Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File:                     kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier:          T17VvwGiyFJ/SOur2f4d32SVz6NvWD3qfFodGGlVMiA=
Subject key identifier:   C0:C0:51:2B:52:FE:6C:4E:93:BA:1E:51:4A:42:C6:FD:83:60:C8:94
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer:       /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial:       01987D8AE88D6E6F06388BFD15D808EEA0B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number:          162D
Signing time:             Wed 06 Aug 2025 04:01:52 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:52 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:52 +0000
Files and hashes:         1: 9_JGTVW5qMW7yCkdP0E_-NpXB0s.roa (hash: WnTsDGxoDG2mHWxyzgJxMMHknGyiRAiwLMWZ5xXwktI=)
                          2: GEAFSRO55yyL2hanen4IQZHuURY.roa (hash: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=)
                          3: H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa (hash: dDFoBjvjKcHyX8s6IHYrzZBS6btcUzoDxFIxBvgUAfs=)
                          4: SllXdUUCPVChZ4jvhpor-ghAAj4.roa (hash: gzrQw/PD5uiW072kDXHdmBevESe9Vs8UwVovlju078g=)
                          5: k1wogzI71Qav_nbvke05rmKJg8Y.roa (hash: 1zvN4RDzCr99s7IBr9z4fRCGgHcMNBnaaWXwLcWIgno=)
                          6: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: e+HqOoDSPTZTTruEjvJdmlyotFqm2uB59ODrvEAO+k4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:e8:8d:6e:6f:06:38:8b:fd:15:d8:08:ee:a0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
        Validity
            Not Before: Aug  6 04:01:52 2025 GMT
            Not After : Aug  7 04:01:52 2025 GMT
        Subject: CN=c0c0512b52fe6c4e93ba1e514a42c6fd8360c894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:3c:fe:1d:5f:20:a3:78:34:64:0f:64:da:
                    49:c0:d8:c2:30:0b:2b:f3:ba:7c:c5:12:d2:ba:7a:
                    be:e5:89:c6:15:8b:0a:02:43:0d:29:01:5c:ef:e4:
                    c2:30:c5:c3:74:7f:88:13:9c:e2:91:43:a7:ab:a8:
                    ed:3b:53:97:02:06:eb:23:b7:0f:6a:7d:09:b2:f4:
                    8d:33:0e:53:2c:e5:35:79:d5:78:35:69:69:5e:ab:
                    5a:a3:1e:82:83:eb:76:ae:b5:ca:d8:ea:d5:01:15:
                    12:6b:13:fa:d7:66:90:10:27:11:ce:17:3d:3e:a9:
                    9d:5b:2b:e8:07:27:cc:d2:f8:0f:45:c2:e9:38:64:
                    06:55:e9:e0:8c:ec:6e:de:b7:8c:0a:02:3f:b6:d4:
                    10:5a:20:73:8f:d2:11:47:c1:19:24:a9:d8:0e:75:
                    35:4b:01:e0:fd:cd:ad:e0:9d:d2:ff:f7:e8:90:3a:
                    71:54:05:5c:de:21:e7:a0:44:ec:ce:1b:d1:37:8d:
                    8a:6c:12:84:8b:e6:e4:c1:41:8c:54:11:3e:e6:95:
                    41:2b:b2:d3:03:db:f7:34:15:11:e4:ee:38:b4:17:
                    0d:0e:3d:63:07:26:fe:30:89:82:42:da:3c:8c:b9:
                    56:6b:4f:2e:80:6d:01:4d:a6:bd:20:29:7b:61:13:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C0:51:2B:52:FE:6C:4E:93:BA:1E:51:4A:42:C6:FD:83:60:C8:94
            X509v3 Authority Key Identifier:
                keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:bf:71:e4:d6:b5:4e:65:fa:af:64:31:3c:07:79:5a:07:61:
         1b:97:55:cc:c5:ce:22:47:1c:f8:d6:54:c0:ab:4a:a7:9e:92:
         43:85:31:02:cf:d2:b7:41:8b:5d:85:4d:ad:cf:aa:d5:09:eb:
         14:a6:26:d2:c1:39:af:3d:68:ff:7d:57:6d:48:6a:2b:df:cd:
         fd:97:c5:62:de:64:72:8c:c4:5e:40:5e:97:57:3a:fa:de:63:
         7b:dd:0e:ba:89:35:d7:1d:a4:85:13:85:72:4e:ed:1a:df:64:
         8f:b3:0e:55:c1:e9:fd:4d:54:d8:f2:74:5b:62:ed:24:3c:89:
         9a:54:f8:c0:ee:05:0e:26:97:ee:f6:29:ec:8b:9d:af:f5:29:
         6e:08:9c:56:0c:df:d7:4c:d8:fe:25:b6:74:c7:92:92:9a:4d:
         93:8b:e8:01:6b:e6:f6:f3:aa:71:2d:79:77:9b:96:2a:7c:b2:
         73:e9:55:40:4c:fd:29:e7:4f:e2:0c:ce:d8:53:75:0c:96:b3:
         6f:3c:8b:f2:43:31:35:1a:ba:c2:c4:41:55:80:7e:a5:53:c4:
         fe:c2:6b:00:1d:f8:d1:b8:25:f0:31:fd:24:0d:c4:02:da:a8:
         91:d7:af:a5:e1:a0:f5:91:37:14:63:49:b9:09:0b:50:81:15:
         86:cf:1d:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9iuiNbm8GOIv9FdgI7qCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2
NDM3MDEwHhcNMjUwODA2MDQwMTUyWhcNMjUwODA3MDQwMTUyWjAzMTEwLwYDVQQD
EyhjMGMwNTEyYjUyZmU2YzRlOTNiYTFlNTE0YTQyYzZmZDgzNjBjODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQU8/h1fIKN4NGQPZNpJwNjCMAsr
87p8xRLSunq+5YnGFYsKAkMNKQFc7+TCMMXDdH+IE5zikUOnq6jtO1OXAgbrI7cP
an0JsvSNMw5TLOU1edV4NWlpXqtaox6Cg+t2rrXK2OrVARUSaxP612aQECcRzhc9
PqmdWyvoByfM0vgPRcLpOGQGVengjOxu3reMCgI/ttQQWiBzj9IRR8EZJKnYDnU1
SwHg/c2t4J3S//fokDpxVAVc3iHnoETszhvRN42KbBKEi+bkwUGMVBE+5pVBK7LT
A9v3NBUR5O44tBcNDj1jByb+MImCQto8jLlWa08ugG0BTaa9ICl7YRPIQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDAUStS/mxOk7oeUUpCxv2DYMiUMB8GA1UdIwQY
MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt
M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz
LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG79x5Na1
TmX6r2QxPAd5WgdhG5dVzMXOIkcc+NZUwKtKp56SQ4UxAs/St0GLXYVNrc+q1Qnr
FKYm0sE5rz1o/31XbUhqK9/N/ZfFYt5kcozEXkBel1c6+t5je90Ouok11x2khROF
ck7tGt9kj7MOVcHp/U1U2PJ0W2LtJDyJmlT4wO4FDiaX7vYp7Iudr/UpbgicVgzf
10zY/iW2dMeSkppNk4voAWvm9vOqcS15d5uWKnyyc+lVQEz9KedP4gzO2FN1DJaz
bzyL8kMxNRq6wsRBVYB+pVPE/sJrAB340bgl8DH9JA3EAtqokdevpeGg9ZE3FGNJ
uQkLUIEVhs8dIg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:22:56 2025 by rpki-client