Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File:                     qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier:          JIs1yahYBQi6SGweI4ivs7RjVnh8DiMavLC6MQKOnvU=
Subject key identifier:   B1:CE:5A:68:AF:E3:D0:4E:69:E8:8A:2F:CD:32:A8:68:EF:65:A3:D4
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer:       /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial:       019874BDBF4CCF4951CB4B9343724F3A5BF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 11:00:48 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:48 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:48 +0000
Files and hashes:         1: Ioovps5s613OBdQzBzryR2Ja3A0.roa (hash: ATzykv0spHuFN9BLvq9b09tLyJhBjFr/aCEbExY3CKs=)
                          2: aQTW2xIeYuZvcEH7gsYJNqz73Xs.roa (hash: ga2DmH5h7HfJ0XIXHVbsof3jQ3Sa9KHt/wMuvsxWtEk=)
                          3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: uX9lRKtDRaI607eb1zLjixgxhtKaDRme1gAbRP59QRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:bf:4c:cf:49:51:cb:4b:93:43:72:4f:3a:5b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
        Validity
            Not Before: Aug  4 11:00:48 2025 GMT
            Not After : Aug  5 11:00:48 2025 GMT
        Subject: CN=b1ce5a68afe3d04e69e88a2fcd32a868ef65a3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:54:53:f5:6e:f3:ca:f0:89:55:48:d2:5f:8f:
                    ba:45:40:fe:f7:3c:d4:7a:40:bf:2b:f9:99:d7:57:
                    35:d8:26:fc:2e:ba:5b:c4:b0:64:d6:3f:11:0d:03:
                    51:90:f1:f8:a9:39:da:0c:c2:ca:3c:1b:74:80:99:
                    26:27:ca:58:bc:eb:47:72:f6:0a:88:60:f4:29:b5:
                    97:5d:ea:23:7b:71:0c:5f:0e:10:9c:f9:0e:97:01:
                    21:9b:77:88:00:79:42:67:17:40:37:79:4f:3b:ca:
                    db:ac:37:e3:16:b5:84:6a:1e:7a:7c:48:76:a2:ed:
                    da:fa:16:cc:e3:2e:86:9b:27:a4:18:d7:66:4e:03:
                    89:19:01:39:06:81:f0:27:ed:b2:29:22:f2:c5:ef:
                    03:6d:00:a3:e9:7d:25:d9:05:ab:31:16:b2:48:3a:
                    61:a7:56:1c:dc:4b:fd:c9:94:37:9a:01:c5:e6:ad:
                    bc:22:89:be:37:69:90:d8:8b:eb:d8:ab:8f:91:c0:
                    22:c6:7b:25:68:be:d4:c2:1a:7a:ad:16:d7:af:54:
                    84:c6:d0:cf:83:07:be:53:b0:6c:a3:11:eb:56:a9:
                    70:02:ba:22:03:a0:14:be:a4:7f:69:e2:94:9b:e8:
                    f2:ea:4f:60:c2:c5:fa:cf:83:a6:33:44:d9:73:d0:
                    08:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CE:5A:68:AF:E3:D0:4E:69:E8:8A:2F:CD:32:A8:68:EF:65:A3:D4
            X509v3 Authority Key Identifier:
                keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:bc:c6:bb:2b:e2:63:ac:57:48:0e:b6:e5:b9:98:6e:5d:5f:
         a4:77:fe:a8:58:23:11:83:93:01:28:5c:2d:75:9c:e9:97:16:
         1e:5f:c3:e4:23:25:1f:38:66:cf:8a:65:c4:8a:63:45:ac:b0:
         b9:83:c6:ee:28:ea:4f:53:16:50:99:ae:0f:73:f9:c4:45:1f:
         0a:fd:a8:82:57:4e:ab:c2:6f:c4:31:bb:f1:a4:22:85:14:78:
         20:16:a0:5a:89:b1:a4:79:0d:60:f1:fa:29:d8:e7:f6:39:42:
         93:22:5e:8a:50:1e:7f:f0:7a:c8:00:fc:cb:e6:86:10:87:bd:
         98:e2:22:94:51:a4:79:2d:de:c5:27:53:f0:66:a7:5c:3f:6f:
         d8:16:19:6f:09:32:0f:cf:e1:e5:ef:e3:cd:11:eb:7c:c1:02:
         ac:ec:d1:70:ec:5f:bc:47:84:99:77:87:ea:c8:fc:df:b7:99:
         06:55:ae:14:a8:f8:11:09:4a:e2:2a:50:16:fa:1b:86:1e:68:
         cf:f6:f0:41:e1:69:b3:12:ed:15:d7:65:82:8d:56:90:29:51:
         ca:52:4d:ee:6e:e3:01:0e:fa:77:22:b8:96:18:ee:8c:80:19:
         c6:5f:01:7c:4d:d1:76:e4:6b:9d:6c:c0:e8:da:ec:dc:10:98:
         ba:30:be:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vb9Mz0lRy0uTQ3JPOlv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ODAxYmUyMzYzZjIxMWJkMmY1NzgxOGFkZWFmOWMwZGJl
MTRiZGIwHhcNMjUwODA0MTEwMDQ4WhcNMjUwODA1MTEwMDQ4WjAzMTEwLwYDVQQD
EyhiMWNlNWE2OGFmZTNkMDRlNjllODhhMmZjZDMyYTg2OGVmNjVhM2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklRT9W7zyvCJVUjSX4+6RUD+9zzU
ekC/K/mZ11c12Cb8LrpbxLBk1j8RDQNRkPH4qTnaDMLKPBt0gJkmJ8pYvOtHcvYK
iGD0KbWXXeoje3EMXw4QnPkOlwEhm3eIAHlCZxdAN3lPO8rbrDfjFrWEah56fEh2
ou3a+hbM4y6GmyekGNdmTgOJGQE5BoHwJ+2yKSLyxe8DbQCj6X0l2QWrMRaySDph
p1Yc3Ev9yZQ3mgHF5q28Iom+N2mQ2Ivr2KuPkcAixnslaL7Uwhp6rRbXr1SExtDP
gwe+U7BsoxHrVqlwAroiA6AUvqR/aeKUm+jy6k9gwsX6z4OmM0TZc9AIqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHOWmiv49BOaeiKL80yqGjvZaPUMB8GA1UdIwQY
MBaAFKiAG+I2PyEb0vV4GK3q+cDb4UvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84MTFlNzMtY2YzMC00OTRkLWFjYWMt
ODQyMGFlOWUwNjIyLzEvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS84MTFlNzMtY2YzMC00OTRkLWFjYWMtODQyMGFlOWUwNjIy
LzEvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbzGuyvi
Y6xXSA625bmYbl1fpHf+qFgjEYOTAShcLXWc6ZcWHl/D5CMlHzhmz4plxIpjRayw
uYPG7ijqT1MWUJmuD3P5xEUfCv2ogldOq8JvxDG78aQihRR4IBagWomxpHkNYPH6
Kdjn9jlCkyJeilAef/B6yAD8y+aGEIe9mOIilFGkeS3exSdT8GanXD9v2BYZbwky
D8/h5e/jzRHrfMECrOzRcOxfvEeEmXeH6sj837eZBlWuFKj4EQlK4ipQFvobhh5o
z/bwQeFpsxLtFddlgo1WkClRylJN7m7jAQ76dyK4lhjujIAZxl8BfE3RduRrnWzA
6Nrs3BCYujC+pA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:08 2025 by rpki-client