Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
File:                     _SYdRTGeg3UYdDbaRL9bmtsESn8.mft (raw, json)
Hash identifier:          j8wy8OVMr6bSnU7nI7706+dbIgdFqafQYmnJXnjRRnU=
Subject key identifier:   FC:9E:93:0D:91:47:6F:DF:53:BD:53:E9:82:4E:0D:90:E2:36:C8:9F
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       0198729890F9A089A4466CE8DE8779A933A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
Manifest number:          161B
Signing time:             Mon 04 Aug 2025 01:00:57 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:57 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:57 +0000
Files and hashes:         1: ElC-6BWKIscUitjfAAuE6V-GosE.roa (hash: puexHHhEWAY8GemHhcMwArliXKfDZpEmPaNZcjyIMY4=)
                          2: GBGBlAFSzLuNFgNx2x_0D_5DQmg.roa (hash: NZPhbRaB5eM/voPBrZEMV3C9aUgwFS3iIgWGfN4cNI0=)
                          3: IUfsA9WUIh_drsK7CEvgRpo35z0.roa (hash: +jKjtuQptzEAVzSdULkJ5A8HWf8sGmcVbiqzXEqShbg=)
                          4: _SYdRTGeg3UYdDbaRL9bmtsESn8.crl (hash: AJBctTnNarvCl/NLg9hm0C6p1iKjNb7qfqgMc++JgMk=)
                          5: _cs3H8q9ZlFgGKRLwiQ4Xtf8xNU.roa (hash: zP2/mCjB82eimNPlv5UC3nRyIxCuHe80Zw3eVdffH6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:90:f9:a0:89:a4:46:6c:e8:de:87:79:a9:33:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Aug  4 01:00:57 2025 GMT
            Not After : Aug  5 01:00:57 2025 GMT
        Subject: CN=fc9e930d91476fdf53bd53e9824e0d90e236c89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a3:69:7d:54:85:58:ef:b8:3b:97:b7:3f:a0:
                    13:57:7f:d0:c2:64:15:fe:76:0f:68:81:06:15:18:
                    74:2a:09:f1:ca:0c:7c:1e:5c:a1:8c:f6:98:fe:93:
                    47:4a:bc:58:8e:99:4d:72:5f:3e:b1:7c:52:da:98:
                    f8:a7:02:7b:20:ba:a4:64:d1:c9:55:02:62:6a:fe:
                    55:01:03:25:d1:c1:2b:58:93:38:f1:fe:f6:75:32:
                    66:ef:00:80:4e:8a:e6:99:d7:0b:6e:6b:a6:33:b4:
                    34:8f:70:92:dd:56:8a:7c:4a:59:50:90:4a:3e:c4:
                    ad:28:2f:77:81:47:ce:52:ec:ec:5b:55:f3:db:62:
                    ca:b7:ca:75:ca:1d:35:d3:93:7e:27:24:2d:db:e3:
                    90:03:89:d2:d8:8a:56:f4:61:c5:d1:1a:01:92:5c:
                    c3:62:ae:c8:b1:48:30:d3:b4:ed:ba:b7:67:fa:04:
                    e2:32:ed:f3:31:e9:92:b5:eb:37:dd:9b:ce:e6:36:
                    51:08:2f:b3:24:a4:03:f2:46:c7:83:6a:c6:e8:53:
                    a4:0c:3d:0c:52:1f:3b:43:22:54:ae:2f:a0:ac:c1:
                    c7:5a:36:74:b0:28:4c:aa:2c:41:7d:96:0b:af:63:
                    ad:71:2b:46:2d:ce:3f:cf:3a:73:e4:0b:b4:80:a1:
                    89:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9E:93:0D:91:47:6F:DF:53:BD:53:E9:82:4E:0D:90:E2:36:C8:9F
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ef:97:40:0e:f6:47:a6:7d:f5:ab:d8:e0:31:11:bd:c5:46:
         5e:0a:ba:29:c5:91:ce:b5:40:22:fc:96:a6:a2:7e:1f:f1:87:
         90:21:e3:7d:5b:51:ff:d8:97:a8:04:63:82:cf:94:df:fd:57:
         a1:ad:42:86:a4:d7:42:64:06:be:40:a7:6d:85:9b:83:55:bc:
         56:08:d1:c5:d8:c4:be:62:91:18:9b:ee:f6:0d:a3:bc:d1:6f:
         18:4e:e0:e6:d2:40:fc:95:9c:db:61:f6:e5:3f:25:77:eb:d9:
         12:1f:e9:21:e9:30:50:d0:0c:b6:7f:cb:5c:10:c2:5b:f9:c4:
         17:e5:26:48:38:37:67:4d:a0:43:18:0a:fc:cf:a1:5f:38:bc:
         e0:3d:6d:9d:dd:cb:e1:03:4e:74:c5:80:8a:d9:a7:df:6a:1d:
         1c:65:13:95:c9:e7:1c:61:e3:94:4a:db:0d:19:eb:97:0b:74:
         88:fe:17:eb:fa:6b:8a:2b:90:0c:9a:9d:fe:38:9c:30:75:10:
         e2:ce:97:aa:b7:23:9f:97:66:76:bc:67:17:a4:83:66:c4:2a:
         31:7b:7a:b2:c3:14:cf:3f:26:ad:43:dc:14:e8:82:41:c7:f7:
         ba:3c:66:f6:7d:59:43:8b:c3:b9:56:48:8a:dc:bc:d6:94:41:
         b9:7f:6f:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymJD5oImkRmzo3od5qTOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMjYxZDQ1MzE5ZTgzNzUxODc0MzZkYTQ0YmY1YjlhZGIw
NDRhN2YwHhcNMjUwODA0MDEwMDU3WhcNMjUwODA1MDEwMDU3WjAzMTEwLwYDVQQD
EyhmYzllOTMwZDkxNDc2ZmRmNTNiZDUzZTk4MjRlMGQ5MGUyMzZjODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aNpfVSFWO+4O5e3P6ATV3/QwmQV
/nYPaIEGFRh0Kgnxygx8HlyhjPaY/pNHSrxYjplNcl8+sXxS2pj4pwJ7ILqkZNHJ
VQJiav5VAQMl0cErWJM48f72dTJm7wCATormmdcLbmumM7Q0j3CS3VaKfEpZUJBK
PsStKC93gUfOUuzsW1Xz22LKt8p1yh0105N+JyQt2+OQA4nS2IpW9GHF0RoBklzD
Yq7IsUgw07Tturdn+gTiMu3zMemStes33ZvO5jZRCC+zJKQD8kbHg2rG6FOkDD0M
Uh87QyJUri+grMHHWjZ0sChMqixBfZYLr2OtcStGLc4/zzpz5Au0gKGJAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyekw2RR2/fU71T6YJODZDiNsifMB8GA1UdIwQY
MBaAFP0mHUUxnoN1GHQ22kS/W5rbBEp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81ODJiMTctZjQ2Zi00MWViLThmZDQt
ZWI1MDkzYjIzMWMxLzEvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81ODJiMTctZjQ2Zi00MWViLThmZDQtZWI1MDkzYjIzMWMx
LzEvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF++XQA72
R6Z99avY4DERvcVGXgq6KcWRzrVAIvyWpqJ+H/GHkCHjfVtR/9iXqARjgs+U3/1X
oa1ChqTXQmQGvkCnbYWbg1W8VgjRxdjEvmKRGJvu9g2jvNFvGE7g5tJA/JWc22H2
5T8ld+vZEh/pIekwUNAMtn/LXBDCW/nEF+UmSDg3Z02gQxgK/M+hXzi84D1tnd3L
4QNOdMWAitmn32odHGUTlcnnHGHjlErbDRnrlwt0iP4X6/priiuQDJqd/jicMHUQ
4s6Xqrcjn5dmdrxnF6SDZsQqMXt6ssMUzz8mrUPcFOiCQcf3ujxm9n1ZQ4vDuVZI
ity81pRBuX9vxw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:02 2025 by rpki-client