Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File:                     Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier:          Ot9bErm4ULVr5j/+m++xFEmx8al4r8ectnm+jpYu6/4=
Subject key identifier:   56:BB:5E:52:E4:A8:40:1B:38:02:8E:DC:B7:52:AC:48:36:5B:A4:78
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer:       /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial:       0198D65FE3C8CF0A82A64AED9FDC68ACA711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 10:01:04 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:04 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:04 +0000
Files and hashes:         1: 0xDZgWnts24csgnMxUD8LWhBHU4.roa (hash: Y8cjviLWLv7KyuSufCFJinPdimRipqIY80BDPZZpv3c=)
                          2: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: tNRGUQfbDh502OJZwAs0QSrPj7N4gMiNJkOnsltac4A=)
                          3: U_CJPYiKsC4pTY0SsfSjtBrH8dE.roa (hash: AQXnBaIOWVXqlXh1gif0C/a7bntYjy34IbEEU6kS/30=)
                          4: a7j4aToRp-Rf0IqyeByNF9Ocsfw.roa (hash: 9QeK1R+lwAXK6vSpE67n1ijYEIdp5QQxcwabJABYuQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:e3:c8:cf:0a:82:a6:4a:ed:9f:dc:68:ac:a7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
        Validity
            Not Before: Aug 23 10:01:04 2025 GMT
            Not After : Aug 24 10:01:04 2025 GMT
        Subject: CN=56bb5e52e4a8401b38028edcb752ac48365ba478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:26:9a:55:7b:54:4c:c9:60:77:a1:b1:c7:d1:
                    ba:d0:f1:ef:93:09:7c:da:cc:30:46:5f:67:f5:71:
                    47:38:30:26:e0:41:2b:d5:87:ec:ab:01:41:37:25:
                    5b:33:a6:f7:53:c1:84:d3:db:e2:41:98:30:54:1a:
                    53:d9:b1:64:c3:10:da:1f:9d:0b:c2:b6:75:6b:c9:
                    58:e9:6f:68:dd:26:b7:b1:24:b0:a2:a0:21:1e:0c:
                    a2:e1:e6:6c:38:1a:d1:01:5e:d8:ab:df:f0:b6:d5:
                    00:a5:49:be:ce:b8:05:b1:c1:3b:0c:2e:38:1e:bf:
                    ce:a6:2e:62:78:e6:ee:f9:3d:1f:12:48:f6:19:30:
                    1c:01:e5:42:9f:78:48:23:c6:fc:2e:0f:23:9e:41:
                    35:6e:ab:14:93:91:1e:58:7c:a8:ca:f9:d7:94:d1:
                    a0:6e:ca:f2:4f:6b:d9:d2:02:1c:74:96:c7:e0:7d:
                    1a:1d:56:58:2d:48:d6:c3:24:25:7c:8d:f5:09:6e:
                    d4:2f:cf:20:14:7a:7f:4d:5f:29:78:e0:13:90:e4:
                    80:0c:9c:65:5b:33:27:0f:d1:78:eb:d0:d3:e2:ac:
                    3b:47:5d:df:65:97:52:7f:6e:20:d5:e5:63:47:71:
                    43:7d:11:14:37:46:e9:f0:f4:bf:6c:2b:36:2d:d3:
                    4a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BB:5E:52:E4:A8:40:1B:38:02:8E:DC:B7:52:AC:48:36:5B:A4:78
            X509v3 Authority Key Identifier:
                keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f9:61:bf:3e:ce:d0:8a:16:17:14:16:65:85:71:9b:88:1f:
         9d:54:f1:45:a1:7f:ca:16:08:8e:85:1a:3c:6e:b2:68:e6:ee:
         08:b5:ba:7b:11:65:f1:8b:76:87:22:bd:ff:31:ec:e6:10:59:
         dd:8f:18:e1:fa:ee:95:99:37:3b:9c:37:44:c6:79:bd:b3:44:
         28:54:7c:e8:1a:7f:f4:2f:c9:c2:09:8d:fb:ba:33:5d:65:b8:
         98:c6:e9:c0:4d:cd:a0:6b:bc:e5:0c:a7:e3:69:cc:18:05:4a:
         a0:dd:9e:f4:ac:c7:16:df:87:61:4c:8f:42:2a:7f:06:d1:82:
         b7:fa:16:6c:fd:4e:00:b9:75:74:9c:60:08:ef:6c:4d:21:16:
         b9:d2:f0:b0:da:99:24:c4:e0:6a:29:f9:9b:c9:da:ed:51:19:
         d8:48:7b:80:7c:33:4a:f4:47:8a:b2:15:8a:42:d0:1e:88:74:
         60:5f:5b:69:ae:f6:40:35:60:cf:8b:57:1e:d0:9c:1f:7c:ac:
         94:e7:38:19:1b:df:9b:f1:e3:83:c7:8d:d8:ba:3b:9f:ee:d8:
         27:fe:9c:e6:03:01:b1:61:83:7d:60:44:3f:45:93:6c:fc:83:
         d1:58:be:4f:f8:24:0b:c9:74:09:72:85:56:5b:a0:c9:74:c7:
         1b:6f:62:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX+PIzwqCpkrtn9xorKcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5Y2QyMThhYmNkZjY2ZTc5NTAwYWI5MTNjZDIxY2YwNmU0
MDVkNGUwHhcNMjUwODIzMTAwMTA0WhcNMjUwODI0MTAwMTA0WjAzMTEwLwYDVQQD
Eyg1NmJiNWU1MmU0YTg0MDFiMzgwMjhlZGNiNzUyYWM0ODM2NWJhNDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiaaVXtUTMlgd6Gxx9G60PHvkwl8
2swwRl9n9XFHODAm4EEr1YfsqwFBNyVbM6b3U8GE09viQZgwVBpT2bFkwxDaH50L
wrZ1a8lY6W9o3Sa3sSSwoqAhHgyi4eZsOBrRAV7Yq9/wttUApUm+zrgFscE7DC44
Hr/Opi5ieObu+T0fEkj2GTAcAeVCn3hII8b8Lg8jnkE1bqsUk5EeWHyoyvnXlNGg
bsryT2vZ0gIcdJbH4H0aHVZYLUjWwyQlfI31CW7UL88gFHp/TV8peOATkOSADJxl
WzMnD9F469DT4qw7R13fZZdSf24g1eVjR3FDfREUN0bp8PS/bCs2LdNK8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFa7XlLkqEAbOAKO3LdSrEg2W6R4MB8GA1UdIwQY
MBaAFAnNIYq832bnlQCrkTzSHPBuQF1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2Qt
NGMxOWVjNWI1N2NhLzEvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2QtNGMxOWVjNWI1N2Nh
LzEvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFflhvz7O
0IoWFxQWZYVxm4gfnVTxRaF/yhYIjoUaPG6yaObuCLW6exFl8Yt2hyK9/zHs5hBZ
3Y8Y4frulZk3O5w3RMZ5vbNEKFR86Bp/9C/JwgmN+7ozXWW4mMbpwE3NoGu85Qyn
42nMGAVKoN2e9KzHFt+HYUyPQip/BtGCt/oWbP1OALl1dJxgCO9sTSEWudLwsNqZ
JMTgain5m8na7VEZ2Eh7gHwzSvRHirIVikLQHoh0YF9baa72QDVgz4tXHtCcH3ys
lOc4GRvfm/Hjg8eN2Lo7n+7YJ/6c5gMBsWGDfWBEP0WTbPyD0Vi+T/gkC8l0CXKF
VlugyXTHG29iVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:31 2025 by rpki-client