:a7:9b:c9:e4:27:8a:b6:8b:7e:e9:ce:b2:d7:75:
         70:66:28:4d:c0:97:2f:d5:e9:eb:44:3a:97:a2:ac:df:b0:a1:
         44:ec:2d:cb:35:97:fd:4c:68:fe:a9:83:f6:51:74:3a:72:65:
         c4:0b:58:c8:31:9d:c5:df:b9:e9:72:c3:6d:50:5a:21:b4:92:
         74:f5:de:eb:df:4a:99:62:c2:11:32:5f:98:92:2a:3b:ed:f0:
         55:bf:f8:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcdpMpHhpGmokg3/EIFSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYmFkM2RlODMxZGE5NDIyMmMxYWRkMTA0Y2FmNGMzMjQ3
Njg5YWMwHhcNMjUwODIzMDUwMTQwWhcNMjUwODI0MDUwMTQwWjAzMTEwLwYDVQQD
EyhjODVjZGVjMmY2ZjAzOTVhMjZkNGQyZWI4YTMyMWIwN2U5OTRkZjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQDebB7Fd07he2mX/JRMKpMcw7xu
Do2Np2XVre5igYwCxmKhWI8nBP7bR//0otRKmKErrigIXW2287Nyn3umgjpPy+F5
CRXw/ItZ8t1Wok8hBHzNFt7P/tFF/gLG2ByKKp+p7GnMhRsnFaMcFDJw3/vV+mgE
TUVKqlomfMUsbploeqKWTkIynyTRnjkzHPpm447sKiPEXPreLnGCIzUYoXC6Lw2F
8gJiUaR1GtG+TyQELzj8SoAGDlKQg3PHUEk13RKHYrXhnfC+jPPQOgGLIOv4Naou
JauZNCXMUJdeqM9ZOd38KnZNSngncIzZPaR9bLksZacUThyQlOnk40EYNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhc3sL28DlaJtTS64oyGwfplN+eMB8GA1UdIwQY
MBaAFKu6096DHalCIsGt0QTK9MMkdomsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDct
NTVjNDM0ZWVjOTZjLzEvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDctNTVjNDM0ZWVjOTZj
LzEvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkgYVtG2
rtEK+Pn+Y5PxXnd0uO3N1CcCJjYQadqRfXZ6wnxpUjEDVAvlx6N21eQ1VjZEUz1k
1WV95+5r7etcDq0R/2R7K94v132QSj9f24yvrsDfjyA1UuLFPJUYeCTcaD7oku7z
Q34hM4E/ksb6jgvV+kt7FjCHViPukVtt7pWGi3804oKT97xw014LQ/v7krxaFczu
YBGg+hg+VRCq7jgj7nSuZaebyeQniraLfunOstd1cGYoTcCXL9Xp60Q6l6Ks37Ch
ROwtyzWX/Uxo/qmD9lF0OnJlxAtYyDGdxd+56XLDbVBaIbSSdPXe699KmWLCETJf
mJIqO+3wVb/4+A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:03 2025 by rpki-client