Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File:                     j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier:          nov6E3aGfI2BDWybq6+YV0FZdXYRMv7wWgOfB80VCCc=
Subject key identifier:   D7:85:91:11:87:37:F2:88:1E:94:C9:A5:77:31:89:99:66:C3:49:4D
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer:       /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial:       0198D54E44E43CE51C175A4FDE58C8D344B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 05:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:13 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:13 +0000
Files and hashes:         1: Y7eKY9L9f9B1QlpP7Px14Uk4KN0.roa (hash: Ti8fjG26nfzvszXNq8D1c3nuNhyRNxvinzWzoAh4fqQ=)
                          2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: /xqWhF5TOdSIf8JimtZV6W6CHXwzRR0Leuqjcu6hO4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:44:e4:3c:e5:1c:17:5a:4f:de:58:c8:d3:44:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
        Validity
            Not Before: Aug 23 05:02:13 2025 GMT
            Not After : Aug 24 05:02:13 2025 GMT
        Subject: CN=d78591118737f2881e94c9a57731899966c3494d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:14:13:3c:26:ae:19:de:26:1a:1f:c9:24:
                    e8:59:89:19:d7:6e:d5:b7:92:d3:10:46:f8:1c:ca:
                    0e:1d:36:61:3d:6d:73:3e:be:4e:a6:f5:cc:1f:7e:
                    85:c7:63:85:5c:3c:26:36:8c:4e:93:32:d2:75:fd:
                    5b:86:92:ac:f4:be:33:19:b9:72:b6:1f:b3:d7:a2:
                    95:9e:81:ae:40:e3:10:78:03:ee:e6:4a:44:6b:23:
                    2e:24:8f:f8:fd:90:5e:16:78:bd:79:9e:8e:e6:3d:
                    f4:c2:18:31:5b:48:47:bb:f7:a7:dc:7b:12:3a:f4:
                    56:e4:52:a5:08:6b:be:aa:af:d2:c9:4f:cd:55:e3:
                    48:b5:5e:7a:73:aa:3d:1c:3e:fd:55:3d:a7:f7:5e:
                    08:57:03:e3:65:5d:dc:50:62:1f:63:2a:7c:fd:a0:
                    ed:08:e6:ad:4e:5e:3e:c5:4b:bc:cb:bd:b4:59:44:
                    99:f7:0e:1d:c3:c2:ed:2a:01:77:95:95:08:79:df:
                    5a:f7:e5:a6:04:3d:12:35:92:f7:41:eb:9a:07:d7:
                    77:3b:b1:36:2f:38:af:c9:e7:05:5d:74:db:79:31:
                    8c:0f:61:d4:f4:fc:02:ce:5f:3d:fa:ff:67:55:8f:
                    82:85:fb:35:29:63:66:92:d0:b6:3e:22:fb:be:a6:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:85:91:11:87:37:F2:88:1E:94:C9:A5:77:31:89:99:66:C3:49:4D
            X509v3 Authority Key Identifier:
                keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a7:45:0b:59:59:9a:df:94:18:fb:ac:e0:5c:d1:05:8b:17:
         fe:9a:02:47:a2:74:ce:ed:b0:f9:5b:95:cb:e1:fa:44:aa:25:
         aa:68:94:67:dd:cf:03:c6:e4:87:34:f2:2e:f2:4b:8f:17:a8:
         fc:4e:5f:3c:1d:d3:e8:c5:89:66:34:54:0b:c6:d9:af:30:1f:
         1b:2c:4d:88:9b:a4:77:74:99:70:cf:79:73:73:f5:ab:7b:d1:
         44:6b:e7:50:22:01:f0:01:56:23:14:af:2d:8a:53:44:df:89:
         1f:b0:01:fd:28:2e:a6:dd:21:bd:e3:73:78:32:d2:75:db:43:
         06:67:ac:1f:17:3a:3b:46:80:92:a9:74:20:79:53:45:67:37:
         52:48:e9:dd:11:68:72:72:bd:67:5f:8e:28:1a:78:30:1f:17:
         f6:25:7c:f6:bc:53:1f:5f:72:13:8a:d7:77:61:da:17:42:0c:
         df:b8:db:a4:46:f7:b9:9f:99:bf:27:84:aa:7c:4a:74:85:e7:
         81:9f:4e:22:4d:57:c6:9c:12:8d:fa:a9:94:9a:b0:88:e2:73:
         ae:70:f9:b9:af:41:9e:26:04:25:8f:4a:e3:74:bf:fa:8a:c6:
         48:9e:06:e8:92:17:d7:41:46:b6:ae:e0:3e:58:0a:e9:0d:e1:
         36:bc:7d:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTkTkPOUcF1pP3ljI00S4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYjYxMzNkNWMyMTA5ZDhhNmY5YmJjYWE0OTZkYmVhZTM0
Nzk3NWMwHhcNMjUwODIzMDUwMjEzWhcNMjUwODI0MDUwMjEzWjAzMTEwLwYDVQQD
EyhkNzg1OTExMTg3MzdmMjg4MWU5NGM5YTU3NzMxODk5OTY2YzM0OTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWAUEzwmrhneJhofySToWYkZ127V
t5LTEEb4HMoOHTZhPW1zPr5OpvXMH36Fx2OFXDwmNoxOkzLSdf1bhpKs9L4zGbly
th+z16KVnoGuQOMQeAPu5kpEayMuJI/4/ZBeFni9eZ6O5j30whgxW0hHu/en3HsS
OvRW5FKlCGu+qq/SyU/NVeNItV56c6o9HD79VT2n914IVwPjZV3cUGIfYyp8/aDt
COatTl4+xUu8y720WUSZ9w4dw8LtKgF3lZUIed9a9+WmBD0SNZL3QeuaB9d3O7E2
LzivyecFXXTbeTGMD2HU9PwCzl89+v9nVY+Chfs1KWNmktC2PiL7vqbcqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeFkRGHN/KIHpTJpXcxiZlmw0lNMB8GA1UdIwQY
MBaAFI+2Ez1cIQnYpvm7yqSW2+rjR5dcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZGU0MTAtNGU4Yy00MTJlLTk3NTQt
NDUxYTlhZTRjZTUxLzEvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hZGU0MTAtNGU4Yy00MTJlLTk3NTQtNDUxYTlhZTRjZTUx
LzEvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6dFC1lZ
mt+UGPus4FzRBYsX/poCR6J0zu2w+VuVy+H6RKolqmiUZ93PA8bkhzTyLvJLjxeo
/E5fPB3T6MWJZjRUC8bZrzAfGyxNiJukd3SZcM95c3P1q3vRRGvnUCIB8AFWIxSv
LYpTRN+JH7AB/Sgupt0hveNzeDLSddtDBmesHxc6O0aAkql0IHlTRWc3Ukjp3RFo
cnK9Z1+OKBp4MB8X9iV89rxTH19yE4rXd2HaF0IM37jbpEb3uZ+ZvyeEqnxKdIXn
gZ9OIk1XxpwSjfqplJqwiOJzrnD5ua9BniYEJY9K43S/+orGSJ4G6JIX10FGtq7g
PlgK6Q3hNrx9Fg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:53 2025 by rpki-client