Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
File:                     S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft (raw, json)
Hash identifier:          CwqgISkxHjeEWnzS39ETD0AggNLKYixwNJJQIiHJKI0=
Subject key identifier:   04:7A:87:AB:E1:49:60:EE:FE:6D:6F:19:86:82:6E:5E:A9:4D:58:DA
Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
Certificate issuer:       /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Certificate serial:       0198D472725906F819561D1DB1C343E674BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 01:02:06 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:06 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:06 +0000
Files and hashes:         1: 3pyVDwp0x3hY9oRPcp-pG8Phtr0.roa (hash: Qs6GoxmPBIC7HGNuig2kfn3Fl73wnKTFpil8h4rBNO4=)
                          2: 7NbESzXRMNmvEomT-Mf8me7h-5o.roa (hash: sP5JFPjYHopQ7eTPfJ05mH6EJsqFFPFigu0p8AF8Ees=)
                          3: S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl (hash: 7TSladws95h7vlF0SYa/tx85d9jhvdkSkyJE1ZBXPQM=)
                          4: _8kwQM-X6Z8iQPUFtkn5eqJVuxI.roa (hash: euBW9IpgTvtCum/UZd3emtTuwK2uZ78wnCtDCEVJf2A=)
                          5: c4bLrKnAkTRBkWnGAk0rUMNmNi0.roa (hash: MeURMVUFI1PNljAcbfvTNPtm4Rnq7dMhBu12jSOQpgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:72:59:06:f8:19:56:1d:1d:b1:c3:43:e6:74:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
        Validity
            Not Before: Aug 23 01:02:06 2025 GMT
            Not After : Aug 24 01:02:06 2025 GMT
        Subject: CN=047a87abe14960eefe6d6f1986826e5ea94d58da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:11:a0:1d:87:9d:d4:05:52:3a:ec:ae:b9:8c:
                    a7:1b:fb:72:b6:06:db:e5:78:d6:1f:be:d9:65:5e:
                    e2:15:7c:bc:de:78:40:3a:8b:04:90:75:04:b9:37:
                    50:17:df:ec:01:80:a7:ab:2b:b4:5b:b7:af:da:ed:
                    35:c3:d0:43:16:27:fb:8d:b2:1b:a9:92:61:1d:8d:
                    08:e2:79:52:e6:5b:73:94:53:a9:96:3e:62:d5:4f:
                    cc:bc:46:62:49:58:3a:4e:46:8c:89:e2:cc:bb:dd:
                    23:dc:28:12:ed:50:1d:6e:90:1e:a6:00:dc:55:50:
                    38:e2:fc:dc:e8:c7:9e:a8:eb:0d:62:e9:47:5c:c9:
                    b2:6f:57:4b:c7:c0:00:10:e6:6c:81:2b:06:0c:ad:
                    87:be:56:38:b1:6c:54:e4:8f:07:74:79:6d:68:92:
                    a8:f8:db:7f:53:02:69:4c:cc:00:ae:5c:16:66:48:
                    e7:a1:29:32:11:eb:11:2f:17:d1:20:83:cd:41:a1:
                    f7:46:d2:bf:bd:50:dc:25:09:4a:43:8c:ca:6c:27:
                    c8:e8:c7:ee:a5:49:c2:7a:80:db:d1:04:30:7b:41:
                    8a:07:9e:76:b3:9e:87:f3:15:17:d7:3c:98:53:a1:
                    aa:ce:1e:44:85:a3:cd:33:e6:9c:49:e0:b0:70:2d:
                    58:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7A:87:AB:E1:49:60:EE:FE:6D:6F:19:86:82:6E:5E:A9:4D:58:DA
            X509v3 Authority Key Identifier:
                keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:db:94:4e:c3:ad:5d:a3:3e:a0:36:d0:7c:c7:66:81:2b:25:
         e7:b7:4d:93:2f:4d:0b:36:4c:3e:ec:16:bb:b7:35:fe:0e:08:
         a3:d6:72:88:0d:36:04:b3:48:17:13:ac:18:fb:a0:6e:55:14:
         ae:4c:56:bd:6f:c1:ef:f8:39:0d:a7:92:3a:1d:a1:f8:38:6b:
         14:24:58:b5:1b:62:e6:33:4c:cd:68:f6:c9:8f:50:28:4b:9b:
         9e:04:0c:65:95:1f:c4:97:6d:30:1f:ef:0f:02:a9:ce:bc:c9:
         f4:58:25:07:81:40:2c:da:41:e9:74:63:6d:44:19:52:f2:42:
         71:9a:82:ef:5f:ee:77:07:a6:ab:bf:34:40:59:da:c3:47:63:
         fa:f8:42:af:93:b3:0d:26:66:8b:4b:b3:db:27:31:44:28:e4:
         6e:95:fb:8a:c3:ab:37:ce:3d:7f:48:13:0d:d0:a2:a7:5a:45:
         0a:0a:5c:40:8f:46:90:a3:da:40:ef:ee:59:d1:0c:37:0c:6b:
         b3:43:f9:93:48:67:05:ce:e4:af:c6:86:66:1d:1a:ec:1a:49:
         e0:3f:2e:32:c1:e9:12:f2:e0:b2:b6:7f:ea:62:0e:ec:36:c4:
         00:7a:a6:3b:92:af:12:9b:8c:ea:6b:08:8e:c4:ed:fe:21:08:
         8d:0a:d1:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcnJZBvgZVh0dscND5nS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzk2ZjBiMzA1MWI1YmM4MTRiMmU4OWNiNDcwYTM4MjZi
MmJmMDAwHhcNMjUwODIzMDEwMjA2WhcNMjUwODI0MDEwMjA2WjAzMTEwLwYDVQQD
EygwNDdhODdhYmUxNDk2MGVlZmU2ZDZmMTk4NjgyNmU1ZWE5NGQ1OGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhGgHYed1AVSOuyuuYynG/tytgbb
5XjWH77ZZV7iFXy83nhAOosEkHUEuTdQF9/sAYCnqyu0W7ev2u01w9BDFif7jbIb
qZJhHY0I4nlS5ltzlFOplj5i1U/MvEZiSVg6TkaMieLMu90j3CgS7VAdbpAepgDc
VVA44vzc6MeeqOsNYulHXMmyb1dLx8AAEOZsgSsGDK2HvlY4sWxU5I8HdHltaJKo
+Nt/UwJpTMwArlwWZkjnoSkyEesRLxfRIIPNQaH3RtK/vVDcJQlKQ4zKbCfI6Mfu
pUnCeoDb0QQwe0GKB552s56H8xUX1zyYU6Gqzh5EhaPNM+acSeCwcC1Y6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAR6h6vhSWDu/m1vGYaCbl6pTVjaMB8GA1UdIwQY
MBaAFEt5bwswUbW8gUsuictHCjgmsr8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNsdkN6QlJ0YnlCU3k2SnkwY0tPQ2F5dndBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iYjQ2ZjUtOWZmMi00MDU4LTkwNTAt
ZmJkY2IxYTQxNDY3LzEvUzNsdkN6QlJ0YnlCU3k2SnkwY0tPQ2F5dndBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9iYjQ2ZjUtOWZmMi00MDU4LTkwNTAtZmJkY2IxYTQxNDY3
LzEvUzNsdkN6QlJ0YnlCU3k2SnkwY0tPQ2F5dndBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvduUTsOt
XaM+oDbQfMdmgSsl57dNky9NCzZMPuwWu7c1/g4Io9ZyiA02BLNIFxOsGPugblUU
rkxWvW/B7/g5DaeSOh2h+DhrFCRYtRti5jNMzWj2yY9QKEubngQMZZUfxJdtMB/v
DwKpzrzJ9FglB4FALNpB6XRjbUQZUvJCcZqC71/udwemq780QFnaw0dj+vhCr5Oz
DSZmi0uz2ycxRCjkbpX7isOrN849f0gTDdCip1pFCgpcQI9GkKPaQO/uWdEMNwxr
s0P5k0hnBc7kr8aGZh0a7BpJ4D8uMsHpEvLgsrZ/6mIO7DbEAHqmO5KvEpuM6msI
jsTt/iEIjQrRpg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:50 2025 by rpki-client