Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
File:                     _ejRxqr0qT_0G7-hvR2sYZfVlXU.mft (raw, json)
Hash identifier:          c5OVUASuajbOFh0enYBP2xhIFhxzkcIDfbrLLlOlQ6I=
Subject key identifier:   47:31:68:E1:4F:38:90:0F:3A:F0:D1:65:E1:26:3C:1F:BE:C9:91:F9
Authority key identifier: FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
Certificate issuer:       /CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Certificate serial:       0198966DAA721AA1687D87F2BC47D7D530B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
Manifest number:          162C
Signing time:             Mon 11 Aug 2025 00:00:26 +0000
Manifest this update:     Mon 11 Aug 2025 00:00:26 +0000
Manifest next update:     Tue 12 Aug 2025 00:00:26 +0000
Files and hashes:         1: _ejRxqr0qT_0G7-hvR2sYZfVlXU.crl (hash: maqB35ajhnOAMx/ZUkxL+e4bYzp8ONWXnM/PYoqDZt4=)
                          2: f5Ifl1Qxitth-8Qh6ozPEIX26LE.roa (hash: wIswSAYWyn5DfKJXI+1/UX9k25/3bD/WegnGLFLzMg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:6d:aa:72:1a:a1:68:7d:87:f2:bc:47:d7:d5:30:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
        Validity
            Not Before: Aug 11 00:00:26 2025 GMT
            Not After : Aug 12 00:00:26 2025 GMT
        Subject: CN=473168e14f38900f3af0d165e1263c1fbec991f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:d7:72:96:90:33:38:33:ba:de:2b:25:e9:
                    ed:8e:c4:22:d6:af:e0:66:5e:dc:e1:ec:c0:95:2c:
                    f1:3b:7d:06:de:4e:24:20:06:07:45:7a:11:dc:b3:
                    84:8e:a9:c9:1d:36:37:33:df:4e:23:b8:6a:b6:09:
                    f9:69:5f:76:40:ee:3c:64:28:09:0a:f4:18:ca:9d:
                    ac:6b:4f:c2:4c:b5:43:b3:7b:2f:cb:b3:16:2d:fa:
                    03:ef:2a:6a:f6:8a:ce:3b:ab:5c:5f:5f:d6:80:06:
                    22:33:cd:75:2a:91:6a:7f:0f:87:77:10:df:94:c8:
                    c8:7a:9e:05:17:b5:c1:04:51:3a:bd:f1:59:3d:cc:
                    b7:96:f1:61:bc:98:80:a4:b5:5c:79:36:93:1a:6e:
                    dc:b3:12:fd:27:e7:3e:f7:dd:14:f4:62:66:14:b2:
                    c7:d8:9d:27:23:25:60:fb:5f:4a:7c:41:2e:53:30:
                    92:d4:ce:f0:ff:47:9b:4e:ec:2a:5a:cb:60:a8:32:
                    2b:be:63:c6:24:ec:a4:74:48:03:a9:8e:6f:4c:3f:
                    0b:83:a1:98:0d:ad:37:78:7d:8d:18:ed:29:08:a0:
                    33:46:7f:f3:93:24:a0:50:ae:15:a6:b0:59:40:3c:
                    0d:38:a4:58:3a:c6:43:72:bc:db:52:54:a3:19:25:
                    4f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:31:68:E1:4F:38:90:0F:3A:F0:D1:65:E1:26:3C:1F:BE:C9:91:F9
            X509v3 Authority Key Identifier:
                keyid:FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2e:9a:6a:50:78:da:22:f6:50:e7:bb:44:8a:17:64:d9:a0:
         fc:d4:85:d7:1a:8b:df:e1:70:88:d2:67:06:0e:d3:9a:16:53:
         7a:27:74:7b:6c:4e:e0:42:95:20:9a:28:72:3f:7b:8b:d4:68:
         f8:12:51:ae:cd:de:63:a6:32:43:cd:3a:0a:6f:b2:44:47:e5:
         75:8b:dd:88:8f:73:15:d8:eb:96:33:3b:0a:02:b6:48:0c:c0:
         5c:38:26:77:40:0b:8a:f2:6e:e3:db:8e:95:92:10:88:e1:26:
         da:d9:8e:28:a2:de:d3:d7:b5:09:dc:16:71:a9:bf:ce:22:86:
         03:74:06:16:b4:9f:a8:67:83:49:0a:91:eb:f6:a6:1c:90:45:
         d5:33:72:fd:bf:9c:fa:e4:45:5b:25:e6:76:9b:25:bf:4e:2a:
         a4:e5:27:5f:ad:da:86:b5:8d:15:d0:d1:8a:b1:03:a4:72:3d:
         ac:be:be:12:64:dc:51:1a:a2:be:13:e8:81:79:51:c6:90:f9:
         77:ab:5c:c6:f6:84:b8:b9:8d:31:02:26:e7:e8:b3:b9:82:23:
         aa:ed:9e:fb:55:ff:a5:56:6c:d6:2b:35:06:b8:f6:15:31:f1:
         27:59:86:fa:52:f7:1e:c8:54:e8:f4:e2:60:6f:f4:f7:23:e7:
         09:fa:3f:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWbapyGqFofYfyvEfX1TC5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZThkMWM2YWFmNGE5M2ZmNDFiYmZhMWJkMWRhYzYxOTdk
NTk1NzUwHhcNMjUwODExMDAwMDI2WhcNMjUwODEyMDAwMDI2WjAzMTEwLwYDVQQD
Eyg0NzMxNjhlMTRmMzg5MDBmM2FmMGQxNjVlMTI2M2MxZmJlYzk5MWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf/XcpaQMzgzut4rJentjsQi1q/g
Zl7c4ezAlSzxO30G3k4kIAYHRXoR3LOEjqnJHTY3M99OI7hqtgn5aV92QO48ZCgJ
CvQYyp2sa0/CTLVDs3svy7MWLfoD7ypq9orOO6tcX1/WgAYiM811KpFqfw+HdxDf
lMjIep4FF7XBBFE6vfFZPcy3lvFhvJiApLVceTaTGm7csxL9J+c+990U9GJmFLLH
2J0nIyVg+19KfEEuUzCS1M7w/0ebTuwqWstgqDIrvmPGJOykdEgDqY5vTD8Lg6GY
Da03eH2NGO0pCKAzRn/zkySgUK4VprBZQDwNOKRYOsZDcrzbUlSjGSVPawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcxaOFPOJAPOvDRZeEmPB++yZH5MB8GA1UdIwQY
MBaAFP3o0caq9Kk/9Bu/ob0drGGX1ZV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUt
OTU0ZDE5NTQ5YjYxLzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUtOTU0ZDE5NTQ5YjYx
LzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAay6aalB4
2iL2UOe7RIoXZNmg/NSF1xqL3+FwiNJnBg7TmhZTeid0e2xO4EKVIJoocj97i9Ro
+BJRrs3eY6YyQ806Cm+yREfldYvdiI9zFdjrljM7CgK2SAzAXDgmd0ALivJu49uO
lZIQiOEm2tmOKKLe09e1CdwWcam/ziKGA3QGFrSfqGeDSQqR6/amHJBF1TNy/b+c
+uRFWyXmdpslv04qpOUnX63ahrWNFdDRirEDpHI9rL6+EmTcURqivhPogXlRxpD5
d6tcxvaEuLmNMQIm5+izuYIjqu2e+1X/pVZs1is1Brj2FTHxJ1mG+lL3HshU6PTi
YG/09yPnCfo/Pg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:30:37 2025 by rpki-client