Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
File:                     c_2uFQUEnkRtWw0USsyGDWwYFnw.mft (raw, json)
Hash identifier:          HEHYa38Hoaw902pXmP1sY6pb1lag+A0RbT3GVYFyz1c=
Subject key identifier:   D5:50:FD:08:FD:14:B6:29:3D:BF:B3:24:38:C3:C4:F0:09:86:AE:D7
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Certificate issuer:       /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial:       0198D69806905691BA121E489F4C3DDD26BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 11:02:24 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:24 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:24 +0000
Files and hashes:         1: TTDv1twa5Oq2wS4kqb31Wa4mKwc.roa (hash: kNwC0HcE7BSu6NKB5QfTvVm3I8iIUDuBU4W9LJhw8AE=)
                          2: c_2uFQUEnkRtWw0USsyGDWwYFnw.crl (hash: z2zmkjKfZX76LsprOnvgqUhjaNZDWMlC+2Fotzov0Pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:06:90:56:91:ba:12:1e:48:9f:4c:3d:dd:26:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
        Validity
            Not Before: Aug 23 11:02:24 2025 GMT
            Not After : Aug 24 11:02:24 2025 GMT
        Subject: CN=d550fd08fd14b6293dbfb32438c3c4f00986aed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:ef:cf:3e:de:1f:75:e7:55:dc:7a:a5:26:
                    25:e8:59:33:31:e0:51:7d:e4:e2:42:89:20:41:88:
                    1e:c8:3f:7f:f4:3f:b5:05:a9:ef:0c:a3:04:d9:f9:
                    47:7f:81:3d:b8:0a:71:7d:6d:b8:6e:4f:14:0b:3d:
                    cc:83:7f:f1:5c:8d:74:33:e3:80:be:aa:90:0f:94:
                    0f:f0:bc:cd:e7:b6:5b:90:6c:ea:04:c0:2d:c2:6f:
                    36:3b:a9:03:17:5e:ab:fe:32:35:53:9f:12:fa:fb:
                    79:20:0d:29:c5:49:63:65:27:19:0a:74:c1:e6:95:
                    4a:75:4e:9c:99:44:f4:9c:15:1c:c8:43:40:04:1e:
                    6b:41:d0:a7:ae:64:b1:d6:b5:7c:2b:be:88:a0:90:
                    fe:9b:de:09:30:e4:13:6c:5b:85:4a:af:7f:48:e6:
                    c6:3a:96:8a:37:64:83:a6:bf:e2:2c:71:38:2d:78:
                    be:48:02:bd:12:10:6b:0d:bb:aa:a7:9c:e7:6b:18:
                    9f:24:8a:c8:fe:65:16:38:f7:db:e2:cc:8f:33:09:
                    d1:67:bd:ec:59:fd:50:1d:ac:24:1e:18:fb:1f:73:
                    d9:43:53:1b:8d:6d:bc:28:75:b8:ea:58:81:66:af:
                    ff:39:ec:2a:cf:f3:b3:ca:e7:de:50:04:4d:87:b9:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:50:FD:08:FD:14:B6:29:3D:BF:B3:24:38:C3:C4:F0:09:86:AE:D7
            X509v3 Authority Key Identifier:
                keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1f:b9:00:2b:42:4a:46:a0:1e:0d:1f:51:1a:ae:d9:c1:7f:
