Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
File:                     _N6Mo-LOUrvM5TxKKSbTycQQwEs.mft (raw, json)
Hash identifier:          sy0zv+H3mRQS9gP3Jrshe83HQbkDcgaKRg5eszlim/o=
Subject key identifier:   95:68:BD:30:4B:D1:C7:3C:8E:8F:85:C0:F7:34:87:6F:EB:F2:FA:F1
Authority key identifier: FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
Certificate issuer:       /CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
Certificate serial:       01987C77E127892953FA2FD1D703A28C4852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
Manifest number:          161C
Signing time:             Tue 05 Aug 2025 23:01:27 +0000
Manifest this update:     Tue 05 Aug 2025 23:01:27 +0000
Manifest next update:     Wed 06 Aug 2025 23:01:27 +0000
Files and hashes:         1: MiVzKZibX-3It-xgfseflvN2L_A.roa (hash: aH26xuV9XAHKD/zeZjQBB+/hzYVLDuUtsC+DOjTxZxI=)
                          2: _N6Mo-LOUrvM5TxKKSbTycQQwEs.crl (hash: 4ZmmeKUDn58yg6gWRDAFGM9+e28HGAEVoDHoU/MUt3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:e1:27:89:29:53:fa:2f:d1:d7:03:a2:8c:48:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
        Validity
            Not Before: Aug  5 23:01:27 2025 GMT
            Not After : Aug  6 23:01:27 2025 GMT
        Subject: CN=9568bd304bd1c73c8e8f85c0f734876febf2faf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:a4:7c:f6:99:4e:5a:84:c4:12:86:48:ef:
                    05:7e:c3:ee:fe:d1:76:85:de:38:a8:5f:31:a3:2a:
                    95:cf:29:38:8e:9a:07:29:58:52:ee:14:8c:be:56:
                    07:75:6f:89:e7:af:19:c6:a7:19:4d:ee:16:81:2d:
                    89:72:68:65:5d:98:67:c5:f1:e3:e1:d9:bc:c7:4a:
                    a1:6b:cd:5a:58:0e:b9:a7:d7:65:01:f5:f0:39:75:
                    2e:9b:90:fc:8c:c0:aa:fb:19:8e:8f:92:35:9b:e3:
                    b1:2c:ed:00:9b:71:3d:a6:3d:0f:de:19:3d:87:94:
                    c1:f3:7c:86:7d:da:25:a6:36:28:b3:0f:8f:05:59:
                    15:ff:c8:3a:25:9b:a8:61:99:20:f7:46:08:df:ad:
                    77:8e:87:89:cb:eb:38:86:fa:75:13:d5:56:65:23:
                    6d:73:89:f2:4c:31:ff:bd:5e:eb:ec:fa:c9:e6:60:
                    c8:db:a5:88:e3:1b:df:c6:c8:bd:10:8c:09:7f:5f:
                    fe:35:ce:46:a6:51:2b:be:48:e3:48:e7:0f:12:bd:
                    15:33:6b:a2:7d:be:26:9d:4b:5b:39:70:f5:d8:a9:
                    75:a8:53:06:61:a2:68:d9:6d:71:72:e2:7f:d0:d3:
                    71:c5:6b:b3:82:4f:5e:e8:d3:0e:6b:13:c9:b7:51:
                    bf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:68:BD:30:4B:D1:C7:3C:8E:8F:85:C0:F7:34:87:6F:EB:F2:FA:F1
            X509v3 Authority Key Identifier:
                keyid:FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3d:a8:c8:e8:5d:90:01:fb:52:01:99:88:16:31:a7:b7:38:
         53:f5:9b:2b:b4:75:36:07:c9:35:27:79:f3:73:43:d7:ec:00:
         9d:80:91:5c:de:d0:32:b7:c6:cc:21:72:2f:a5:e6:3f:62:99:
         68:30:5d:19:84:77:3d:77:b0:53:a8:48:15:92:1b:ec:e1:1e:
         df:ec:c9:f1:44:ac:90:26:23:ae:2f:79:33:d2:86:f2:7a:7f:
         8b:6f:d3:e1:05:ec:e2:fd:17:2f:a0:d0:51:be:55:2e:a4:84:
         d3:cd:e7:91:00:52:20:53:7f:78:ed:bc:a4:38:69:d5:77:d4:
         40:66:74:94:f7:b7:88:21:b0:46:c6:dd:be:d9:6f:99:20:3c:
         b8:a9:e9:b6:03:99:a7:02:f6:db:b1:55:15:38:a2:da:35:b8:
         3d:2b:d4:01:59:ed:05:a2:c1:91:c4:f1:bd:c2:4a:2f:49:3c:
         da:ff:f5:12:6b:2f:c2:15:72:18:ce:21:2d:ed:85:78:e1:2a:
         c5:f3:b0:a6:96:7b:05:30:9c:1c:5f:cf:c4:cc:84:b3:b2:9a:
         e9:ce:a5:3a:e6:70:37:9c:10:a8:ee:e0:8e:c0:cf:a7:ee:fe:
         1e:06:e0:79:cb:f7:0e:f6:36:3b:06:55:a4:dc:a2:79:a2:6e:
         b0:96:13:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8d+EniSlT+i/R1wOijEhSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZGU4Y2EzZTJjZTUyYmJjY2U1M2M0YTI5MjZkM2M5YzQx
MGMwNGIwHhcNMjUwODA1MjMwMTI3WhcNMjUwODA2MjMwMTI3WjAzMTEwLwYDVQQD
Eyg5NTY4YmQzMDRiZDFjNzNjOGU4Zjg1YzBmNzM0ODc2ZmViZjJmYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ikfPaZTlqExBKGSO8FfsPu/tF2
hd44qF8xoyqVzyk4jpoHKVhS7hSMvlYHdW+J568ZxqcZTe4WgS2JcmhlXZhnxfHj
4dm8x0qha81aWA65p9dlAfXwOXUum5D8jMCq+xmOj5I1m+OxLO0Am3E9pj0P3hk9
h5TB83yGfdolpjYosw+PBVkV/8g6JZuoYZkg90YI3613joeJy+s4hvp1E9VWZSNt
c4nyTDH/vV7r7PrJ5mDI26WI4xvfxsi9EIwJf1/+Nc5GplErvkjjSOcPEr0VM2ui
fb4mnUtbOXD12Kl1qFMGYaJo2W1xcuJ/0NNxxWuzgk9e6NMOaxPJt1G/8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVovTBL0cc8jo+FwPc0h2/r8vrxMB8GA1UdIwQY
MBaAFPzejKPizlK7zOU8Sikm08nEEMBLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX042TW8tTE9VcnZNNVR4S0tTYlR5Y1FRd0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84NGM3NmUtYTE1Yy00NTRmLWE2ODYt
MDAwOTIyYTVjZjE5LzEvX042TW8tTE9VcnZNNVR4S0tTYlR5Y1FRd0VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84NGM3NmUtYTE1Yy00NTRmLWE2ODYtMDAwOTIyYTVjZjE5
LzEvX042TW8tTE9VcnZNNVR4S0tTYlR5Y1FRd0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYT2oyOhd
kAH7UgGZiBYxp7c4U/WbK7R1NgfJNSd583ND1+wAnYCRXN7QMrfGzCFyL6XmP2KZ
aDBdGYR3PXewU6hIFZIb7OEe3+zJ8USskCYjri95M9KG8np/i2/T4QXs4v0XL6DQ
Ub5VLqSE083nkQBSIFN/eO28pDhp1XfUQGZ0lPe3iCGwRsbdvtlvmSA8uKnptgOZ
pwL227FVFTii2jW4PSvUAVntBaLBkcTxvcJKL0k82v/1EmsvwhVyGM4hLe2FeOEq
xfOwppZ7BTCcHF/PxMyEs7Ka6c6lOuZwN5wQqO7gjsDPp+7+Hgbgecv3DvY2OwZV
pNyieaJusJYTIg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:46 2025 by rpki-client