Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
File:                     aiEWQxh--SWKEyXN_B0b9zg76Fs.mft (raw, json)
Hash identifier:          BPQgb13enzGHCnRUTkgnckFguyGkQaF9IxWmVtDFKOE=
Subject key identifier:   47:EF:97:CF:53:11:7C:74:D8:B0:4E:B7:D8:12:A3:9C:87:63:6B:D1
Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
Certificate issuer:       /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Certificate serial:       0198D6CDBF16EBA38EA82DCD231AD5D0C321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 12:01:04 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:04 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:04 +0000
Files and hashes:         1: aiEWQxh--SWKEyXN_B0b9zg76Fs.crl (hash: liE+4u+fm3SQkBSardmUERH96BA9rJejhTHLYh8RVvk=)
                          2: g6TmhqoG_IADwsC-GEbQq9xKePg.roa (hash: L2BybzQCICOxY6zkJoh+UHB/hV65BYdz7sNC8RSFIvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:bf:16:eb:a3:8e:a8:2d:cd:23:1a:d5:d0:c3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
        Validity
            Not Before: Aug 23 12:01:04 2025 GMT
            Not After : Aug 24 12:01:04 2025 GMT
        Subject: CN=47ef97cf53117c74d8b04eb7d812a39c87636bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:f4:74:3a:d4:ca:1f:a1:17:21:b4:34:ff:
                    74:2d:98:53:e5:85:8b:50:4c:12:b5:52:ae:ae:87:
                    ca:de:39:f9:8f:61:c1:42:b0:86:8f:52:48:db:c5:
                    44:1e:b9:36:3f:f7:18:bb:a2:97:20:76:4b:46:7d:
                    a5:39:84:de:bc:75:d2:bd:b3:7d:b0:09:0c:e8:b9:
                    c2:81:3b:c5:e2:2e:df:b5:37:d9:0e:6e:e7:8d:1b:
                    ff:a1:64:c4:ea:ca:b4:04:7b:1a:b2:70:cd:3f:06:
                    54:99:80:ec:ff:36:74:ae:57:7f:51:51:ab:ee:1c:
                    1e:1e:14:b2:85:f5:ab:24:23:bd:8a:18:e7:5f:42:
                    10:88:35:a9:06:32:e1:3d:0d:2e:dc:e4:ec:d9:f0:
                    27:a0:40:65:b1:c6:67:25:d0:74:8b:bb:01:4f:c0:
                    f1:ae:96:17:ac:bf:2c:10:aa:23:9d:79:53:14:52:
                    a6:c2:fc:2c:1c:d3:15:2f:33:61:76:7c:c2:b5:79:
                    0b:83:3e:6b:10:78:af:95:45:3b:ab:fd:3b:9c:97:
                    3d:32:f7:31:c2:ea:b5:f4:b8:b6:0d:3d:c1:da:f3:
                    e5:6d:81:fd:59:e4:2a:9a:b1:e3:1d:07:8d:ae:0a:
                    69:9b:99:31:37:e6:f5:b3:3d:4a:cc:ac:43:8f:c7:
                    fc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EF:97:CF:53:11:7C:74:D8:B0:4E:B7:D8:12:A3:9C:87:63:6B:D1
            X509v3 Authority Key Identifier:
                keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:de:0c:69:d9:0c:5b:49:c9:2c:50:e5:4a:9a:d5:c5:b1:54:
         e5:a3:bf:fa:05:78:82:98:61:d6:ab:48:d7:71:d1:e3:3a:e5:
         92:2f:9b:9a:b9:a9:b7:c9:66:c8:a0:02:7c:b1:c3:3e:ab:bf:
         a9:46:0a:59:71:63:b7:d3:cb:cf:70:64:8d:6e:cb:a9:59:b0:
         77:16:51:27:d9:b7:18:54:6f:3e:a6:52:93:af:ec:9b:6c:84:
         ae:eb:61:c4:16:11:90:6b:b3:8e:3b:9f:a7:b5:36:08:8b:e5:
         7a:a0:47:4b:8c:6f:3c:93:72:f2:3d:75:c8:bf:72:6c:1e:ff:
         c0:d0:a6:22:9f:09:d0:6e:09:ff:aa:fa:59:42:12:11:7b:46:
         0f:b3:d0:3a:38:b5:b7:57:39:db:6f:9b:b9:00:29:f2:cb:60:
         ef:8b:f4:74:8e:bf:28:9e:f8:b3:be:91:1c:6d:48:ab:5b:93:
         88:e4:dc:78:1a:34:48:5a:b1:91:ef:ce:25:c7:53:05:eb:fc:
         25:e6:94:43:8f:72:db:e5:41:92:03:22:54:bf:a1:c4:2c:0e:
         d1:10:81:2a:98:0d:7e:a1:41:a0:12:c5:d3:ef:f1:13:c6:ad:
         79:5d:87:97:7f:2c:7e:f2:85:1f:47:09:23:2d:7e:7b:76:7e:
         32:a5:82:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzb8W66OOqC3NIxrV0MMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMjExNjQzMTg3ZWY5MjU4YTEzMjVjZGZjMWQxYmY3Mzgz
YmU4NWIwHhcNMjUwODIzMTIwMTA0WhcNMjUwODI0MTIwMTA0WjAzMTEwLwYDVQQD
Eyg0N2VmOTdjZjUzMTE3Yzc0ZDhiMDRlYjdkODEyYTM5Yzg3NjM2YmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1T0dDrUyh+hFyG0NP90LZhT5YWL
UEwStVKurofK3jn5j2HBQrCGj1JI28VEHrk2P/cYu6KXIHZLRn2lOYTevHXSvbN9
sAkM6LnCgTvF4i7ftTfZDm7njRv/oWTE6sq0BHsasnDNPwZUmYDs/zZ0rld/UVGr
7hweHhSyhfWrJCO9ihjnX0IQiDWpBjLhPQ0u3OTs2fAnoEBlscZnJdB0i7sBT8Dx
rpYXrL8sEKojnXlTFFKmwvwsHNMVLzNhdnzCtXkLgz5rEHivlUU7q/07nJc9Mvcx
wuq19Li2DT3B2vPlbYH9WeQqmrHjHQeNrgppm5kxN+b1sz1KzKxDj8f8qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfvl89TEXx02LBOt9gSo5yHY2vRMB8GA1UdIwQY
MBaAFGohFkMYfvklihMlzfwdG/c4O+hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNmExY2QtNjVhMC00OWQzLTljNWYt
ZjA2ZmM0OGM4ZTRjLzEvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iNmExY2QtNjVhMC00OWQzLTljNWYtZjA2ZmM0OGM4ZTRj
LzEvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcN4MadkM
W0nJLFDlSprVxbFU5aO/+gV4gphh1qtI13HR4zrlki+bmrmpt8lmyKACfLHDPqu/
qUYKWXFjt9PLz3BkjW7LqVmwdxZRJ9m3GFRvPqZSk6/sm2yEruthxBYRkGuzjjuf
p7U2CIvleqBHS4xvPJNy8j11yL9ybB7/wNCmIp8J0G4J/6r6WUISEXtGD7PQOji1
t1c522+buQAp8stg74v0dI6/KJ74s76RHG1Iq1uTiOTceBo0SFqxke/OJcdTBev8
JeaUQ49y2+VBkgMiVL+hxCwO0RCBKpgNfqFBoBLF0+/xE8ateV2Hl38sfvKFH0cJ
Iy1+e3Z+MqWCJA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:32:21 2025 by rpki-client