         d8:48:b9:67:bd:2f:f4:06:6e:98:af:a3:04:0a:18:fa:46:4a:
         51:7a:76:86:eb:d7:37:de:dd:da:c3:36:af:2e:c2:4d:33:0a:
         36:57:7f:60:10:75:bd:6d:82:92:1e:8b:2e:dd:73:0b:12:84:
         eb:d1:65:7c:e9:27:6a:d8:78:20:cd:c9:85:1c:7e:0d:95:86:
         98:21:6c:f1:a1:ff:b0:45:19:88:b8:52:93:76:bc:f0:52:b8:
         c2:8c:30:68:10:11:63:0f:fc:92:d3:83:6d:1d:c7:80:d9:7d:
         fd:03:f3:01:ec:fe:68:19:5c:22:75:dc:6e:15:fb:05:bf:a9:
         4b:79:4b:fa:c2:aa:00:3d:ec:ba:c1:2c:a2:7c:08:43:3a:3c:
         fd:e8:7d:89:70:b1:8a:bf:83:12:a6:52:05:fd:d7:7c:90:13:
         fa:ee:10:2c:66:82:8b:16:3b:74:92:1b:41:aa:8e:6a:76:89:
         6f:c5:18:ae:ce:44:dc:3b:f1:c5:23:b5:fd:38:7b:cf:f5:d5:
         e5:fa:d2:4c:a4:7a:4b:b0:92:5e:17:32:33:41:0e:07:0d:87:
         42:c6:94:80:b0:fb:3f:b0:2d:7a:37:8f:84:dd:09:07:05:9e:
         dc:52:d4:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmAaQVpG6Eh5In0w93Sa9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmRhZTE1MDUwNDllNDQ2ZDViMGQxNDRhY2M4NjBkNmMx
ODE2N2MwHhcNMjUwODIzMTEwMjI0WhcNMjUwODI0MTEwMjI0WjAzMTEwLwYDVQQD
EyhkNTUwZmQwOGZkMTRiNjI5M2RiZmIzMjQzOGMzYzRmMDA5ODZhZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DXvzz7eH3XnVdx6pSYl6FkzMeBR
feTiQokgQYgeyD9/9D+1BanvDKME2flHf4E9uApxfW24bk8UCz3Mg3/xXI10M+OA
vqqQD5QP8LzN57ZbkGzqBMAtwm82O6kDF16r/jI1U58S+vt5IA0pxUljZScZCnTB
5pVKdU6cmUT0nBUcyENABB5rQdCnrmSx1rV8K76IoJD+m94JMOQTbFuFSq9/SObG
OpaKN2SDpr/iLHE4LXi+SAK9EhBrDbuqp5znaxifJIrI/mUWOPfb4syPMwnRZ73s
Wf1QHawkHhj7H3PZQ1MbjW28KHW46liBZq//Oewqz/OzyufeUARNh7mYqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVQ/Qj9FLYpPb+zJDjDxPAJhq7XMB8GA1UdIwQY
MBaAFHP9rhUFBJ5EbVsNFErMhg1sGBZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY18ydUZRVUVua1J0V3cwVVNzeUdEV3dZRm53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jM2ZjZDktMDBjOC00MzZiLThjMDEt
YTVmZWE2MDRhZDUzLzEvY18ydUZRVUVua1J0V3cwVVNzeUdEV3dZRm53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9jM2ZjZDktMDBjOC00MzZiLThjMDEtYTVmZWE2MDRhZDUz
LzEvY18ydUZRVUVua1J0V3cwVVNzeUdEV3dZRm53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAch+5ACtC
SkagHg0fURqu2cF/2Ei5Z70v9AZumK+jBAoY+kZKUXp2huvXN97d2sM2ry7CTTMK
Nld/YBB1vW2Ckh6LLt1zCxKE69FlfOknath4IM3JhRx+DZWGmCFs8aH/sEUZiLhS
k3a88FK4wowwaBARYw/8ktODbR3HgNl9/QPzAez+aBlcInXcbhX7Bb+pS3lL+sKq
AD3susEsonwIQzo8/eh9iXCxir+DEqZSBf3XfJAT+u4QLGaCixY7dJIbQaqOanaJ
b8UYrs5E3DvxxSO1/Th7z/XV5frSTKR6S7CSXhcyM0EOBw2HQsaUgLD7P7AtejeP
hN0JBwWe3FLUUQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:06 2025 by rpki-client