Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File:                     xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier:          r6Xye9d0WrpQ4SiQZ0nNsMhi0BHyL5qdRhSqQAeOC3k=
Subject key identifier:   CB:00:BF:B2:28:4C:E6:E9:A8:33:E8:C6:28:20:0F:EB:F8:55:32:62
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       0198D54DF4B4340C32FB76039E33AAE91463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number:          166D
Signing time:             Sat 23 Aug 2025 05:01:52 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:52 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:52 +0000
Files and hashes:         1: 8wmzxLkSyC63kJ8KsfaDTFp3590.roa (hash: yPTonCp/pr9ZtUUWsN3hsTJ0gebdbrNTrrkzT5j7S00=)
                          2: CeX7E3fZXVsdPANui7LEojY4jyY.roa (hash: knL0+PqLOBqomAg/sncBbQWcoQB5Mmxq54ysIaZdoTY=)
                          3: I0AFm-vc4rf4QsaVWhj5NHyb11w.roa (hash: BGbcWwHIrmn5ZBCCyfBSP0+HfpIO8Xl9K0FKbiZmvI8=)
                          4: Kg2E44WbCS4yTdLjrBUGsaS33HY.roa (hash: aRXCQBjOK2Xnaq6p1kUfl1+5mTae9HIybqh0Ip+XXpU=)
                          5: LLhwUpHqz22GnC5TEmimdFlrtqk.roa (hash: fvLKEFRwIYrK/dNIazKMMzJzXGAsDgMXq4phPeziOkU=)
                          6: LxDX7O3eQGaJYExU85kcexK4__Q.roa (hash: rErxx7Om3Ta/mvJcqv+K5/2MJQzhGaZ1sKgBE7WSm3c=)
                          7: MHmEymoZMLYej80qyeEQ1wEBAuo.roa (hash: ceEUHuxr6PwDTRAH1Chn/VcDzLuGx9aCJJ8v40wWibY=)
                          8: MqhH7LZrBnXXGBOARTaALjBOu0k.roa (hash: eb5e3IYtX1JLVkPpTH90MSfTGSJlQRW4w6AkJQsqHDE=)
                          9: NznSTmaNmRlH_azHj2PejtUv32Y.roa (hash: vqJasZBwevHspmBMCQpj1DtVpKmfJrLVqU+PRrcMqfM=)
                          10: YE_8Q539qrOyfC5oyhUVoyOy4ag.roa (hash: oHkMs+tZBddaOUP4lVpil5PdfdqqYPzLTk5OrRN655Y=)
                          11: Z2dSkQ6PASRngm_2ArTJe9mzGwQ.roa (hash: 2dzsM88NRUyjmGplJFA3j8lI1oArTGFKZ1kC35f7j6Y=)
                          12: asGcSQns56fV1692zV3Ch_oG4Kg.roa (hash: 5dHMVFt5oYiYTS73IJtgkzio0zBGi60UjdzaO/dGRQI=)
                          13: ba73IPffmKSKK9DFDoXNC4Y9YNk.roa (hash: t/gHUljPs1ACa8ElAB5fM90FPR1WPQYxp8iIB9819BI=)
                          14: c-YB5zSc0c1xWdOauA62tbaTi7U.roa (hash: OX0Hi6BRKnvgV0Q4TqYGzIGBa5g+sChYvpN4EKEAkSc=)
                          15: fl8rnacXy3y9RR72Ckv0yy_-8A0.roa (hash: QlQ79ekyqU3zQDGrsHiwAcV6R8Y7CsOQW9QiHoruZS0=)
                          16: r1CV8D1_y4TguGkYqv-ggeXr4c0.roa (hash: jDk4rmD0Q4dKvEGvkXrnmVvHn/m5l4R7RawW2v9/HZc=)
                          17: uFUEGSfPHjgulVJP0gmjr5Io5BE.roa (hash: N+zSHr/8E6EDAHMdhe9NDa8SXOzYh6T68xumfpCPwis=)
                          18: wj33JoQLWARvqka0yZK45_1318I.roa (hash: TfGyszRr6br7JzJj6n9Z5YtEXoLaFYdaPq8IN1vIPao=)
                          19: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: VQ1A6ISjBulYd4dVI1qzBER9aFfFtHclmu85bAwdrp0=)
                          20: yeYx1SBF1lmtW7XffaPeQOovU8U.roa (hash: VSeEM5Jys6RX5q2PBBL/enoN0CIuzY2lNAlGhBepeM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:f4:b4:34:0c:32:fb:76:03:9e:33:aa:e9:14:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Aug 23 05:01:52 2025 GMT
            Not After : Aug 24 05:01:52 2025 GMT
        Subject: CN=cb00bfb2284ce6e9a833e8c628200febf8553262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:8d:d5:2e:6a:6d:93:4d:f7:a8:d7:b3:c7:
