Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
File:                     p03gktwuTXKqfmqWDSGtTnl1izw.mft (raw, json)
Hash identifier:          oCpQ7iGlqo4v3W15dDeuAP+K0oZYXrfNGPXGQN1Nm9I=
Subject key identifier:   F7:A1:E0:65:01:04:9D:60:8C:CE:A0:38:FC:94:19:00:F3:29:73:F2
Authority key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
Certificate issuer:       /CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Certificate serial:       0198D8845E8D45F326BBC40C2EF569CB5754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 20:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 20:00:10 +0000
Manifest next update:     Sun 24 Aug 2025 20:00:10 +0000
Files and hashes:         1: h56nNbes2ivx0npJDLsxR_z62Zo.roa (hash: wxs3EMyvsXJWyJHCo0ZYi2lqFjVWRDaFII6/r1MtHp4=)
                          2: p03gktwuTXKqfmqWDSGtTnl1izw.crl (hash: +xAqkChocUdSTgnMi0GCIsh+xcUCLzUA0/Z4l6SnnhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:84:5e:8d:45:f3:26:bb:c4:0c:2e:f5:69:cb:57:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
        Validity
            Not Before: Aug 23 20:00:10 2025 GMT
            Not After : Aug 24 20:00:10 2025 GMT
        Subject: CN=f7a1e06501049d608ccea038fc941900f32973f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:1c:82:e2:10:5a:b9:99:d5:15:4d:9f:f5:
                    a3:7f:81:ce:e1:62:04:a3:4b:78:d1:d9:3d:96:66:
                    d2:29:86:3a:92:41:f0:6e:84:75:7d:67:0d:10:b9:
                    67:e0:a9:e9:ca:4c:be:5d:08:24:7a:44:c3:9f:1b:
                    0a:2f:36:63:d2:0a:55:7e:3e:1b:b6:87:d2:c9:41:
                    e7:8b:a4:4f:9a:f2:3d:e2:72:e0:65:ab:15:4b:00:
                    15:8e:55:4e:74:1f:c0:97:4d:04:53:67:58:59:a7:
                    1b:7b:53:d7:09:10:5c:27:32:fe:48:eb:f4:3e:7c:
                    69:2b:4d:6b:4a:c1:d6:85:ff:53:0f:e2:d3:26:11:
                    44:e8:00:8d:58:9c:19:53:00:b0:b3:ca:54:83:ba:
                    8b:7a:28:e4:2f:c7:6f:af:a0:82:fd:6e:d1:18:02:
                    05:95:d2:89:0c:aa:a6:c2:8b:a8:d3:88:d5:c5:02:
                    8d:84:6a:82:bd:4f:6a:d2:b9:1d:71:f3:67:3d:49:
                    d8:5e:97:5e:cd:f5:df:07:4a:0e:84:08:2d:aa:13:
                    da:66:a1:44:6f:7b:3e:f8:86:09:8f:80:b8:1c:e0:
                    41:bc:bd:ef:13:fa:00:3d:e3:2f:d9:9e:c5:64:a1:
                    f0:70:bd:26:3c:87:15:18:4c:e1:00:4c:c7:32:31:
                    9a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A1:E0:65:01:04:9D:60:8C:CE:A0:38:FC:94:19:00:F3:29:73:F2
            X509v3 Authority Key Identifier:
