Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
File:                     bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json)
Hash identifier:          V9TXRZwWH10LulnYgyvrzBpvbsIdMTjDxNO+YjhvKT0=
Subject key identifier:   6D:44:12:D2:12:AC:6C:36:98:61:91:F5:AE:DD:93:E9:58:F3:7C:FF
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Certificate issuer:       /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial:       0198D73BA0F94BF44A7E77BC8340EEAD8C6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 14:01:05 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:05 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:05 +0000
Files and hashes:         1: O1oreHXoGfE0x_DduepnzXbv1jQ.roa (hash: YJRrGXYLhqb/8S1lAURaXg16hfYVh9EAfo6ckQiEqy0=)
                          2: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: kwmaz7W98zWE0nQB+yF+j2L1vqrXVpB5nUWQ7vd++s4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:a0:f9:4b:f4:4a:7e:77:bc:83:40:ee:ad:8c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
        Validity
            Not Before: Aug 23 14:01:05 2025 GMT
            Not After : Aug 24 14:01:05 2025 GMT
        Subject: CN=6d4412d212ac6c36986191f5aedd93e958f37cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:e6:d4:6b:bb:5d:c5:39:87:6f:ac:2f:f9:
                    e3:68:c5:43:58:d8:e7:1a:14:67:06:bb:15:fa:77:
                    0f:b9:54:79:7e:ac:50:85:59:fd:2e:a6:5f:09:82:
                    eb:cc:18:4e:8b:3d:21:fa:cc:be:28:79:13:45:26:
                    06:26:11:77:eb:ec:70:17:38:bb:b9:3b:8e:6c:60:
                    0d:c8:47:f6:51:3c:17:46:e3:fb:40:d3:0f:d7:e6:
                    5b:cf:a2:5a:4b:b4:22:f6:26:ec:3f:86:1d:dd:a2:
                    d0:cb:93:1d:7c:a1:32:8a:71:2d:c2:55:4e:ce:e5:
                    86:d5:00:75:63:5c:43:53:af:c8:46:c0:fe:6b:b5:
                    26:00:0e:a8:e0:31:99:9d:d7:2e:4b:8a:bc:e1:7f:
                    83:3d:2d:42:d3:5c:5d:a7:0f:ae:d0:68:70:2e:db:
                    f0:9e:ef:65:49:64:17:ac:f8:af:f4:cc:1e:1d:03:
                    0b:24:d3:bb:89:fd:fc:92:69:f3:67:36:01:5e:85:
                    d3:b8:4f:a1:4e:34:fe:7c:14:c8:01:29:5f:11:09:
                    4e:ae:f2:a9:18:6c:d6:9a:6d:16:7f:74:00:57:e3:
                    70:e6:33:31:46:68:0b:77:03:75:fa:fa:85:de:a0:
                    2e:39:cb:66:d1:9f:da:09:25:a6:bb:29:69:27:5d:
                    5c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:44:12:D2:12:AC:6C:36:98:61:91:F5:AE:DD:93:E9:58:F3:7C:FF
            X509v3 Authority Key Identifier:
                keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:50:17:48:3b:b2:2a:32:df:73:00:ed:50:8f:7f:07:b3:95:
         f6:32:5a:1b:25:f8:43:af:58:b9:8b:8f:a7:1d:88:56:cb:7a:
         87:14:4a:f1:55:08:a5:5a:eb:e2:36:03:05:62:97:70:6e:0c:
         85:5a:da:1f:e8:36:7c:a6:e2:aa:df:bf:74:de:2a:84:54:fa:
         e4:ee:3e:7c:ee:5d:3e:28:a1:94:2c:74:b3:bd:23:fa:b5:05:
         ab:b6:d3:cc:16:94:e0:50:87:07:dd:ed:bd:99:bb:e1:07:b1:
         72:d9:80:52:58:1f:04:f0:8f:19:39:fc:84:bc:ce:6b:93:cb:
         6e:c3:5c:c9:d7:15:05:55:26:93:2a:0b:41:23:19:6d:2e:eb:
         4f:b0:38:47:1b:9d:e0:90:0d:03:fa:81:44:22:28:08:3d:82:
         0d:a3:e0:30:43:0d:44:76:7a:77:db:45:9f:61:02:91:a9:05:
         da:ef:bc:67:2d:42:48:08:b7:0c:99:77:d5:25:1f:aa:d4:c2:
         28:4b:76:db:82:d7:2a:0f:f7:d8:c7:7e:7b:57:be:a3:70:af:
         fd:13:c9:fa:6e:33:7c:ff:3b:2f:f5:8e:7d:ab:cf:67:7a:b5:
         67:4a:e9:73:5a:71:b9:c8:89:9f:44:c5:69:4b:fb:49:8b:18:
         26:b9:76:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO6D5S/RKfne8g0DurYxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOTM5ZWI3NGFiYmNkMjIyN2MyMTkyYWEyYTM3ZTZkY2I4
OThlNTMwHhcNMjUwODIzMTQwMTA1WhcNMjUwODI0MTQwMTA1WjAzMTEwLwYDVQQD
Eyg2ZDQ0MTJkMjEyYWM2YzM2OTg2MTkxZjVhZWRkOTNlOTU4ZjM3Y2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrDm1Gu7XcU5h2+sL/njaMVDWNjn
GhRnBrsV+ncPuVR5fqxQhVn9LqZfCYLrzBhOiz0h+sy+KHkTRSYGJhF36+xwFzi7
uTuObGANyEf2UTwXRuP7QNMP1+Zbz6JaS7Qi9ibsP4Yd3aLQy5MdfKEyinEtwlVO
zuWG1QB1Y1xDU6/IRsD+a7UmAA6o4DGZndcuS4q84X+DPS1C01xdpw+u0GhwLtvw
nu9lSWQXrPiv9MweHQMLJNO7if38kmnzZzYBXoXTuE+hTjT+fBTIASlfEQlOrvKp
GGzWmm0Wf3QAV+Nw5jMxRmgLdwN1+vqF3qAuOctm0Z/aCSWmuylpJ11cBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1EEtISrGw2mGGR9a7dk+lY83z/MB8GA1UdIwQY
MBaAFG2TnrdKu80iJ8IZKqKjfm3LiY5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTIt
ZTk1ZTJkM2QyM2UwLzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTItZTk1ZTJkM2QyM2Uw
LzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFAXSDuy
KjLfcwDtUI9/B7OV9jJaGyX4Q69YuYuPpx2IVst6hxRK8VUIpVrr4jYDBWKXcG4M
hVraH+g2fKbiqt+/dN4qhFT65O4+fO5dPiihlCx0s70j+rUFq7bTzBaU4FCHB93t
vZm74QexctmAUlgfBPCPGTn8hLzOa5PLbsNcydcVBVUmkyoLQSMZbS7rT7A4Rxud
4JANA/qBRCIoCD2CDaPgMEMNRHZ6d9tFn2ECkakF2u+8Zy1CSAi3DJl31SUfqtTC
KEt224LXKg/32Md+e1e+o3Cv/RPJ+m4zfP87L/WOfavPZ3q1Z0rpc1pxuciJn0TF
aUv7SYsYJrl27w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:15 2025 by rpki-client