Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
File:                     Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft (raw, json)
Hash identifier:          KO1vfkLnxScRsVIlyA+azPGpPt4dthg8CZYp21vxUSw=
Subject key identifier:   EB:41:51:EE:58:1B:10:45:92:D3:C5:94:95:18:AD:CD:64:98:9D:50
Authority key identifier: 63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
Certificate issuer:       /CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Certificate serial:       0198960008A644EC0D9D6402E1722A8D6295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
Manifest number:          162A
Signing time:             Sun 10 Aug 2025 22:00:41 +0000
Manifest this update:     Sun 10 Aug 2025 22:00:41 +0000
Manifest next update:     Mon 11 Aug 2025 22:00:41 +0000
Files and hashes:         1: VLWbnm4HFdzuXT54nAW-KLk6RNc.roa (hash: P5V8CUnu9bD0Jv0MPakwPFOEnZtARng4CsZzmamsq/o=)
                          2: Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl (hash: e5y9liI093IN1E3hDGAEuOq5B6t2MGvJa6c1kzmNa7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:00:08:a6:44:ec:0d:9d:64:02:e1:72:2a:8d:62:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
        Validity
            Not Before: Aug 10 22:00:41 2025 GMT
            Not After : Aug 11 22:00:41 2025 GMT
        Subject: CN=eb4151ee581b104592d3c5949518adcd64989d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:7b:62:59:04:31:e6:f6:96:6c:ac:7b:d3:
                    fc:8d:fe:eb:24:6f:c0:6d:55:9d:55:c3:07:7a:7c:
                    90:86:e7:7e:31:2f:cf:77:e9:38:63:44:91:c7:9d:
                    42:79:ed:7c:e4:14:3a:2b:1a:87:ed:79:12:7b:e7:
                    a7:ce:79:09:06:19:86:d8:fa:31:50:8d:8e:15:e8:
                    fa:97:0f:75:c7:fc:74:60:98:aa:70:d1:6d:ca:ef:
                    66:4c:64:cb:89:09:8d:af:17:aa:d7:cc:ed:0c:b2:
                    74:63:96:bd:80:01:e9:43:cf:54:68:84:fb:80:8b:
                    a7:cc:a3:42:0d:6e:e1:44:88:e1:b0:3e:d0:3d:ad:
                    9b:52:0b:c6:96:38:81:e4:3a:55:a1:20:23:db:d6:
                    6a:f0:be:0b:e3:63:9a:60:f3:4f:80:df:40:6c:45:
                    4c:84:bc:ff:ca:85:92:91:31:fe:57:ef:79:d9:97:
                    fc:a7:61:a0:54:4d:c0:33:08:4a:04:dc:c2:52:6d:
                    8e:82:f3:8f:02:2a:85:14:0a:7d:4c:19:50:bd:c0:
                    29:07:af:55:1b:37:03:87:22:d4:d2:8a:74:22:c4:
                    7a:ae:1d:13:64:e2:97:a4:4b:50:e1:bd:e1:fb:22:
                    35:14:52:90:50:92:dd:5f:6c:b9:dc:7a:24:e3:48:
                    45:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:41:51:EE:58:1B:10:45:92:D3:C5:94:95:18:AD:CD:64:98:9D:50