                keyid:A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e1:04:e4:47:6e:54:e5:d0:b1:31:ce:e5:c6:d5:b7:1c:fc:
         ac:14:a8:ff:7d:df:ea:2c:f8:e0:ad:27:4c:29:c4:09:00:6b:
         17:8f:08:eb:9f:49:7e:93:87:45:05:44:e3:8f:f4:7f:6b:82:
         2c:bb:cf:ab:cb:50:d4:f2:c0:04:7f:d4:e3:a9:62:c5:c8:32:
         d6:e8:15:1e:40:67:59:83:1f:1d:7b:cf:f1:99:0d:da:20:43:
         a9:b6:9e:d6:21:e3:ca:36:57:01:30:4d:f5:c4:5d:23:16:1f:
         46:91:e9:ef:f1:e0:51:58:bb:05:80:bb:45:45:ab:3d:90:a8:
         8b:84:dd:bc:7c:ff:e7:9e:ca:47:d4:5b:dc:b0:86:9b:29:a2:
         45:98:8a:c2:c1:8f:18:fb:07:5a:02:58:c2:e0:80:f9:95:fd:
         c9:74:8f:e4:b8:ac:e9:fa:b0:17:89:fe:5c:62:f1:0b:fd:35:
         6f:70:95:3f:1f:d3:93:44:5b:15:c5:f2:7e:f2:e0:f3:fe:ab:
         9a:05:3e:25:20:6c:f2:92:3d:cf:ac:57:67:d9:fb:87:34:b3:
         34:27:ce:3e:b6:28:26:2f:ca:2e:da:b4:8b:b2:c4:76:df:9d:
         b5:4d:e1:3b:9d:20:29:61:df:ab:01:07:78:a7:3f:37:4b:f9:
         1e:df:ae:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYhF6NRfMmu8QMLvVpy1dUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NGRlMDkyZGMyZTRkNzJhYTdlNmE5NjBkMjFhZDRlNzk3
NThiM2MwHhcNMjUwODIzMjAwMDEwWhcNMjUwODI0MjAwMDEwWjAzMTEwLwYDVQQD
EyhmN2ExZTA2NTAxMDQ5ZDYwOGNjZWEwMzhmYzk0MTkwMGYzMjk3M2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZEcguIQWrmZ1RVNn/Wjf4HO4WIE
o0t40dk9lmbSKYY6kkHwboR1fWcNELln4Knpyky+XQgkekTDnxsKLzZj0gpVfj4b
tofSyUHni6RPmvI94nLgZasVSwAVjlVOdB/Al00EU2dYWacbe1PXCRBcJzL+SOv0
PnxpK01rSsHWhf9TD+LTJhFE6ACNWJwZUwCws8pUg7qLeijkL8dvr6CC/W7RGAIF
ldKJDKqmwouo04jVxQKNhGqCvU9q0rkdcfNnPUnYXpdezfXfB0oOhAgtqhPaZqFE
b3s++IYJj4C4HOBBvL3vE/oAPeMv2Z7FZKHwcL0mPIcVGEzhAEzHMjGa1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeh4GUBBJ1gjM6gOPyUGQDzKXPyMB8GA1UdIwQY
MBaAFKdN4JLcLk1yqn5qlg0hrU55dYs8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDAzZ2t0d3VUWEtxZm1xV0RTR3RUbmwxaXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80Njk5NzQtMTE4NC00ODI0LTkxODEt
ZjRhMjc1ZDZiNTg0LzEvcDAzZ2t0d3VUWEtxZm1xV0RTR3RUbmwxaXp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi80Njk5NzQtMTE4NC00ODI0LTkxODEtZjRhMjc1ZDZiNTg0
LzEvcDAzZ2t0d3VUWEtxZm1xV0RTR3RUbmwxaXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOEE5Edu
VOXQsTHO5cbVtxz8rBSo/33f6iz44K0nTCnECQBrF48I659JfpOHRQVE44/0f2uC
LLvPq8tQ1PLABH/U46lixcgy1ugVHkBnWYMfHXvP8ZkN2iBDqbae1iHjyjZXATBN
9cRdIxYfRpHp7/HgUVi7BYC7RUWrPZCoi4TdvHz/557KR9Rb3LCGmymiRZiKwsGP
GPsHWgJYwuCA+ZX9yXSP5Lis6fqwF4n+XGLxC/01b3CVPx/Tk0RbFcXyfvLg8/6r
mgU+JSBs8pI9z6xXZ9n7hzSzNCfOPrYoJi/KLtq0i7LEdt+dtU3hO50gKWHfqwEH
eKc/N0v5Ht+u6g==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:16:18 2025 by rpki-client