Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
File:                     dPs6a3_CjoZ05hHLCYB28OTFV8I.mft (raw, json)
Hash identifier:          2vP4dJUAI/eXPvt0ef7u+wMr0RiDgwmlQdOb/YMCff0=
Subject key identifier:   AF:31:ED:86:B0:33:87:C8:8D:5C:5D:E3:0E:F3:54:3E:A0:CA:55:12
Authority key identifier: 74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2
Certificate issuer:       /CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
Certificate serial:       0198D5F144B7FD3080CBFF294C35EE10DD13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 08:00:15 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:15 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:15 +0000
Files and hashes:         1: EbZ-PzExvsrKZ1aOLdbMth19YQY.roa (hash: Y23B6h9Jehv4hPRBbE1Q/MgzAwC8F0dy1/k/s/bejkY=)
                          2: dPs6a3_CjoZ05hHLCYB28OTFV8I.crl (hash: 5/KsMemuXhla5okLtJMeCBR5BpQdN6PH+MfhnAX2vpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:44:b7:fd:30:80:cb:ff:29:4c:35:ee:10:dd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
        Validity
            Not Before: Aug 23 08:00:15 2025 GMT
            Not After : Aug 24 08:00:15 2025 GMT
        Subject: CN=af31ed86b03387c88d5c5de30ef3543ea0ca5512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:b0:98:b1:be:aa:ca:89:51:b5:54:d9:31:
                    e8:d1:ab:5c:1c:b3:96:f6:d1:24:fd:7c:b0:23:7d:
                    e5:09:71:a9:56:5f:7e:60:6e:89:27:77:98:e8:78:
                    b6:d5:c1:c8:41:52:26:f2:29:bc:0b:88:9e:b5:86:
                    7a:95:16:a3:35:5d:d9:21:b5:ee:46:a8:af:94:a9:
                    79:2c:66:78:e2:5e:ad:57:a8:91:0e:81:43:2e:76:
                    33:1c:0d:5c:c6:3b:57:45:18:73:95:fd:8c:88:47:
                    32:c9:6b:86:51:f8:f9:34:b3:5f:b8:81:9c:a0:48:
                    46:e5:0d:ea:7a:16:96:62:06:89:36:38:61:21:1f:
                    3a:c1:49:ff:b8:13:83:ca:1b:b3:bf:ec:22:a3:df:
                    a4:f7:8b:ce:63:2d:59:09:24:fd:b5:6e:17:35:28:
                    a4:6f:2e:17:bf:07:06:54:9e:ca:d0:f4:54:4a:5a:
                    a3:ba:c7:96:15:59:29:2a:55:6b:eb:3b:ef:96:0d:
                    05:d1:76:9b:2f:0b:11:4b:8a:59:74:35:be:d9:10:
                    30:da:a7:63:12:cb:e7:07:a8:1e:50:d2:2a:45:fc:
                    12:36:72:c2:4b:1a:ea:2e:99:81:00:6d:5c:ff:fe:
                    22:2d:49:85:06:31:ba:5d:8a:ca:4d:c8:f6:fa:47:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:31:ED:86:B0:33:87:C8:8D:5C:5D:E3:0E:F3:54:3E:A0:CA:55:12
            X509v3 Authority Key Identifier:
