Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
File:                     f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft (raw, json)
Hash identifier:          +XVdamZSyT1BlrfLmalHZ4RwTlegFk7RWoezLR04+dU=
Subject key identifier:   79:A2:52:84:9C:0F:CB:12:D2:94:4C:71:73:C3:20:DB:B3:17:B6:EB
Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
Certificate issuer:       /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Certificate serial:       01987AC04DB3A4AB24E9978EFC3CC233AED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 15:01:19 +0000
Manifest this update:     Tue 05 Aug 2025 15:01:19 +0000
Manifest next update:     Wed 06 Aug 2025 15:01:19 +0000
Files and hashes:         1: AfxHVZhw7S6ij1s6ZJ4SMYoOQJc.roa (hash: LJW5Y4vZe3G/aI05TP+NUCTrdwpagASD2p69Aj70Dcw=)
                          2: f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl (hash: mWMrScq2YdResvQ4VDGlWrDkm+ptYL7J2ILLQECbWQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 15:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:c0:4d:b3:a4:ab:24:e9:97:8e:fc:3c:c2:33:ae:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
        Validity
            Not Before: Aug  5 15:01:19 2025 GMT
            Not After : Aug  6 15:01:19 2025 GMT
        Subject: CN=79a252849c0fcb12d2944c7173c320dbb317b6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c0:8d:f4:ee:ee:12:81:46:c0:23:af:f5:53:
                    43:a2:44:a8:8f:ee:a0:4b:e9:f6:a9:2a:9b:23:96:
                    70:79:e7:30:1d:f7:ca:57:46:2e:f2:80:d8:15:f9:
                    db:21:7f:d0:60:af:65:ca:0e:0e:04:c8:07:dd:86:
                    05:0e:63:12:e0:41:d0:47:81:e8:ee:ef:7b:70:36:
                    19:25:8d:52:ae:c6:a4:48:90:36:5e:a2:9e:2d:e0:
                    4e:9d:bb:32:ca:b6:af:ae:b4:e0:db:b9:b0:f6:0d:
                    af:de:82:2f:7e:07:9c:fe:2b:da:0a:e5:4f:7e:d1:
                    bb:d1:2d:7c:78:34:4e:6e:89:15:fc:7c:42:63:bc:
                    36:d3:5e:30:0c:4a:8a:8d:69:b3:a6:34:03:32:08:
                    76:56:52:17:9b:3d:f1:5e:b0:a3:a0:4a:ca:51:bb:
                    ba:46:60:c9:67:ab:25:63:37:1e:78:50:94:b0:aa:
                    a9:cf:aa:53:a9:bb:57:63:01:e3:32:c8:f5:c5:f3:
                    7f:9f:d6:64:09:74:e3:ef:83:bb:11:d7:9f:da:9f:
                    59:80:68:87:f2:70:c7:45:d3:54:2d:0a:2c:42:9b:
                    21:3e:01:ac:fa:8a:1c:d4:7f:d8:fa:8c:79:c9:17:
                    24:ba:d7:02:dc:78:12:bb:06:21:6d:59:88:61:69:
                    99:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A2:52:84:9C:0F:CB:12:D2:94:4C:71:73:C3:20:DB:B3:17:B6:EB
            X509v3 Authority Key Identifier:
                keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4e:e9:0d:bb:be:bf:fe:98:be:da:d4:fc:39:1e:e9:73:34:
         f9:69:2d:fa:79:2e:ce:9a:6f:9c:f3:72:91:ec:1d:44:8b:03:
         8e:6b:43:1a:4f:3c:f1:8e:92:95:90:04:7e:73:63:3d:0c:37:
         08:33:ea:61:58:4f:c8:ba:5f:37:78:87:0a:0e:ab:97:4c:e6:
         e4:df:98:f8:df:53:e2:e0:1f:21:26:3f:20:4b:23:be:e9:6b:
         85:6e:99:b4:fe:b4:3e:06:6c:76:ce:1d:4f:e7:91:5f:85:26:
         e1:97:32:a6:ff:43:53:96:1e:37:e4:a8:e8:d2:f5:c4:7a:49:
         4e:d3:ba:ae:03:4d:18:c0:7c:01:6e:8d:57:d6:d3:e8:99:e7:
         4b:98:51:3f:b0:0a:c2:93:5c:d1:09:33:42:8c:50:7e:9b:ba:
         88:68:fa:a1:40:6e:00:d4:71:ce:37:22:c4:55:4e:66:eb:89:
         4e:58:1f:42:bf:9a:7d:0e:8e:42:97:a1:6c:ff:35:36:a6:a1:
         0f:e9:43:94:5f:05:ab:44:09:44:dc:e6:f1:d2:f6:9f:8b:4b:
         69:a0:d8:02:1d:2f:d6:4f:64:bc:18:31:24:ef:fc:18:ab:32:
         9d:c9:6a:a9:52:5d:b9:9c:54:91:f7:22:bc:b8:45:1c:6c:f4:
         f9:05:ce:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6wE2zpKsk6ZeO/DzCM67VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTY4OWRlNGE3Y2U3NjhiZjNhYjVkOWY4NTQ2ZTg1NmNj
YjE5MzYwHhcNMjUwODA1MTUwMTE5WhcNMjUwODA2MTUwMTE5WjAzMTEwLwYDVQQD
Eyg3OWEyNTI4NDljMGZjYjEyZDI5NDRjNzE3M2MzMjBkYmIzMTdiNmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksCN9O7uEoFGwCOv9VNDokSoj+6g
S+n2qSqbI5ZweecwHffKV0Yu8oDYFfnbIX/QYK9lyg4OBMgH3YYFDmMS4EHQR4Ho
7u97cDYZJY1SrsakSJA2XqKeLeBOnbsyyravrrTg27mw9g2v3oIvfgec/ivaCuVP
ftG70S18eDRObokV/HxCY7w2014wDEqKjWmzpjQDMgh2VlIXmz3xXrCjoErKUbu6
RmDJZ6slYzceeFCUsKqpz6pTqbtXYwHjMsj1xfN/n9ZkCXTj74O7Edef2p9ZgGiH
8nDHRdNULQosQpshPgGs+ooc1H/Y+ox5yRckutcC3HgSuwYhbVmIYWmZoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmiUoScD8sS0pRMcXPDINuzF7brMB8GA1UdIwQY
MBaAFH9Wid5KfOdovzq12fhUboVsyxk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUt
OGI1MzcyNTg0YWNkLzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUtOGI1MzcyNTg0YWNk
LzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlE7pDbu+
v/6YvtrU/Dke6XM0+Wkt+nkuzppvnPNykewdRIsDjmtDGk888Y6SlZAEfnNjPQw3
CDPqYVhPyLpfN3iHCg6rl0zm5N+Y+N9T4uAfISY/IEsjvulrhW6ZtP60PgZsds4d
T+eRX4Um4Zcypv9DU5YeN+So6NL1xHpJTtO6rgNNGMB8AW6NV9bT6JnnS5hRP7AK
wpNc0QkzQoxQfpu6iGj6oUBuANRxzjcixFVOZuuJTlgfQr+afQ6OQpehbP81Nqah
D+lDlF8Fq0QJRNzm8dL2n4tLaaDYAh0v1k9kvBgxJO/8GKsynclqqVJduZxUkfci
vLhFHGz0+QXO9A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:54 2025 by rpki-client