Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
File:                     80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft (raw, json)
Hash identifier:          NorBF5Pqvl0TXrR/PqZ/3EID9sbMq1x/KO7dgSaRAF8=
Subject key identifier:   85:E1:60:33:73:A8:AE:F8:F7:FB:B7:0A:95:44:75:47:28:FF:08:A9
Authority key identifier: F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4
Certificate issuer:       /CN=f344a9f3665084f5009921ac52d119750beed4b4
Certificate serial:       01987908E27E95D97710A6E8D83C674F2AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
Manifest number:          161C
Signing time:             Tue 05 Aug 2025 07:01:22 +0000
Manifest this update:     Tue 05 Aug 2025 07:01:22 +0000
Manifest next update:     Wed 06 Aug 2025 07:01:22 +0000
Files and hashes:         1: 80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl (hash: 5nlg7doZYTegg3o4c4AtNtEoMxDqqcO3uhBcpEE1Jtc=)
                          2: duO9LxBTkVs9bWkFXNzc7GNBnLM.roa (hash: qNyvixX6BJstTr21KHWMkBm39t0mtYSLiR/YYgK3594=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:08:e2:7e:95:d9:77:10:a6:e8:d8:3c:67:4f:2a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f344a9f3665084f5009921ac52d119750beed4b4
        Validity
            Not Before: Aug  5 07:01:22 2025 GMT
            Not After : Aug  6 07:01:22 2025 GMT
        Subject: CN=85e1603373a8aef8f7fbb70a9544754728ff08a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:ae:67:5d:99:17:ff:e2:27:47:49:e6:4c:
                    2e:96:40:44:a1:51:57:27:48:ba:6a:69:27:cd:70:
                    f9:5d:21:26:1b:45:a4:c6:22:ac:51:9b:f0:17:39:
                    00:e3:0e:67:10:df:96:3f:c6:d3:e9:c9:25:c7:36:
                    a1:11:98:51:fa:c7:da:57:a0:82:12:bc:a1:22:d1:
                    bf:ba:65:c2:cc:55:af:ed:93:8b:89:f3:ff:12:38:
                    22:4e:de:6f:d8:d0:9e:42:15:95:2b:7a:cd:df:ea:
                    17:dc:96:19:86:ca:4a:9d:dc:81:e9:38:13:e6:78:
                    a0:2c:33:fb:99:69:35:2f:7c:75:ed:96:97:8e:93:
                    08:f0:0d:37:61:84:f4:b7:46:a3:6b:c9:dc:35:42:
                    13:43:14:02:1e:2d:e8:97:c5:8e:53:b7:55:7e:ee:
                    65:86:42:35:aa:92:4b:a7:21:dc:d3:5c:73:1f:4c:
                    0b:55:be:a0:b4:bf:cf:71:61:29:a0:79:b8:2b:d8:
                    f3:79:ef:e7:37:64:c6:59:41:4d:f7:1b:31:69:c7:
                    92:84:4c:8a:0d:17:4a:22:1a:e3:57:a1:90:7a:51:
                    80:ff:11:a1:95:d7:73:08:ee:8f:5b:58:b0:8a:22:
                    4f:d9:12:dc:f0:9c:e5:95:bf:b7:51:90:7f:39:c0:
                    a5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E1:60:33:73:A8:AE:F8:F7:FB:B7:0A:95:44:75:47:28:FF:08:A9
