Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
File:                     Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft (raw, json)
Hash identifier:          DeHMvNE6ulub4A6bEnvAYbbXbnAGZsf3dDOfBM6jNfQ=
Subject key identifier:   FD:E7:6C:15:C0:85:DB:0F:B3:7F:C7:E7:48:82:46:52:BB:B4:C2:FF
Authority key identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
Certificate issuer:       /CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Certificate serial:       0198A04EC07DD374764F4E92C2E12B8799E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
Manifest number:          162C
Signing time:             Tue 12 Aug 2025 22:02:52 +0000
Manifest this update:     Tue 12 Aug 2025 22:02:52 +0000
Manifest next update:     Wed 13 Aug 2025 22:02:52 +0000
Files and hashes:         1: KfvqJ792oMd34Pp7PugqoZjhvkw.roa (hash: S302iUZeOLpzdWoDN+iw2GhCZ0Q0jKKUkWWXOnKtMnU=)
                          2: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl (hash: MQWZa4Vm0SMAdv73WpfmWTeXksGAZY3k+Te05ffxVVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4e:c0:7d:d3:74:76:4f:4e:92:c2:e1:2b:87:99:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
        Validity
            Not Before: Aug 12 22:02:52 2025 GMT
            Not After : Aug 13 22:02:52 2025 GMT
        Subject: CN=fde76c15c085db0fb37fc7e748824652bbb4c2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:aa:87:54:b6:8e:d2:ec:d2:5c:4d:da:99:
                    42:52:85:e8:30:a6:de:ec:4c:c5:db:24:b4:d8:a8:
                    dd:22:4b:39:f1:e8:38:bc:6e:1b:79:bb:38:33:b3:
                    d8:33:eb:0c:c3:f0:01:78:75:ba:79:25:26:5f:7a:
                    e9:94:dc:bd:3f:0d:43:3e:4c:a0:a1:62:7a:54:c2:
                    93:85:ba:6c:62:cd:ae:b2:39:5a:32:f3:1d:f4:24:
                    d6:8c:45:b8:04:ca:de:40:f9:20:1d:9f:0d:a1:18:
                    83:d9:6a:f9:7d:a8:26:0a:1f:6e:c4:39:fe:78:39:
                    a8:6a:7f:be:0b:17:d9:bf:c7:4c:56:b8:13:af:75:
                    a9:bb:c4:ad:41:a9:65:5e:18:72:29:42:d2:11:c7:
                    8e:dd:fc:87:95:58:0d:96:c1:33:cc:87:72:45:15:
                    c6:f8:f1:13:e0:f0:8d:d2:38:ce:06:35:da:7f:da:
                    c8:65:69:9d:02:60:3a:ff:e5:c5:f0:8d:c1:00:9a:
                    e6:b5:aa:c2:7e:0b:89:ac:e6:38:01:58:36:6d:fe:
                    c0:a3:6d:69:a5:cd:96:f7:ca:73:27:db:c8:46:46:
                    ff:09:64:33:ee:2a:e9:80:10:89:e4:12:90:12:fd:
                    a1:1b:6c:6c:a1:ed:6c:d8:7a:fb:a1:45:73:e4:25:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E7:6C:15:C0:85:DB:0F:B3:7F:C7:E7:48:82:46:52:BB:B4:C2:FF
            X509v3 Authority Key Identifier:
