Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File:                     CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier:          GCmWNWPdbE7bWweEv8jp9JLIbCT00DCVdsyywhEQBhc=
Subject key identifier:   15:27:03:9C:A7:62:21:9B:2E:32:44:52:84:9D:EC:EA:43:05:61:7C
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer:       /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial:       0198D5161B15206FC261D7D928FA7175377E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 04:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:52 +0000
Files and hashes:         1: 1-J2GOXt84t6tSsUvN6SzYODsM14.roa (hash: z8eYv5B023TelbPYrwzQ1iKaFGt6xVRZj+H2E/7ShQM=)
                          2: 1-iaMGqOGDTfsptPZeicjHn71QUo.roa (hash: 2s7EHYWZQ9Rhs5vjESBZQJAFQSchcccurTuwLHKrfW8=)
                          3: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: A4+U8Ry0N35O8sO3oydQT8safkMu5Xz1Qunlp+6VGBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:1b:15:20:6f:c2:61:d7:d9:28:fa:71:75:37:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08759158de234b754b7150f21933096c1094aac4
        Validity
            Not Before: Aug 23 04:00:52 2025 GMT
            Not After : Aug 24 04:00:52 2025 GMT
        Subject: CN=1527039ca762219b2e324452849decea4305617c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:6f:26:58:1d:a3:c7:10:b7:6a:71:1b:ff:
                    2a:b9:5c:86:c5:e2:c6:34:4f:d1:6b:c2:ba:59:1a:
                    44:e5:1c:31:d6:c9:15:23:d8:be:69:39:17:9a:08:
                    89:29:89:fa:57:2b:ea:9d:60:6b:e8:de:12:68:d2:
                    d0:24:2f:40:78:aa:14:3b:07:5b:1c:fe:35:a6:f4:
                    78:e8:23:11:bc:7c:46:87:3f:ee:5c:8e:7c:89:36:
                    9f:54:47:ea:c3:3d:db:4c:ee:91:62:6d:8b:bd:f5:
                    14:f2:30:cf:3e:5f:8a:da:b1:53:76:ed:87:b2:f0:
                    2e:be:d6:f1:77:f8:f6:46:8b:8b:f6:c9:e3:07:13:
                    2e:b2:1b:56:ff:ff:8e:db:90:b9:c3:67:9c:31:99:
                    38:99:1d:c4:e9:af:d3:84:c3:dc:d5:b9:78:a4:17:
                    41:2e:1f:a9:c8:53:3a:0b:ba:d1:05:f2:07:be:11:
                    54:e0:1a:1c:0e:3a:54:56:68:d7:1c:27:1d:ef:09:
                    92:8e:ee:95:43:42:6f:d1:1d:2a:54:18:ff:3e:60:
                    74:72:16:59:5a:87:40:1f:8a:fb:03:ab:51:f7:74:
                    7f:3e:bc:7f:0c:af:22:df:f5:b8:f4:26:65:eb:bd:
                    00:59:cf:16:d5:d0:78:a3:f2:57:c0:54:b5:0b:61:
                    16:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:27:03:9C:A7:62:21:9B:2E:32:44:52:84:9D:EC:EA:43:05:61:7C
            X509v3 Authority Key Identifier:
                keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:79:3a:e2:a9:93:03:db:72:43:6c:04:e4:b9:17:00:75:c2:
         f5:da:2d:18:ea:4d:c6:66:ca:5a:64:a8:81:95:51:36:17:63:
         5c:d6:87:72:50:b1:17:a1:8c:2c:be:5f:2d:79:64:1f:7e:74:
         e7:f7:26:e1:aa:4b:79:fa:68:b1:9b:af:55:31:05:9e:5f:2a:
         45:58:cc:5b:2e:90:68:3c:2a:38:b0:3c:c4:ee:53:c0:41:fb:
         4a:7c:fa:85:f9:a6:06:08:0b:a2:7c:6d:d3:75:76:db:4c:89:
         1c:92:2d:8c:64:59:1b:53:57:d1:00:a5:e8:1d:9d:53:e5:40:
         c3:88:ae:b0:41:fa:e5:73:d1:4b:a6:66:87:b9:6b:5e:51:ae:
         79:b3:d7:22:4f:ca:3c:6e:ac:1d:93:17:73:8c:9a:64:86:f6:
         62:52:13:0e:1c:4e:0e:2f:6b:d5:16:4d:49:c7:22:0f:40:40:
         e2:d7:2e:e5:16:c7:33:32:2b:22:c9:97:54:39:1d:1c:eb:b4:
         ee:da:73:1f:10:41:d6:a8:00:0c:3e:94:99:ad:fd:7d:c6:25:
         95:cc:bd:c4:2e:5d:7c:7d:b9:87:44:82:52:88:64:ae:94:03:
         c2:8f:be:99:6a:aa:88:6f:ac:ab:dc:b3:da:f8:96:8f:47:7e:
         c9:42:62:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFhsVIG/CYdfZKPpxdTd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NzU5MTU4ZGUyMzRiNzU0YjcxNTBmMjE5MzMwOTZjMTA5
NGFhYzQwHhcNMjUwODIzMDQwMDUyWhcNMjUwODI0MDQwMDUyWjAzMTEwLwYDVQQD
EygxNTI3MDM5Y2E3NjIyMTliMmUzMjQ0NTI4NDlkZWNlYTQzMDU2MTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuThvJlgdo8cQt2pxG/8quVyGxeLG
NE/Ra8K6WRpE5Rwx1skVI9i+aTkXmgiJKYn6VyvqnWBr6N4SaNLQJC9AeKoUOwdb
HP41pvR46CMRvHxGhz/uXI58iTafVEfqwz3bTO6RYm2LvfUU8jDPPl+K2rFTdu2H
svAuvtbxd/j2RouL9snjBxMushtW//+O25C5w2ecMZk4mR3E6a/ThMPc1bl4pBdB
Lh+pyFM6C7rRBfIHvhFU4BocDjpUVmjXHCcd7wmSju6VQ0Jv0R0qVBj/PmB0chZZ
WodAH4r7A6tR93R/Prx/DK8i3/W49CZl670AWc8W1dB4o/JXwFS1C2EWVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUnA5ynYiGbLjJEUoSd7OpDBWF8MB8GA1UdIwQY
MBaAFAh1kVjeI0t1S3FQ8hkzCWwQlKrEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQt
Y2Q5ZWNjZjkzYjMxLzEvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQtY2Q5ZWNjZjkzYjMx
LzEvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXk64qmT
A9tyQ2wE5LkXAHXC9dotGOpNxmbKWmSogZVRNhdjXNaHclCxF6GMLL5fLXlkH350
5/cm4apLefposZuvVTEFnl8qRVjMWy6QaDwqOLA8xO5TwEH7Snz6hfmmBggLonxt
03V220yJHJItjGRZG1NX0QCl6B2dU+VAw4iusEH65XPRS6Zmh7lrXlGuebPXIk/K
PG6sHZMXc4yaZIb2YlITDhxODi9r1RZNScciD0BA4tcu5RbHMzIrIsmXVDkdHOu0
7tpzHxBB1qgADD6Uma39fcYllcy9xC5dfH25h0SCUohkrpQDwo++mWqqiG+sq9yz
2viWj0d+yUJi3Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:18 2025 by rpki-client