Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File:                     n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier:          WhuEErHbbgCHpJtUr5JrOtiW4HJ5XEUTysUO1fLYxSI=
Subject key identifier:   48:D7:D2:17:46:31:BF:4B:F2:AF:2B:21:8F:8C:40:E6:FA:0C:1D:32
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer:       /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial:       01989780739B9EAF2E708466B22AC5D917B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number:          162E
Signing time:             Mon 11 Aug 2025 05:00:34 +0000
Manifest this update:     Mon 11 Aug 2025 05:00:34 +0000
Manifest next update:     Tue 12 Aug 2025 05:00:34 +0000
Files and hashes:         1: 1E7Gf5u3eRF1Aunlmjbqz4Acde0.roa (hash: WXQHP0KJmxLNS7N2wK9mSrPQyTyTx5Hc/Dr9c9sHehU=)
                          2: E41q-p3jPlyQ_c_xxbExKmLEhsA.roa (hash: viuUWFSJw7nloUiLYZrm+xh5LFHH1990i6bBiRJWdNg=)
                          3: cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa (hash: Q1si7hVwLSegXDVNPXeui2AkeRgS0Epsk3MKoikvRr4=)
                          4: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: aY1C9XwRidgKUdeuDkSRoKbCfVCZgOMdTwFkJDCY6cA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:80:73:9b:9e:af:2e:70:84:66:b2:2a:c5:d9:17:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
        Validity
            Not Before: Aug 11 05:00:34 2025 GMT
            Not After : Aug 12 05:00:34 2025 GMT
        Subject: CN=48d7d2174631bf4bf2af2b218f8c40e6fa0c1d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:8b:f5:ff:1c:36:7f:dc:00:31:65:9a:64:
                    51:14:ec:ab:99:21:de:da:c9:0d:a5:63:77:5d:e8:
                    51:01:9e:16:b3:4d:e8:b3:71:70:e6:e3:34:b6:bb:
                    aa:cd:a9:31:90:51:9d:5f:ba:de:3e:d2:95:3a:39:
                    bf:2e:04:65:d0:78:af:a6:78:03:91:6e:29:0d:f0:
                    f4:95:17:77:76:b1:40:e0:76:a2:88:50:de:d0:98:
                    7f:e7:42:df:82:3a:77:d0:88:bf:c0:fc:0d:cc:6e:
                    d4:47:f9:4f:e1:87:e4:5e:19:9a:f1:3e:f3:35:4c:
                    ce:d4:a8:f4:50:0f:cc:45:9e:62:38:ad:4f:d9:ac:
                    13:75:47:13:07:42:aa:99:62:8c:4f:b6:9e:04:d9:
                    1f:69:28:50:21:1b:92:1f:33:75:e7:b6:eb:1e:cd:
                    d9:8a:36:f5:0d:81:40:22:b3:41:35:4f:5d:8a:69:
                    c4:bc:19:a4:7c:19:f5:f3:08:89:c5:94:d4:58:6e:
                    d1:c0:2e:35:ed:1d:ee:11:21:c7:f3:30:fc:32:c0:
                    ee:17:fb:2b:65:80:41:42:f0:31:3f:76:42:34:86:
                    6b:28:63:50:e5:97:65:fb:40:98:33:a7:0d:e5:5e:
                    c4:88:f8:31:65:1a:b2:50:6d:a9:50:b3:87:01:bf:
