Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
File:                     v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft (raw, json)
Hash identifier:          mujq23cSQlBfwJOcEu1tSmH+1/Izr26tta2rUgQzZoo=
Subject key identifier:   FA:54:BD:36:05:DD:B6:E9:57:8A:96:F5:B2:85:E3:DE:B8:76:AA:F7
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Certificate issuer:       /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial:       0198D5BC3F5986BC51DA035EB43F57CB2961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 07:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:20 +0000
Files and hashes:         1: GhyJElhSMkb21ni84p3HgeSkxTQ.roa (hash: KwUCFvaWxHo9sPEoV9+enTpSMnw5D6fXp7AzPwgg1sY=)
                          2: v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl (hash: RUYEpquw5jbjvjxY2lEv10q5FrUwkpZn/sak0GJzunQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:3f:59:86:bc:51:da:03:5e:b4:3f:57:cb:29:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
        Validity
            Not Before: Aug 23 07:02:20 2025 GMT
            Not After : Aug 24 07:02:20 2025 GMT
        Subject: CN=fa54bd3605ddb6e9578a96f5b285e3deb876aaf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:18:f7:fc:d7:60:14:98:ae:10:5f:46:64:
                    9d:84:26:71:64:2a:2d:11:0a:ac:a9:0a:8a:62:62:
                    50:b5:bc:54:9d:a9:af:fb:c7:c8:94:28:f6:64:6b:
                    d2:fe:4d:35:19:09:73:86:7f:e0:3b:2e:0f:f4:a6:
                    78:5f:24:f7:90:4f:6e:89:14:13:21:d6:80:e7:30:
                    35:b3:de:a5:5a:b9:45:13:07:a4:fe:9d:27:a0:98:
                    1a:61:6d:07:41:a2:90:75:a6:20:98:ec:37:8c:4c:
                    7e:7d:a9:51:81:61:91:67:88:74:10:63:16:ac:03:
                    df:98:78:37:c8:cc:60:88:fe:ac:60:67:7c:b2:5a:
                    61:54:49:75:3e:10:d3:a4:60:91:52:12:c2:f3:ec:
                    50:97:a2:42:85:61:c3:f7:f0:23:72:70:88:92:a2:
                    eb:97:f2:9e:90:9c:9f:dd:1b:9d:1e:6a:77:5d:61:
                    f0:e8:a9:7a:63:2a:ae:dc:2e:2e:b0:b7:e4:11:ee:
                    45:47:d3:26:c9:f0:a8:19:8a:5a:00:b7:6c:10:d4:
                    4a:7c:82:c3:4a:f7:ad:82:2f:9a:d3:2a:48:52:c7:
                    4a:2c:ec:b6:e6:eb:59:d2:0c:e8:6d:ef:02:27:86:
                    00:21:15:99:72:9b:bc:49:14:29:3f:b4:c1:be:18:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:54:BD:36:05:DD:B6:E9:57:8A:96:F5:B2:85:E3:DE:B8:76:AA:F7
            X509v3 Authority Key Identifier:
                keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:23:47:eb:41:0a:a0:60:31:89:09:f6:48:18:4c:91:06:ae:
         84:79:cc:04:0f:b9:94:90:fc:a5:87:13:bd:5c:6d:21:e1:1c:
         94:d7:05:16:ca:eb:cc:94:87:02:9a:31:22:97:b0:64:d5:0e:
         20:e3:6b:29:aa:23:07:f8:9c:d2:34:c0:80:48:27:6f:90:5b:
         e9:12:5c:3e:19:5c:00:b1:af:0a:98:c7:1e:3f:13:aa:d5:3f:
         ee:88:ee:59:44:8d:6a:f8:3f:ee:7f:26:89:40:c4:ac:41:b0:
         63:0a:ec:12:4e:e1:c0:b2:c2:0d:c7:03:b3:f2:dc:c9:20:82:
         ed:1b:c9:7a:ea:83:bf:44:80:6c:a8:76:c2:08:60:4c:82:1c:
         7a:b9:78:49:04:2f:e6:59:70:14:5f:60:8e:1a:83:79:6a:08:
         f3:60:4b:17:bc:ed:3a:05:f6:c6:f4:0f:0e:32:e8:39:85:66:
         08:eb:4a:d3:a1:aa:b3:6a:53:79:21:8a:8c:2d:c8:0a:62:0a:
         f7:3a:2d:97:ee:00:a7:2b:88:44:59:bd:6f:97:75:f8:a2:32:
         6e:67:4a:ca:c0:33:05:9b:4d:39:8f:44:2a:2c:a1:84:62:04:
         10:3a:8a:71:d7:bc:d9:83:cc:ab:2a:fe:cc:5c:10:eb:98:78:
         aa:66:01:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvD9ZhrxR2gNetD9XyylhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWJmNWE0NzRhZmU3MjEyMzMxNjcwZTgzMWUxMTlkYTM4
ZjI4NGYwHhcNMjUwODIzMDcwMjIwWhcNMjUwODI0MDcwMjIwWjAzMTEwLwYDVQQD
EyhmYTU0YmQzNjA1ZGRiNmU5NTc4YTk2ZjViMjg1ZTNkZWI4NzZhYWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU4Y9/zXYBSYrhBfRmSdhCZxZCot
EQqsqQqKYmJQtbxUnamv+8fIlCj2ZGvS/k01GQlzhn/gOy4P9KZ4XyT3kE9uiRQT
IdaA5zA1s96lWrlFEwek/p0noJgaYW0HQaKQdaYgmOw3jEx+falRgWGRZ4h0EGMW
rAPfmHg3yMxgiP6sYGd8slphVEl1PhDTpGCRUhLC8+xQl6JChWHD9/AjcnCIkqLr
l/KekJyf3RudHmp3XWHw6Kl6Yyqu3C4usLfkEe5FR9MmyfCoGYpaALdsENRKfILD
Svetgi+a0ypIUsdKLOy25utZ0gzobe8CJ4YAIRWZcpu8SRQpP7TBvhg59QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpUvTYF3bbpV4qW9bKF4964dqr3MB8GA1UdIwQY
MBaAFL+r9aR0r+chIzFnDoMeEZ2jjyhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjZ2MXBIU3Y1eUVqTVdjT2d4NFJuYU9QS0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wMTg4ZGEtMzY1NS00ODJkLTg4MWIt
ZmViYmM0YTNiNDViLzEvdjZ2MXBIU3Y1eUVqTVdjT2d4NFJuYU9QS0U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wMTg4ZGEtMzY1NS00ODJkLTg4MWItZmViYmM0YTNiNDVi
LzEvdjZ2MXBIU3Y1eUVqTVdjT2d4NFJuYU9QS0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCNH60EK
oGAxiQn2SBhMkQauhHnMBA+5lJD8pYcTvVxtIeEclNcFFsrrzJSHApoxIpewZNUO
IONrKaojB/ic0jTAgEgnb5Bb6RJcPhlcALGvCpjHHj8TqtU/7ojuWUSNavg/7n8m
iUDErEGwYwrsEk7hwLLCDccDs/LcySCC7RvJeuqDv0SAbKh2wghgTIIcerl4SQQv
5llwFF9gjhqDeWoI82BLF7ztOgX2xvQPDjLoOYVmCOtK06Gqs2pTeSGKjC3ICmIK
9zotl+4ApyuIRFm9b5d1+KIybmdKysAzBZtNOY9EKiyhhGIEEDqKcde82YPMqyr+
zFwQ65h4qmYBLw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:00 2025 by rpki-client