                keyid:3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:55:c1:a4:a8:2b:19:b7:ea:ea:ef:da:96:37:a6:f2:69:1e:
         71:3e:fe:89:98:3c:bf:ca:9e:93:6b:d3:d0:ca:b5:d5:69:dd:
         e5:e0:9a:7e:2e:ab:3d:27:ea:93:3c:75:b7:dc:fd:10:08:a0:
         08:13:59:a5:97:d6:31:ba:1d:13:d3:76:c8:9a:08:ba:13:5d:
         8e:2e:ba:07:17:a4:af:f2:d9:42:6b:59:ea:76:6a:0d:6d:d2:
         04:e9:05:95:87:5f:8b:48:ac:f6:4f:09:e7:6d:39:5d:ba:13:
         e1:dc:26:48:cd:12:6d:d3:f3:06:6d:dd:61:63:9a:85:47:75:
         1a:d2:a5:6e:75:df:aa:5e:93:56:27:1d:5e:00:0f:17:09:21:
         be:dd:cb:df:3a:e3:a6:e7:08:26:05:d0:66:11:91:b5:3a:3f:
         c8:de:63:04:93:95:ec:52:f2:a6:fb:1e:73:f3:de:56:f7:e7:
         6d:f2:ef:d3:3a:5b:8e:7c:36:cd:10:1f:d3:84:bb:70:f2:f5:
         06:fe:83:64:6f:1b:89:05:7a:fa:14:71:79:83:af:b7:99:e1:
         eb:12:aa:85:83:f7:da:fa:53:56:2d:5a:49:80:fa:83:e9:a5:
         8a:d9:3a:18:00:02:98:83:f7:ac:e8:46:de:4c:84:de:42:67:
         c7:a0:2f:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTsB903R2T06SwuErh5nhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWRkM2M3MjczZDlhYjM2NGEzMTRkYTQ4MWU1YmE1MWY4
NDI5NmYwHhcNMjUwODEyMjIwMjUyWhcNMjUwODEzMjIwMjUyWjAzMTEwLwYDVQQD
EyhmZGU3NmMxNWMwODVkYjBmYjM3ZmM3ZTc0ODgyNDY1MmJiYjRjMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwWqh1S2jtLs0lxN2plCUoXoMKbe
7EzF2yS02KjdIks58eg4vG4bebs4M7PYM+sMw/ABeHW6eSUmX3rplNy9Pw1DPkyg
oWJ6VMKThbpsYs2usjlaMvMd9CTWjEW4BMreQPkgHZ8NoRiD2Wr5fagmCh9uxDn+
eDmoan++CxfZv8dMVrgTr3Wpu8StQallXhhyKULSEceO3fyHlVgNlsEzzIdyRRXG
+PET4PCN0jjOBjXaf9rIZWmdAmA6/+XF8I3BAJrmtarCfguJrOY4AVg2bf7Ao21p
pc2W98pzJ9vIRkb/CWQz7irpgBCJ5BKQEv2hG2xsoe1s2Hr7oUVz5CW3hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3nbBXAhdsPs3/H50iCRlK7tML/MB8GA1UdIwQY
MBaAFDrt08cnPZqzZKMU2kgeW6UfhClvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3UzVHh5Yzltck5rb3hUYVNCNWJwUi1FS1c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82MmM5MmEtNWMyMy00OGQ3LWJjYTIt
NjNmMDQwOTVhNGM0LzEvT3UzVHh5Yzltck5rb3hUYVNCNWJwUi1FS1c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82MmM5MmEtNWMyMy00OGQ3LWJjYTItNjNmMDQwOTVhNGM0
LzEvT3UzVHh5Yzltck5rb3hUYVNCNWJwUi1FS1c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1XBpKgr
Gbfq6u/aljem8mkecT7+iZg8v8qek2vT0Mq11Wnd5eCafi6rPSfqkzx1t9z9EAig
CBNZpZfWMbodE9N2yJoIuhNdji66Bxekr/LZQmtZ6nZqDW3SBOkFlYdfi0is9k8J
5205XboT4dwmSM0SbdPzBm3dYWOahUd1GtKlbnXfql6TVicdXgAPFwkhvt3L3zrj
pucIJgXQZhGRtTo/yN5jBJOV7FLypvsec/PeVvfnbfLv0zpbjnw2zRAf04S7cPL1
Bv6DZG8biQV6+hRxeYOvt5nh6xKqhYP32vpTVi1aSYD6g+mlitk6GAACmIP3rOhG
3kyE3kJnx6AvBw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:57 2025 by rpki-client