                    e9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D7:D2:17:46:31:BF:4B:F2:AF:2B:21:8F:8C:40:E6:FA:0C:1D:32
            X509v3 Authority Key Identifier:
                keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b2:ed:2d:a2:ff:cb:b2:7e:ac:59:84:1f:1b:b6:ce:c6:5a:
         b0:9f:07:43:3f:9d:c2:6a:58:ec:16:d7:15:fa:a9:98:01:69:
         03:e2:ec:60:22:d3:a9:b9:94:49:e8:4c:18:87:c4:23:f0:27:
         2c:5a:c3:8f:e0:e9:d3:45:44:32:e3:f4:69:f7:f9:3a:83:eb:
         ba:67:15:06:bf:5f:9f:d9:38:19:7d:b1:d0:17:c0:09:f6:ea:
         da:bb:5d:1d:36:14:53:85:b9:0c:f2:2e:31:bc:05:cf:15:38:
         21:88:b2:4a:f0:2a:ce:7c:4f:c9:9a:f7:94:67:c9:8f:f6:11:
         a8:9b:35:c1:fe:ae:71:a9:2b:bb:50:fb:50:a2:3b:83:70:c8:
         b1:d9:49:0c:d7:45:8c:0b:21:9b:b8:b2:39:6d:b8:ca:1d:36:
         59:a8:3f:0c:21:6a:5c:90:d7:fc:cd:71:8b:d2:4b:37:20:b8:
         b8:27:e9:a2:c0:cc:ba:68:cb:c9:7e:13:fa:81:ba:a6:8c:97:
         98:89:1a:ab:91:99:03:d4:05:7a:e2:1b:7e:f5:f1:f2:8d:d7:
         53:6e:15:a7:31:46:42:20:a4:6f:41:c6:9e:f8:63:03:c9:19:
         69:03:36:5e:11:f0:68:04:06:0f:31:b4:24:c7:ab:c1:3e:68:
         10:8a:0e:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXgHObnq8ucIRmsirF2RezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNmZiNzk1NDE3OWE5NjY2YjRjYjZhZmUzNDZkMWUyMWVj
MzBlNDUwHhcNMjUwODExMDUwMDM0WhcNMjUwODEyMDUwMDM0WjAzMTEwLwYDVQQD
Eyg0OGQ3ZDIxNzQ2MzFiZjRiZjJhZjJiMjE4ZjhjNDBlNmZhMGMxZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFmL9f8cNn/cADFlmmRRFOyrmSHe
2skNpWN3XehRAZ4Ws03os3Fw5uM0truqzakxkFGdX7rePtKVOjm/LgRl0HivpngD
kW4pDfD0lRd3drFA4HaiiFDe0Jh/50Lfgjp30Ii/wPwNzG7UR/lP4YfkXhma8T7z
NUzO1Kj0UA/MRZ5iOK1P2awTdUcTB0KqmWKMT7aeBNkfaShQIRuSHzN157brHs3Z
ijb1DYFAIrNBNU9dimnEvBmkfBn18wiJxZTUWG7RwC417R3uESHH8zD8MsDuF/sr
ZYBBQvAxP3ZCNIZrKGNQ5Zdl+0CYM6cN5V7EiPgxZRqyUG2pULOHAb/p+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjX0hdGMb9L8q8rIY+MQOb6DB0yMB8GA1UdIwQY
MBaAFJ9vt5VBealma0y2r+NG0eIeww5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYt
NzM1NGE3M2JkYTdlLzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYtNzM1NGE3M2JkYTdl
LzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibLtLaL/
y7J+rFmEHxu2zsZasJ8HQz+dwmpY7BbXFfqpmAFpA+LsYCLTqbmUSehMGIfEI/An
LFrDj+Dp00VEMuP0aff5OoPrumcVBr9fn9k4GX2x0BfACfbq2rtdHTYUU4W5DPIu
MbwFzxU4IYiySvAqznxPyZr3lGfJj/YRqJs1wf6ucakru1D7UKI7g3DIsdlJDNdF
jAshm7iyOW24yh02Wag/DCFqXJDX/M1xi9JLNyC4uCfposDMumjLyX4T+oG6poyX
mIkaq5GZA9QFeuIbfvXx8o3XU24VpzFGQiCkb0HGnvhjA8kZaQM2XhHwaAQGDzG0
JMerwT5oEIoOaA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:46 2025 by rpki-client