Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
File:                     u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json)
Hash identifier:          bFzM8LEtENoawYGCh1l7cWUGxrxV7ArvaXsPn4F5aJA=
Subject key identifier:   A2:52:1A:0A:15:98:A8:CE:6A:96:C4:7B:4B:CC:09:F4:60:61:5A:14
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Certificate issuer:       /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial:       019881689C31751D6A535087A8DA58E93F46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 22:02:53 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:53 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:53 +0000
Files and hashes:         1: SQLnF00Areuw5taMbfkFtdu1wjU.roa (hash: 5CPinLFNfDrIVGYwg0jIgmWM06cJ2LCZHAkJ/JRfIwc=)
                          2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: KDvAaSfkrQ4C+An9i6Cj6p8Uh1xWLrYzc7hSEv4y7CM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:9c:31:75:1d:6a:53:50:87:a8:da:58:e9:3f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
        Validity
            Not Before: Aug  6 22:02:53 2025 GMT
            Not After : Aug  7 22:02:53 2025 GMT
        Subject: CN=a2521a0a1598a8ce6a96c47b4bcc09f460615a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:09:38:02:cd:d5:b6:2b:84:cc:76:27:9d:5b:
                    b2:15:58:d9:bb:ae:46:30:7a:4e:55:31:2c:9a:c5:
                    01:48:f1:84:d7:90:0a:55:48:0d:41:ad:83:19:4d:
                    d7:34:6b:01:30:c3:11:3b:38:db:67:59:99:3a:e5:
                    98:2c:42:30:9a:59:b5:2b:0b:4f:51:1b:7c:40:8e:
                    f2:1a:0c:39:c6:61:de:8d:f8:c2:09:6e:35:e5:43:
                    48:39:79:83:04:21:f7:dc:78:75:ad:e3:4a:77:20:
                    e4:01:c0:35:3e:ba:87:7b:87:33:25:9a:10:68:65:
                    64:38:22:64:5a:8a:11:12:24:e6:c5:d7:15:1b:df:
                    1c:30:d7:9d:f9:1c:b0:38:f6:66:a1:3d:16:78:b4:
                    cb:cd:97:18:63:ba:1e:c7:74:a9:b6:a0:c8:74:dc:
                    5c:ed:e8:a4:07:df:9e:15:08:bb:c5:bf:75:01:64:
                    08:cc:11:d9:07:5c:b2:6c:b8:ed:90:d4:7d:c9:f5:
                    17:b5:d9:d8:88:b6:5b:91:6e:9a:7e:91:a1:35:4c:
                    5e:a2:61:94:df:21:52:1c:59:01:b9:fd:c4:20:21:
                    4e:88:9c:52:cf:23:ae:d5:19:6a:fa:d4:4a:6a:f6:
                    06:54:e5:4f:2c:23:4f:21:e9:2b:4e:f4:0b:6b:76:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:52:1A:0A:15:98:A8:CE:6A:96:C4:7B:4B:CC:09:F4:60:61:5A:14
            X509v3 Authority Key Identifier:
                keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:36:b6:72:60:15:03:0b:38:4b:8b:fd:01:73:8e:73:b3:1a:
         26:6d:fa:7f:b6:95:01:84:05:ec:5d:e2:af:60:fb:f0:e4:8b:
         6e:87:d8:09:e7:37:65:9a:c8:f4:81:6c:ac:b6:e9:a0:bf:6f:
         98:58:e2:e2:df:74:36:f3:de:42:4d:4d:04:6f:ec:9c:4d:95:
         18:58:66:f4:af:23:a9:44:22:b2:d3:38:82:17:9d:e6:aa:6e:
         2b:1f:da:5a:e6:52:46:ee:6f:7e:16:59:96:ba:dc:5e:72:6f:
         fd:fe:13:f2:3c:11:04:46:96:49:a6:ea:33:81:34:f0:15:33:
         6f:e3:17:62:d8:79:61:27:ca:c5:90:11:7b:62:f6:8d:fc:57:
         64:28:aa:b9:a9:12:1c:46:8f:e9:24:a5:1c:0c:3d:88:9d:3c:
         22:41:a2:d4:6d:4a:48:e1:e8:08:e1:26:a2:6a:78:9e:5b:b5:
         9b:8b:ad:ae:71:93:62:01:57:0f:d0:16:9b:6d:97:21:dd:dc:
         52:27:25:da:9d:ab:42:a3:f8:9e:ed:51:0a:85:e8:61:8f:8c:
         22:4d:1d:b9:b3:a3:3d:43:28:58:61:aa:b5:17:16:77:04:f5:
         28:ae:60:ea:ba:da:98:2c:bc:ba:d1:69:85:61:cb:a1:67:39:
         ae:22:1d:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaJwxdR1qU1CHqNpY6T9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiN2QzNzljMDRmODE3NWIzNWVmNjczZDc2YzY4ZTQ0Yzcw
ZTgzM2YwHhcNMjUwODA2MjIwMjUzWhcNMjUwODA3MjIwMjUzWjAzMTEwLwYDVQQD
EyhhMjUyMWEwYTE1OThhOGNlNmE5NmM0N2I0YmNjMDlmNDYwNjE1YTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAk4As3VtiuEzHYnnVuyFVjZu65G
MHpOVTEsmsUBSPGE15AKVUgNQa2DGU3XNGsBMMMROzjbZ1mZOuWYLEIwmlm1KwtP
URt8QI7yGgw5xmHejfjCCW415UNIOXmDBCH33Hh1reNKdyDkAcA1PrqHe4czJZoQ
aGVkOCJkWooREiTmxdcVG98cMNed+RywOPZmoT0WeLTLzZcYY7oex3SptqDIdNxc
7eikB9+eFQi7xb91AWQIzBHZB1yybLjtkNR9yfUXtdnYiLZbkW6afpGhNUxeomGU
3yFSHFkBuf3EICFOiJxSzyOu1Rlq+tRKavYGVOVPLCNPIekrTvQLa3akaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJSGgoVmKjOapbEe0vMCfRgYVoUMB8GA1UdIwQY
MBaAFLt9N5wE+BdbNe9nPXbGjkTHDoM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTMwM25BVDRGMXMxNzJjOWRzYU9STWNPZ3o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85ZTBmNWUtODE0MS00M2M5LThmNDQt
MzNlYmFiMjRiYmIzLzEvdTMwM25BVDRGMXMxNzJjOWRzYU9STWNPZ3o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85ZTBmNWUtODE0MS00M2M5LThmNDQtMzNlYmFiMjRiYmIz
LzEvdTMwM25BVDRGMXMxNzJjOWRzYU9STWNPZ3o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApja2cmAV
Aws4S4v9AXOOc7MaJm36f7aVAYQF7F3ir2D78OSLbofYCec3ZZrI9IFsrLbpoL9v
mFji4t90NvPeQk1NBG/snE2VGFhm9K8jqUQistM4ghed5qpuKx/aWuZSRu5vfhZZ
lrrcXnJv/f4T8jwRBEaWSabqM4E08BUzb+MXYth5YSfKxZARe2L2jfxXZCiquakS
HEaP6SSlHAw9iJ08IkGi1G1KSOHoCOEmomp4nlu1m4utrnGTYgFXD9AWm22XId3c
Uicl2p2rQqP4nu1RCoXoYY+MIk0dubOjPUMoWGGqtRcWdwT1KK5g6rramCy8utFp
hWHLoWc5riIdpg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:19:45 2025 by rpki-client