Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File:                     _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier:          bPDUjBXkYA2ov2WGKAtWmhvgCi1FeBeEWX9tPC0pChE=
Subject key identifier:   D4:53:D7:F2:E6:0C:AE:20:15:86:D5:B5:12:CA:62:8B:89:88:62:E0
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer:       /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial:       0198D65F5D657E9F3AFD4A31495653E7494C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 10:00:30 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:30 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:30 +0000
Files and hashes:         1: 2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa (hash: gyN6UkhIgLwcwZrGZA7Bh/uxosleTdxZNErSNAXGOno=)
                          2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: ea6GHMTHWu2xJrpdKY69B9CYsakl0psMXZDnOvSvhxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:5d:65:7e:9f:3a:fd:4a:31:49:56:53:e7:49:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
        Validity
            Not Before: Aug 23 10:00:30 2025 GMT
            Not After : Aug 24 10:00:30 2025 GMT
        Subject: CN=d453d7f2e60cae201586d5b512ca628b898862e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:82:73:7b:9e:ab:35:b6:e5:a1:35:32:f1:
                    12:19:a3:16:af:3d:32:dd:e5:11:94:25:28:7a:3d:
                    10:25:5f:cc:99:5f:42:a3:16:6a:9b:39:1f:c3:52:
                    15:ca:5a:de:62:4f:5c:11:6f:68:7e:d2:a9:23:b9:
                    e4:fc:4a:d8:d6:10:ef:a0:e1:1f:d9:bf:5b:6c:3c:
                    5e:ea:27:0b:66:d8:8b:85:16:ef:71:48:b9:43:03:
                    b1:fc:15:b8:66:15:57:d9:05:f3:50:98:3e:b5:7d:
                    10:7d:86:f4:e3:3c:4e:06:fb:32:4b:60:82:d2:e8:
                    dc:cd:90:3e:be:14:92:74:ca:aa:be:3a:5c:92:3f:
                    fa:44:87:65:ba:42:e8:43:8e:1a:1f:cf:9b:c0:33:
                    52:75:8a:0f:0b:6b:0a:c5:54:dd:88:cb:0f:4c:39:
                    44:6d:25:86:ea:d8:24:bd:ee:b3:42:34:74:43:b0:
                    84:14:ec:18:6f:28:ba:67:67:91:cb:38:54:2b:86:
                    88:53:4f:3a:f2:60:4f:79:cc:e6:83:3b:2d:30:1d:
                    84:13:7a:f6:34:e2:a6:8e:6f:90:cc:e7:1b:16:a5:
                    d2:c8:fd:06:7e:60:97:c7:d5:23:5a:2e:e4:3a:90:
                    4c:e7:17:62:c3:b3:cd:d5:78:e4:23:a0:6f:e7:f1:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:53:D7:F2:E6:0C:AE:20:15:86:D5:B5:12:CA:62:8B:89:88:62:E0
            X509v3 Authority Key Identifier:
                keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:84:59:a0:4a:a7:20:ae:e9:11:50:3e:b4:01:10:25:16:48:
         c5:96:de:05:d1:d0:46:c4:88:da:5e:db:9f:a5:64:ca:f5:43:
         57:ea:42:a9:bf:f9:85:61:a2:87:17:94:48:37:9a:aa:f3:99:
         c8:f1:74:e6:4b:33:67:99:c5:c8:01:19:5c:9e:b5:aa:db:cd:
         92:1d:6e:6d:93:3d:9c:13:8d:51:a0:17:58:ef:7f:5f:14:0e:
         b3:45:e7:89:87:05:ca:78:d7:c8:96:35:7b:7c:cc:42:95:7c:
         41:c6:b8:ca:7b:a3:97:97:fe:b6:ce:5d:d2:a6:26:4c:58:c0:
         ec:d7:27:37:02:f6:fe:4b:83:a7:79:a5:c9:3a:44:de:38:45:
         da:02:45:70:e9:29:9d:aa:9c:36:c1:3c:fa:08:18:5d:d3:93:
         2e:48:e3:cf:eb:cf:7e:4b:8e:e1:56:c4:c2:cb:c3:6e:0c:37:
         73:83:46:cb:b4:22:eb:10:ff:73:8a:99:eb:65:00:43:31:c5:
         a2:1f:6e:33:c7:36:53:f5:e9:23:44:f5:96:e8:fe:f6:14:e3:
         14:2f:7f:96:82:d2:a4:40:64:c5:3d:98:6a:1a:d2:bc:cb:eb:
         73:6b:33:aa:5d:b1:3d:49:e6:32:52:25:b7:34:54:98:7a:b5:
         4f:79:9f:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX11lfp86/UoxSVZT50lMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzM1ZDRmMmYyZDI0N2VhMDhjNGEwMTE3ZDMyOGU0ZThl
ZGYxNTIwHhcNMjUwODIzMTAwMDMwWhcNMjUwODI0MTAwMDMwWjAzMTEwLwYDVQQD
EyhkNDUzZDdmMmU2MGNhZTIwMTU4NmQ1YjUxMmNhNjI4Yjg5ODg2MmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneOCc3ueqzW25aE1MvESGaMWrz0y
3eURlCUoej0QJV/MmV9CoxZqmzkfw1IVylreYk9cEW9oftKpI7nk/ErY1hDvoOEf
2b9bbDxe6icLZtiLhRbvcUi5QwOx/BW4ZhVX2QXzUJg+tX0QfYb04zxOBvsyS2CC
0ujczZA+vhSSdMqqvjpckj/6RIdlukLoQ44aH8+bwDNSdYoPC2sKxVTdiMsPTDlE
bSWG6tgkve6zQjR0Q7CEFOwYbyi6Z2eRyzhUK4aIU0868mBPeczmgzstMB2EE3r2
NOKmjm+QzOcbFqXSyP0GfmCXx9UjWi7kOpBM5xdiw7PN1XjkI6Bv5/H9SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRT1/LmDK4gFYbVtRLKYouJiGLgMB8GA1UdIwQY
MBaAFP7DXU8vLSR+oIxKARfTKOTo7fFSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NOZFR5OHRKSDZnakVvQkY5TW81T2p0OFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kMDAzYWUtMzVhNi00NGYyLWFhZDgt
ZjhiMTJmOTgyZmUyLzEvX3NOZFR5OHRKSDZnakVvQkY5TW81T2p0OFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9kMDAzYWUtMzVhNi00NGYyLWFhZDgtZjhiMTJmOTgyZmUy
LzEvX3NOZFR5OHRKSDZnakVvQkY5TW81T2p0OFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYRZoEqn
IK7pEVA+tAEQJRZIxZbeBdHQRsSI2l7bn6VkyvVDV+pCqb/5hWGihxeUSDeaqvOZ
yPF05kszZ5nFyAEZXJ61qtvNkh1ubZM9nBONUaAXWO9/XxQOs0XniYcFynjXyJY1
e3zMQpV8Qca4ynujl5f+ts5d0qYmTFjA7NcnNwL2/kuDp3mlyTpE3jhF2gJFcOkp
naqcNsE8+ggYXdOTLkjjz+vPfkuO4VbEwsvDbgw3c4NGy7Qi6xD/c4qZ62UAQzHF
oh9uM8c2U/XpI0T1luj+9hTjFC9/loLSpEBkxT2YahrSvMvrc2szql2xPUnmMlIl
tzRUmHq1T3mfgQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:11 2025 by rpki-client