            X509v3 Authority Key Identifier:
                keyid:63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e5:30:34:e1:ed:31:46:a8:f5:14:ab:99:1f:38:78:20:73:
         a4:3d:db:1c:d3:ed:be:ae:43:f1:8e:70:57:53:2b:99:a4:93:
         f4:5c:2d:aa:5b:da:6e:8f:21:e3:9f:79:af:fc:27:12:39:92:
         03:78:70:c9:93:3b:f1:f7:b6:c7:02:cd:0e:0a:b3:83:e0:44:
         2d:42:34:c8:6c:44:d0:12:8e:de:40:c2:8d:6c:86:48:bf:0b:
         2d:fd:5a:de:3e:d5:b2:c5:ec:d7:42:7f:11:0f:3a:95:74:75:
         43:d0:5a:72:0b:f7:8f:bc:8d:4e:03:50:38:75:ba:12:b1:88:
         d9:e5:79:8d:4f:ed:1f:21:dc:c7:17:13:8a:41:e9:7e:22:91:
         de:d6:f5:cf:76:1e:8d:98:3d:a1:24:d6:e3:5d:c7:9d:8c:b7:
         79:9b:24:d0:ca:68:b8:5b:72:0c:13:50:f7:83:15:39:d6:f4:
         ad:87:fa:87:63:c0:64:e8:72:d9:07:7d:72:ed:90:0f:0a:41:
         85:0a:86:8d:20:b8:25:97:8c:4a:a8:51:70:fd:71:77:3b:a1:
         4d:15:7e:66:72:09:e5:f3:21:e2:85:0b:83:b6:84:f0:f5:17:
         19:ac:1d:96:5f:5b:b5:6f:4e:74:2c:98:61:cf:82:79:5e:89:
         0a:5c:c2:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWAAimROwNnWQC4XIqjWKVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzgxNDBkYmQ0ZTZlZjE3MDIwZDg5YjBkNDI1MGRmZmIw
NDgxMWMwHhcNMjUwODEwMjIwMDQxWhcNMjUwODExMjIwMDQxWjAzMTEwLwYDVQQD
EyhlYjQxNTFlZTU4MWIxMDQ1OTJkM2M1OTQ5NTE4YWRjZDY0OTg5ZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+p7YlkEMeb2lmyse9P8jf7rJG/A
bVWdVcMHenyQhud+MS/Pd+k4Y0SRx51Cee185BQ6KxqH7XkSe+enznkJBhmG2Pox
UI2OFej6lw91x/x0YJiqcNFtyu9mTGTLiQmNrxeq18ztDLJ0Y5a9gAHpQ89UaIT7
gIunzKNCDW7hRIjhsD7QPa2bUgvGljiB5DpVoSAj29Zq8L4L42OaYPNPgN9AbEVM
hLz/yoWSkTH+V+952Zf8p2GgVE3AMwhKBNzCUm2OgvOPAiqFFAp9TBlQvcApB69V
GzcDhyLU0op0IsR6rh0TZOKXpEtQ4b3h+yI1FFKQUJLdX2y53Hok40hFjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtBUe5YGxBFktPFlJUYrc1kmJ1QMB8GA1UdIwQY
MBaAFGN4FA29Tm7xcCDYmw1CUN/7BIEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNnVURiMU9idkZ3SU5pYkRVSlEzX3NFZ1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85ZTZhYjItMDNlOC00OGU5LTg2ZjYt
NTYzYzZiNTJkMDg2LzEvWTNnVURiMU9idkZ3SU5pYkRVSlEzX3NFZ1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85ZTZhYjItMDNlOC00OGU5LTg2ZjYtNTYzYzZiNTJkMDg2
LzEvWTNnVURiMU9idkZ3SU5pYkRVSlEzX3NFZ1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOUwNOHt
MUao9RSrmR84eCBzpD3bHNPtvq5D8Y5wV1MrmaST9Fwtqlvabo8h4595r/wnEjmS
A3hwyZM78fe2xwLNDgqzg+BELUI0yGxE0BKO3kDCjWyGSL8LLf1a3j7VssXs10J/
EQ86lXR1Q9Bacgv3j7yNTgNQOHW6ErGI2eV5jU/tHyHcxxcTikHpfiKR3tb1z3Ye
jZg9oSTW413HnYy3eZsk0MpouFtyDBNQ94MVOdb0rYf6h2PAZOhy2Qd9cu2QDwpB
hQqGjSC4JZeMSqhRcP1xdzuhTRV+ZnIJ5fMh4oULg7aE8PUXGawdll9btW9OdCyY
Yc+CeV6JClzCuA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:36 2025 by rpki-client