            X509v3 Authority Key Identifier:
                keyid:F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:bd:6a:4e:4a:4f:38:64:cc:80:16:ed:85:e1:ba:a1:90:f3:
         39:a1:1b:d9:69:8e:93:86:21:48:b7:fd:43:87:eb:6f:69:a7:
         ee:4e:11:7f:2c:c0:2b:49:fe:3b:7d:00:e2:18:51:2e:cf:30:
         4c:78:25:2f:1d:24:df:19:c3:1b:e7:c9:46:48:ed:9e:fe:d2:
         82:a3:ef:8d:b5:f3:22:f2:54:76:9a:43:b5:d2:43:85:37:25:
         be:23:4e:9c:cb:16:ac:54:21:7b:37:54:67:b6:13:fa:86:3d:
         40:28:90:c2:a6:ac:07:73:51:0a:37:98:00:ab:fd:10:ac:01:
         64:17:1e:83:16:b8:d9:fb:0e:42:e9:2f:7f:08:da:67:4d:a1:
         ee:a9:07:51:a9:c5:66:cf:82:11:ee:bc:d8:06:69:c9:84:64:
         12:ce:85:8e:0c:1e:28:3f:f4:09:4e:40:df:de:55:19:70:a5:
         a5:bd:3a:ab:30:c2:ea:6f:9e:79:5f:44:09:71:16:ab:c3:0d:
         60:ee:ae:fa:9e:58:39:ff:35:44:f4:aa:44:d0:7e:aa:09:b7:
         da:e4:e7:8f:a4:8d:99:9d:41:40:ca:6a:1a:e6:a8:ac:ec:f6:
         52:ee:f7:f4:17:32:c7:e6:94:52:ea:aa:50:80:c2:78:52:ea:
         68:a1:a8:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5COJ+ldl3EKbo2DxnTyrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNDRhOWYzNjY1MDg0ZjUwMDk5MjFhYzUyZDExOTc1MGJl
ZWQ0YjQwHhcNMjUwODA1MDcwMTIyWhcNMjUwODA2MDcwMTIyWjAzMTEwLwYDVQQD
Eyg4NWUxNjAzMzczYThhZWY4ZjdmYmI3MGE5NTQ0NzU0NzI4ZmYwOGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv26uZ12ZF//iJ0dJ5kwulkBEoVFX
J0i6amknzXD5XSEmG0WkxiKsUZvwFzkA4w5nEN+WP8bT6cklxzahEZhR+sfaV6CC
EryhItG/umXCzFWv7ZOLifP/EjgiTt5v2NCeQhWVK3rN3+oX3JYZhspKndyB6TgT
5nigLDP7mWk1L3x17ZaXjpMI8A03YYT0t0aja8ncNUITQxQCHi3ol8WOU7dVfu5l
hkI1qpJLpyHc01xzH0wLVb6gtL/PcWEpoHm4K9jzee/nN2TGWUFN9xsxaceShEyK
DRdKIhrjV6GQelGA/xGhlddzCO6PW1iwiiJP2RLc8Jzllb+3UZB/OcClFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXhYDNzqK749/u3CpVEdUco/wipMB8GA1UdIwQY
MBaAFPNEqfNmUIT1AJkhrFLRGXUL7tS0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODBTcDgyWlFoUFVBbVNHc1V0RVpkUXZ1MUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83MTZhOTAtZDI5NS00OTAzLTkwZjkt
ZDhjN2VmMTU1MTFkLzEvODBTcDgyWlFoUFVBbVNHc1V0RVpkUXZ1MUxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83MTZhOTAtZDI5NS00OTAzLTkwZjktZDhjN2VmMTU1MTFk
LzEvODBTcDgyWlFoUFVBbVNHc1V0RVpkUXZ1MUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOL1qTkpP
OGTMgBbtheG6oZDzOaEb2WmOk4YhSLf9Q4frb2mn7k4RfyzAK0n+O30A4hhRLs8w
THglLx0k3xnDG+fJRkjtnv7SgqPvjbXzIvJUdppDtdJDhTclviNOnMsWrFQhezdU
Z7YT+oY9QCiQwqasB3NRCjeYAKv9EKwBZBcegxa42fsOQukvfwjaZ02h7qkHUanF
Zs+CEe682AZpyYRkEs6FjgweKD/0CU5A395VGXClpb06qzDC6m+eeV9ECXEWq8MN
YO6u+p5YOf81RPSqRNB+qgm32uTnj6SNmZ1BQMpqGuaorOz2Uu739Bcyx+aUUuqq
UIDCeFLqaKGo8w==
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:46:27 2025 by rpki-client