Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File:                     B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier:          PMpYf/xmFyM/snHMRpWSRdTBvBUi3GX4kSPyQI6wTpU=
Subject key identifier:   52:68:7C:FF:39:56:3F:68:CE:5A:0F:2A:94:11:9A:BC:38:B3:27:07
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer:       /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial:       019874508E9318BF45A4E0A662095BE67DB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 09:01:33 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:33 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:33 +0000
Files and hashes:         1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=)
                          2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: UvA6qD6eGC9xoSCzLZhO2vlTvUJjpmMcEX18Y8/t6WA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:8e:93:18:bf:45:a4:e0:a6:62:09:5b:e6:7d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
        Validity
            Not Before: Aug  4 09:01:33 2025 GMT
            Not After : Aug  5 09:01:33 2025 GMT
        Subject: CN=52687cff39563f68ce5a0f2a94119abc38b32707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9b:1e:73:76:be:35:b3:be:c0:da:6e:19:30:
                    ac:49:6e:21:91:73:34:3b:00:78:77:3f:be:73:3d:
                    e0:b7:f8:24:6f:11:26:37:ee:c8:b0:87:85:01:15:
                    8f:39:0a:bb:b4:3a:fd:a4:4c:12:2b:d9:c8:74:3d:
                    9d:f9:81:b9:7c:57:6e:7b:a6:e4:b9:0f:3a:8e:b2:
                    e7:0b:8f:ad:c2:1a:0d:d4:31:41:8c:99:92:a5:2f:
                    2f:02:4b:a7:46:5f:3b:67:42:f6:3e:7f:36:ae:c2:
                    04:92:0e:25:d1:0c:22:7e:0f:2b:10:e3:fa:bc:03:
                    33:e9:3b:0d:df:49:92:9e:e4:d6:cc:b1:fe:f3:28:
                    fd:fb:23:de:b0:85:43:1d:4c:bd:e9:ca:08:ec:43:
                    f6:e2:e4:17:aa:e6:70:01:40:94:08:c2:4c:14:ac:
                    8e:85:b2:20:a2:e3:08:3c:0b:52:6b:9a:b0:eb:c6:
                    2b:0c:f4:da:a2:0c:8a:88:97:25:d8:93:36:c4:3f:
                    d6:0e:79:1c:23:0e:e4:b9:c5:40:80:dd:8f:b4:88:
                    5c:49:98:7e:b8:3f:4a:6a:2b:c3:ff:94:7a:d4:a3:
                    29:52:86:04:69:a5:c6:83:3a:a1:9c:c0:73:75:30:
                    3c:51:4f:43:f2:e9:39:29:48:77:7e:65:ee:31:a8:
                    f1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:68:7C:FF:39:56:3F:68:CE:5A:0F:2A:94:11:9A:BC:38:B3:27:07
            X509v3 Authority Key Identifier:
                keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:01:7a:db:3c:43:81:7e:3d:ba:8c:d7:51:b7:9b:51:5d:
         23:ee:bc:97:c3:66:0e:a8:af:9b:86:fa:42:11:f6:83:49:5c:
         a1:dd:ad:2d:d4:64:94:7c:dd:aa:20:60:0b:b4:7c:ac:e2:63:
         90:ce:c1:31:a0:66:c1:fc:1e:b4:c2:62:91:28:06:29:c2:29:
         d1:12:35:b2:58:52:ad:60:5e:32:ff:55:53:df:f2:71:d9:f4:
         42:75:05:5e:89:99:52:66:3d:74:ce:e2:4d:cd:f4:15:f8:ea:
         84:d9:e6:fe:7b:c6:e6:16:7f:84:48:c7:10:a8:1b:59:4f:e0:
         c7:80:c7:59:39:46:fc:4f:16:88:16:fb:02:28:c3:fa:4e:da:
         fc:af:07:7e:b9:b1:eb:12:1b:4d:7f:45:1f:ad:78:45:65:47:
         c3:45:3c:ea:de:1f:74:56:04:b1:6d:72:69:5c:66:51:b4:6c:
         b0:06:68:19:56:67:6e:3e:de:8d:e8:78:a2:e4:da:d5:fb:47:
         bb:4a:7a:2a:5b:ea:a5:9f:56:38:4c:2d:b1:bc:f5:91:65:91:
         5b:c2:df:b9:60:3f:df:63:06:3d:0a:cf:61:88:2e:50:b7:17:
         b7:3e:77:e7:9d:c7:d8:fc:71:02:2f:ee:b5:a8:f4:43:57:8f:
         4f:39:12:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UI6TGL9FpOCmYglb5n25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OWViNGQ4YzY1ZjNhN2I0NTRjYTJhNWU1ZjY0MDk0ZTlk
ODhiZDMwHhcNMjUwODA0MDkwMTMzWhcNMjUwODA1MDkwMTMzWjAzMTEwLwYDVQQD
Eyg1MjY4N2NmZjM5NTYzZjY4Y2U1YTBmMmE5NDExOWFiYzM4YjMyNzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Jsec3a+NbO+wNpuGTCsSW4hkXM0
OwB4dz++cz3gt/gkbxEmN+7IsIeFARWPOQq7tDr9pEwSK9nIdD2d+YG5fFdue6bk
uQ86jrLnC4+twhoN1DFBjJmSpS8vAkunRl87Z0L2Pn82rsIEkg4l0Qwifg8rEOP6
vAMz6TsN30mSnuTWzLH+8yj9+yPesIVDHUy96coI7EP24uQXquZwAUCUCMJMFKyO
hbIgouMIPAtSa5qw68YrDPTaogyKiJcl2JM2xD/WDnkcIw7kucVAgN2PtIhcSZh+
uD9KaivD/5R61KMpUoYEaaXGgzqhnMBzdTA8UU9D8uk5KUh3fmXuMajxYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJofP85Vj9ozloPKpQRmrw4sycHMB8GA1UdIwQY
MBaAFAeetNjGXzp7RUyipeX2QJTp2IvTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yZmMwMDctMzYxZC00ZjQ3LWFhZjct
NDg0ZDg0M2U2ZGUzLzEvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yZmMwMDctMzYxZC00ZjQ3LWFhZjctNDg0ZDg0M2U2ZGUz
LzEvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmsBets8
Q4F+PbqM11G3m1FdI+68l8NmDqivm4b6QhH2g0lcod2tLdRklHzdqiBgC7R8rOJj
kM7BMaBmwfwetMJikSgGKcIp0RI1slhSrWBeMv9VU9/ycdn0QnUFXomZUmY9dM7i
Tc30FfjqhNnm/nvG5hZ/hEjHEKgbWU/gx4DHWTlG/E8WiBb7AijD+k7a/K8Hfrmx
6xIbTX9FH614RWVHw0U86t4fdFYEsW1yaVxmUbRssAZoGVZnbj7ejeh4ouTa1ftH
u0p6KlvqpZ9WOEwtsbz1kWWRW8LfuWA/32MGPQrPYYguULcXtz53553H2PxxAi/u
taj0Q1ePTzkSGw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:17 2025 by rpki-client