Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File:                     ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier:          Wmy3pRAfi7hVCxbvdLwHaZgPZYnYHY9MiWanLoL8l7M=
Subject key identifier:   20:01:D3:92:01:6E:64:33:3E:81:53:7D:16:02:E4:66:6E:A8:17:C3
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer:       /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial:       0198D4A7DAE99DD3B08BF17549D1E17AC41E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number:          165B
Signing time:             Sat 23 Aug 2025 02:00:27 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:27 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:27 +0000
Files and hashes:         1: 0bwTTnBwoc2_yeiCZSrmukFpa98.roa (hash: yFkhE2XktYrWBrn6EmrqtgFzZBMcDiKsauGCorzriGU=)
                          2: _T7yWpkJzBK6Q3eizwK2Fv5qIsU.roa (hash: kxu3F/kuHsl6rKKBSWQEq/G1abOxmhYczpyjKK+a/pk=)
                          3: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: 5qixXzhGjKaLCP7Ss3nU/2VZ741Y7kPAqJsA/im1zo0=)
                          4: yJ8fOnvMuSLD4BfNZSSKt3xcdGU.roa (hash: oiZZuv0ya9n3B5NVEv6QAOa/lzx9B2liktfAGQT4Djg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:da:e9:9d:d3:b0:8b:f1:75:49:d1:e1:7a:c4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
        Validity
            Not Before: Aug 23 02:00:27 2025 GMT
            Not After : Aug 24 02:00:27 2025 GMT
        Subject: CN=2001d392016e64333e81537d1602e4666ea817c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:25:67:7b:68:8a:a3:f5:99:bb:34:7c:3d:a5:
                    d5:82:1f:1b:ec:64:ad:a8:18:21:9e:4b:41:d9:97:
                    de:ad:1e:b4:f6:95:bd:df:be:7c:2a:bd:6a:22:17:
                    6c:92:e9:1e:c3:c5:d8:1b:a9:e7:65:67:44:fc:06:
                    0c:b6:ef:88:1f:fc:7e:4c:50:d9:dc:3d:0e:40:8c:
                    b1:47:78:41:b2:08:c8:ff:12:ef:c1:3f:94:3e:5b:
                    d7:2f:f4:d1:49:c9:1d:15:6e:b2:7e:a2:11:cb:20:
                    68:7a:b0:ae:f4:9a:4b:ef:f0:28:ce:9f:60:62:c7:
                    d4:a1:8c:c5:e2:1c:4e:77:15:c4:65:82:c1:35:90:
                    d8:81:06:9a:8a:35:cd:6e:cd:9c:0a:c4:f0:67:dc:
                    1c:17:7e:31:d5:aa:23:de:48:38:0f:72:f5:19:f8:
                    e5:da:9a:8e:91:96:b0:cc:33:1f:9e:d9:91:4a:71:
                    5d:5b:1b:a7:f5:30:95:f3:58:a1:87:f2:0b:06:47:
                    d6:11:b3:6a:bc:d9:7d:d9:aa:ea:78:1a:57:ba:55:
                    3f:97:78:9b:15:70:c6:fb:ca:d8:c6:49:31:19:36:
                    94:e6:fa:b1:c1:a6:d6:fb:d3:37:1c:55:30:6b:fd:
                    b3:a4:3b:a8:66:5f:14:1d:5c:d5:b5:c8:fa:a6:6e:
                    7a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:01:D3:92:01:6E:64:33:3E:81:53:7D:16:02:E4:66:6E:A8:17:C3
            X509v3 Authority Key Identifier:
                keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:31:0b:75:27:32:de:4d:83:3e:a0:7b:c8:e9:b7:c1:28:7c:
         6e:64:f3:92:6b:e3:5a:de:92:da:22:52:6a:01:bd:7a:24:bf:
         ba:5f:be:78:25:12:a8:b7:f5:d6:12:73:98:9d:58:6c:99:02:
         de:36:23:8d:c2:ce:ea:db:4a:92:6b:28:c6:e1:7d:ff:58:8b:
         56:83:8d:e5:1a:23:fb:75:7e:3b:00:c9:1b:0c:fc:77:51:9f:
         cc:79:05:8a:94:ab:c5:a1:58:da:1b:3b:f1:a3:b5:23:7a:34:
         a6:75:1a:f4:04:22:8f:1c:71:03:e2:46:bf:c3:94:2b:4b:74:
         11:64:92:89:b1:70:5b:b3:af:d9:7e:0c:5a:0d:f4:4b:93:77:
         4b:27:db:0b:ff:82:03:f4:e8:70:3d:8c:5a:8d:08:34:16:f4:
         4d:72:8c:d6:a0:72:65:fb:3c:2f:da:f3:9b:a4:d3:ba:03:d9:
         c8:5d:bd:3c:da:4b:b6:84:e5:d9:9f:cc:7f:7d:b7:84:c6:24:
         63:9e:35:53:e9:93:3c:bb:0b:07:ce:4d:90:4d:76:1d:e0:2f:
         ef:86:56:1c:56:1e:44:c3:04:cf:30:eb:1b:08:40:ae:e2:43:
         e8:51:5c:c6:a8:10:b5:08:9b:0b:ae:35:9a:35:64:96:cd:30:
         c7:b3:39:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp9rpndOwi/F1SdHhesQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YjUxMzRiMTFmOTQwOTExZjBmZjMxNWM5NDhkYWE1M2Y3
MzJlZTAwHhcNMjUwODIzMDIwMDI3WhcNMjUwODI0MDIwMDI3WjAzMTEwLwYDVQQD
EygyMDAxZDM5MjAxNmU2NDMzM2U4MTUzN2QxNjAyZTQ2NjZlYTgxN2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iVne2iKo/WZuzR8PaXVgh8b7GSt
qBghnktB2ZferR609pW93758Kr1qIhdskukew8XYG6nnZWdE/AYMtu+IH/x+TFDZ
3D0OQIyxR3hBsgjI/xLvwT+UPlvXL/TRSckdFW6yfqIRyyBoerCu9JpL7/Aozp9g
YsfUoYzF4hxOdxXEZYLBNZDYgQaaijXNbs2cCsTwZ9wcF34x1aoj3kg4D3L1Gfjl
2pqOkZawzDMfntmRSnFdWxun9TCV81ihh/ILBkfWEbNqvNl92arqeBpXulU/l3ib
FXDG+8rYxkkxGTaU5vqxwabW+9M3HFUwa/2zpDuoZl8UHVzVtcj6pm56GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAB05IBbmQzPoFTfRYC5GZuqBfDMB8GA1UdIwQY
MBaAFHm1E0sR+UCRHw/zFclI2qU/cy7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYt
Y2VjMjJlYTc5NTEzLzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYtY2VjMjJlYTc5NTEz
LzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDELdScy
3k2DPqB7yOm3wSh8bmTzkmvjWt6S2iJSagG9eiS/ul++eCUSqLf11hJzmJ1YbJkC
3jYjjcLO6ttKkmsoxuF9/1iLVoON5Roj+3V+OwDJGwz8d1GfzHkFipSrxaFY2hs7
8aO1I3o0pnUa9AQijxxxA+JGv8OUK0t0EWSSibFwW7Ov2X4MWg30S5N3SyfbC/+C
A/TocD2MWo0INBb0TXKM1qByZfs8L9rzm6TTugPZyF29PNpLtoTl2Z/Mf323hMYk
Y541U+mTPLsLB85NkE12HeAv74ZWHFYeRMMEzzDrGwhAruJD6FFcxqgQtQibC641
mjVkls0wx7M5ug==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:50 2025 by rpki-client