                keyid:74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:45:03:57:b5:bd:73:64:9f:08:eb:70:f3:22:2c:93:13:17:
         55:31:8c:ee:f5:06:01:cf:62:32:7c:16:93:3e:d9:5e:0f:15:
         ce:26:da:ba:1e:57:c6:0e:ba:de:bb:96:59:ec:df:58:06:03:
         3b:9d:64:39:b8:71:e0:d2:2d:40:e0:94:b9:76:fd:0d:ad:0d:
         74:71:21:aa:ee:b9:76:55:27:2f:6f:9b:59:d2:5e:04:7b:cc:
         53:a0:ba:8a:24:e0:f8:9a:29:39:d7:d4:e1:fe:c4:47:b0:1b:
         a1:03:fc:41:bf:1d:20:09:f6:5b:62:8f:68:3b:fd:35:6a:74:
         a7:ac:ed:20:af:f2:7f:3e:88:b7:a6:f9:b3:75:a9:71:17:d5:
         ed:df:99:9e:3b:38:96:d1:86:35:fb:9c:5f:34:bf:46:d4:6c:
         12:b3:c5:d2:7c:12:c3:7f:e5:2f:bc:1b:15:d2:34:8e:73:69:
         c9:8a:92:d9:58:ca:f1:29:7a:3e:b5:64:c6:0f:0c:84:c6:8a:
         9c:69:bb:70:9e:33:f9:e0:91:78:dc:bf:f2:98:68:6d:36:99:
         1f:d8:1a:67:8e:18:dd:63:a9:82:cb:76:b9:a4:db:34:6b:ab:
         08:2d:4f:87:4a:c1:2b:c6:6d:c2:00:ac:bb:79:81:08:69:02:
         7b:5a:41:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8US3/TCAy/8pTDXuEN0TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZmIzYTZiN2ZjMjhlODY3NGU2MTFjYjA5ODA3NmYwZTRj
NTU3YzIwHhcNMjUwODIzMDgwMDE1WhcNMjUwODI0MDgwMDE1WjAzMTEwLwYDVQQD
EyhhZjMxZWQ4NmIwMzM4N2M4OGQ1YzVkZTMwZWYzNTQzZWEwY2E1NTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyOwmLG+qsqJUbVU2THo0atcHLOW
9tEk/XywI33lCXGpVl9+YG6JJ3eY6Hi21cHIQVIm8im8C4ietYZ6lRajNV3ZIbXu
RqivlKl5LGZ44l6tV6iRDoFDLnYzHA1cxjtXRRhzlf2MiEcyyWuGUfj5NLNfuIGc
oEhG5Q3qehaWYgaJNjhhIR86wUn/uBODyhuzv+wio9+k94vOYy1ZCST9tW4XNSik
by4XvwcGVJ7K0PRUSlqjuseWFVkpKlVr6zvvlg0F0XabLwsRS4pZdDW+2RAw2qdj
EsvnB6geUNIqRfwSNnLCSxrqLpmBAG1c//4iLUmFBjG6XYrKTcj2+kdEQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8x7YawM4fIjVxd4w7zVD6gylUSMB8GA1UdIwQY
MBaAFHT7Omt/wo6GdOYRywmAdvDkxVfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBzNmEzX0Nqb1owNWhITENZQjI4T1RGVjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYTBmNTUtNTc3NC00NWRlLWE2YzAt
NzgyYzc4MGU3YzFjLzEvZFBzNmEzX0Nqb1owNWhITENZQjI4T1RGVjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jYTBmNTUtNTc3NC00NWRlLWE2YzAtNzgyYzc4MGU3YzFj
LzEvZFBzNmEzX0Nqb1owNWhITENZQjI4T1RGVjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEUDV7W9
c2SfCOtw8yIskxMXVTGM7vUGAc9iMnwWkz7ZXg8Vzibauh5Xxg663ruWWezfWAYD
O51kObhx4NItQOCUuXb9Da0NdHEhqu65dlUnL2+bWdJeBHvMU6C6iiTg+JopOdfU
4f7ER7AboQP8Qb8dIAn2W2KPaDv9NWp0p6ztIK/yfz6It6b5s3WpcRfV7d+Znjs4
ltGGNfucXzS/RtRsErPF0nwSw3/lL7wbFdI0jnNpyYqS2VjK8Sl6PrVkxg8MhMaK
nGm7cJ4z+eCReNy/8phobTaZH9gaZ44Y3WOpgst2uaTbNGurCC1Ph0rBK8ZtwgCs
u3mBCGkCe1pBuA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:55 2025 by rpki-client