Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File:                     3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier:          7O9ggSn7dlBdRSidD5CfVBFJSEBQ11SOJ1+SlR0KriU=
Subject key identifier:   56:83:95:1D:AC:B8:DA:35:9B:95:5A:16:34:83:F0:D5:5E:6C:CE:66
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer:       /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial:       0198D515B1219E97100190FB9A9A61E17FD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 04:00:25 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:25 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:25 +0000
Files and hashes:         1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: Xfid02dEdamI0ZZiMUoofDRTqAn8/Rl1Gr4smoKPJFA=)
                          2: aKn5wX9zpC6koraTjDd3gqhXdek.roa (hash: UCw+VdmiwuxVJRZ+XJIJQKAozSvDmGpk4Pb8r0Al3WE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:b1:21:9e:97:10:01:90:fb:9a:9a:61:e1:7f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
        Validity
            Not Before: Aug 23 04:00:25 2025 GMT
            Not After : Aug 24 04:00:25 2025 GMT
        Subject: CN=5683951dacb8da359b955a163483f0d55e6cce66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:7c:23:23:ad:7c:67:c0:69:86:e9:13:82:
                    1a:5f:2c:c4:dc:03:ce:c6:d1:86:c7:1b:f9:de:27:
                    7d:f5:e5:d8:eb:6c:df:a7:35:6b:33:a1:cb:dd:fc:
                    ba:40:da:d8:66:89:4a:46:90:33:f7:d9:c6:b9:e3:
                    bf:d9:7a:bf:2e:11:ba:8b:62:c1:a5:ed:56:28:f4:
                    4f:a3:d0:de:b3:03:6e:32:5e:c7:a3:15:ea:62:c9:
                    36:b7:d4:38:f8:b6:28:d6:94:19:7f:25:bb:ee:8f:
                    61:e4:30:45:e9:4c:0f:b3:e0:ad:a3:dc:2b:51:05:
                    54:4e:ce:e6:d8:8d:5f:ad:24:90:cd:ba:79:62:80:
                    d6:61:a0:46:ca:ba:ea:13:56:41:65:69:c5:f9:30:
                    b3:9d:86:81:6c:30:42:8d:22:97:02:08:e7:24:41:
                    fa:56:0f:d8:4e:a5:a2:59:62:3c:4e:a8:2c:c1:2e:
                    e2:46:82:bf:a6:b6:d1:d0:56:5e:bc:e2:70:c4:bd:
                    2e:97:92:0f:ed:6f:0e:bb:61:95:e8:a3:cf:97:a8:
                    50:9b:45:7b:b5:da:43:5c:cd:dd:b0:d6:67:ce:31:
                    19:8b:74:93:b3:47:9b:e3:0b:1b:09:86:10:21:9d:
                    fd:7b:d8:1f:f2:89:23:22:ba:26:9f:5f:13:55:66:
                    04:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:83:95:1D:AC:B8:DA:35:9B:95:5A:16:34:83:F0:D5:5E:6C:CE:66
            X509v3 Authority Key Identifier:
                keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4d:f9:b7:df:d1:c1:14:10:71:96:b4:38:cd:25:39:44:d5:
         7e:7d:28:96:ab:18:ff:4d:16:7f:20:0f:2a:42:e5:12:59:93:
         26:c4:b3:5f:11:4e:e2:9c:1a:5f:75:b5:f4:40:8a:ae:c9:2a:
         7d:8c:d2:e9:05:9a:8f:c5:b6:eb:31:64:81:cd:5b:c8:2d:0a:
         48:f8:f7:94:2d:ad:bf:ca:fa:6a:30:e7:3b:8c:c1:02:51:f5:
         71:e4:92:95:9b:a0:ef:20:7a:7e:5f:59:e9:bf:42:3b:97:3c:
         af:19:18:a3:b8:0d:fa:00:0b:6b:7e:ed:2f:d7:9f:47:90:28:
         ef:c9:00:e5:4f:99:76:40:98:84:17:5e:f2:3f:fb:aa:18:07:
         78:d7:eb:73:3a:30:db:58:71:d9:34:1f:75:8d:da:96:af:72:
         4f:04:b7:97:f5:bc:c2:f1:63:49:4c:45:ba:86:74:73:e0:06:
         35:83:41:ff:9d:e0:5c:9a:21:63:6f:19:d1:b7:90:1f:cc:23:
         6e:d4:3d:c4:22:7f:03:be:dc:08:71:dd:c2:d2:ff:08:d7:01:
         85:af:79:a1:f1:fe:6f:74:0c:2b:c0:3a:68:1f:49:d8:48:d5:
         ee:89:a4:9b:f3:48:c0:ab:a2:30:d2:0f:cf:e3:d5:2d:52:5c:
         53:83:53:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFbEhnpcQAZD7mpph4X/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZDU3MDhmNDI5YWRhZGJhMWI0YTM4Yzk0ZGQ3NzY1NGFm
YWY5N2QwHhcNMjUwODIzMDQwMDI1WhcNMjUwODI0MDQwMDI1WjAzMTEwLwYDVQQD
Eyg1NjgzOTUxZGFjYjhkYTM1OWI5NTVhMTYzNDgzZjBkNTVlNmNjZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumV8IyOtfGfAaYbpE4IaXyzE3APO
xtGGxxv53id99eXY62zfpzVrM6HL3fy6QNrYZolKRpAz99nGueO/2Xq/LhG6i2LB
pe1WKPRPo9DeswNuMl7HoxXqYsk2t9Q4+LYo1pQZfyW77o9h5DBF6UwPs+Cto9wr
UQVUTs7m2I1frSSQzbp5YoDWYaBGyrrqE1ZBZWnF+TCznYaBbDBCjSKXAgjnJEH6
Vg/YTqWiWWI8TqgswS7iRoK/prbR0FZevOJwxL0ul5IP7W8Ou2GV6KPPl6hQm0V7
tdpDXM3dsNZnzjEZi3STs0eb4wsbCYYQIZ39e9gf8okjIromn18TVWYE9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaDlR2suNo1m5VaFjSD8NVebM5mMB8GA1UdIwQY
MBaAFN3VcI9CmtrbobSjjJTdd2VK+vl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2RWd2owS2EydHVodEtPTWxOMTNaVXI2LVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNzk0YTMtZjNhZS00ZmJlLTk4ZWEt
MjBlMWMzZTNmOGUyLzEvM2RWd2owS2EydHVodEtPTWxOMTNaVXI2LVgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9kNzk0YTMtZjNhZS00ZmJlLTk4ZWEtMjBlMWMzZTNmOGUy
LzEvM2RWd2owS2EydHVodEtPTWxOMTNaVXI2LVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo035t9/R
wRQQcZa0OM0lOUTVfn0olqsY/00WfyAPKkLlElmTJsSzXxFO4pwaX3W19ECKrskq
fYzS6QWaj8W26zFkgc1byC0KSPj3lC2tv8r6ajDnO4zBAlH1ceSSlZug7yB6fl9Z
6b9CO5c8rxkYo7gN+gALa37tL9efR5Ao78kA5U+ZdkCYhBde8j/7qhgHeNfrczow
21hx2TQfdY3alq9yTwS3l/W8wvFjSUxFuoZ0c+AGNYNB/53gXJohY28Z0beQH8wj
btQ9xCJ/A77cCHHdwtL/CNcBha95ofH+b3QMK8A6aB9J2EjV7omkm/NIwKuiMNIP
z+PVLVJcU4NT+w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:37 2025 by rpki-client