                    4a:d8:35:e4:2a:7b:3c:bf:8f:17:d8:d6:22:c2:ba:
                    42:c3:fb:9d:18:30:3f:23:bf:5b:7e:ba:9f:af:ea:
                    93:01:66:50:90:b2:ef:62:85:d8:fb:ac:95:82:18:
                    32:81:1b:08:1f:fe:8d:15:29:bc:0e:70:58:69:6d:
                    79:43:e9:0a:79:4a:67:7f:b2:d4:7a:82:ac:53:54:
                    f9:16:25:a4:68:e8:97:c1:2c:9f:30:a7:1e:8a:0d:
                    16:37:98:7f:1d:0a:a7:d5:e2:66:b5:82:da:fc:42:
                    4e:b9:6c:9b:07:4c:a6:f2:8d:2a:55:aa:f9:69:20:
                    80:af:07:c9:dc:05:fd:a8:11:99:4d:a5:0e:5b:f1:
                    37:29:c8:25:62:e8:ce:5e:67:22:66:7b:69:52:f3:
                    16:70:30:12:25:b1:1a:ad:d1:37:34:a1:9a:8b:15:
                    d2:68:ed:ac:4d:44:f6:03:eb:be:5d:54:2a:23:e5:
                    4d:43:e5:54:41:67:0b:f7:ae:64:f4:9f:ac:dc:19:
                    75:95:ec:f0:09:01:ce:ed:34:b6:df:56:b0:e2:75:
                    7f:50:0e:9c:76:cc:a0:13:8e:da:23:c4:15:c1:f6:
                    a3:2b:69:b5:92:de:79:53:16:d0:a5:0c:65:ea:30:
                    7e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:00:BF:B2:28:4C:E6:E9:A8:33:E8:C6:28:20:0F:EB:F8:55:32:62
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:73:9c:dc:7b:c6:eb:a2:83:7b:b2:4e:50:7c:f1:5c:e3:13:
         27:ed:b6:15:cb:bc:51:e9:5a:b1:11:4a:18:43:cb:38:bf:96:
         e0:22:b6:46:91:8b:bf:9c:29:08:c5:f0:37:97:d8:3d:3d:52:
         f4:63:f8:f0:b1:3c:04:0c:a6:ac:e2:6e:a6:0c:2c:e1:ca:2b:
         74:ec:b7:79:1b:e5:a6:1d:22:3a:d3:bc:36:33:f6:82:8a:8b:
         9f:2e:8d:4c:f1:1a:73:c0:35:6d:20:3c:83:b9:3b:1e:cd:9a:
         89:db:92:32:31:2c:77:15:28:4c:cc:af:c6:cd:9f:d1:2c:78:
         b9:c0:70:5f:5d:5a:74:da:85:f6:f8:a0:1c:2d:4a:a2:be:55:
         2f:e3:71:37:22:ff:1f:7c:36:bf:19:d5:41:49:11:34:70:0a:
         28:3d:3c:8d:54:c9:c4:ab:3a:ae:5f:3f:be:43:82:76:90:58:
         ea:37:03:cb:12:1d:60:dd:91:f1:54:d7:dc:33:3d:bf:62:6a:
         f8:39:f1:a4:e9:ec:5f:fd:4d:3f:42:e8:e3:1e:8b:7c:29:d2:
         68:05:b3:48:5f:7d:65:5f:b5:c8:32:63:6c:16:31:b8:b5:47:
         e0:6f:6e:cf:eb:b6:c5:ec:1d:15:2d:06:a6:c6:36:cc:95:80:
         3e:ba:a4:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTfS0NAwy+3YDnjOq6RRjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjUwODIzMDUwMTUyWhcNMjUwODI0MDUwMTUyWjAzMTEwLwYDVQQD
EyhjYjAwYmZiMjI4NGNlNmU5YTgzM2U4YzYyODIwMGZlYmY4NTUzMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBON1S5qbZNN96jXs8dK2DXkKns8
v48X2NYiwrpCw/udGDA/I79bfrqfr+qTAWZQkLLvYoXY+6yVghgygRsIH/6NFSm8
DnBYaW15Q+kKeUpnf7LUeoKsU1T5FiWkaOiXwSyfMKceig0WN5h/HQqn1eJmtYLa
/EJOuWybB0ym8o0qVar5aSCArwfJ3AX9qBGZTaUOW/E3KcglYujOXmciZntpUvMW
cDASJbEardE3NKGaixXSaO2sTUT2A+u+XVQqI+VNQ+VUQWcL965k9J+s3Bl1lezw
CQHO7TS231aw4nV/UA6cdsygE47aI8QVwfajK2m1kt55UxbQpQxl6jB+nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsAv7IoTObpqDPoxiggD+v4VTJiMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHOc3HvG
66KDe7JOUHzxXOMTJ+22Fcu8UelasRFKGEPLOL+W4CK2RpGLv5wpCMXwN5fYPT1S
9GP48LE8BAymrOJupgws4cordOy3eRvlph0iOtO8NjP2goqLny6NTPEac8A1bSA8
g7k7Hs2aiduSMjEsdxUoTMyvxs2f0Sx4ucBwX11adNqF9vigHC1Kor5VL+NxNyL/
H3w2vxnVQUkRNHAKKD08jVTJxKs6rl8/vkOCdpBY6jcDyxIdYN2R8VTX3DM9v2Jq
+DnxpOnsX/1NP0Lo4x6LfCnSaAWzSF99ZV+1yDJjbBYxuLVH4G9uz+u2xewdFS0G
psY2zJWAPrqkQA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:32 2025 by rpki-client