Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
File:                     8Q057dsAjRuJ35dBlg2_IET2V_s.mft (raw, json)
Hash identifier:          JrfgOgL1oLFt2vARuK7a4+jANFkW7+4Ugq150nRPPH8=
Subject key identifier:   C4:AC:FD:A1:02:D8:0B:8A:9B:40:16:82:EA:54:2D:2B:AC:F6:64:7A
Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
Certificate issuer:       /CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Certificate serial:       019873064CA978C3CF1C0CBF662E75834D56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
Manifest number:          161D
Signing time:             Mon 04 Aug 2025 03:00:49 +0000
Manifest this update:     Mon 04 Aug 2025 03:00:49 +0000
Manifest next update:     Tue 05 Aug 2025 03:00:49 +0000
Files and hashes:         1: 8Q057dsAjRuJ35dBlg2_IET2V_s.crl (hash: nEUZSXW5cO/hKbZkA8j76mn1GsE/TIQ9G2aMP4zpYbw=)
                          2: PKwMXWtc8zi6lG0zPr4Lt6yvauU.roa (hash: b1FZV9Y7SIyLBl239X/9J22IOe+GTQHWzBo3nom91OY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:4c:a9:78:c3:cf:1c:0c:bf:66:2e:75:83:4d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb
        Validity
            Not Before: Aug  4 03:00:49 2025 GMT
            Not After : Aug  5 03:00:49 2025 GMT
        Subject: CN=c4acfda102d80b8a9b401682ea542d2bacf6647a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:27:dc:17:12:42:c3:ca:cb:25:3c:72:14:
                    04:7c:9c:82:56:a1:94:4c:4b:e5:97:e5:da:6d:cb:
                    60:e1:ca:02:69:4d:ae:1f:7b:b2:e2:db:06:3c:2f:
                    c3:4f:34:e1:a8:3b:77:7a:6d:36:1e:80:33:86:ad:
                    13:68:84:aa:2c:d3:9d:94:c9:1f:f1:e3:83:e7:74:
                    64:88:9a:68:c4:a2:d0:f0:57:29:81:0f:17:2f:3c:
                    16:2a:25:d1:6d:d7:ea:88:c1:cd:6f:ba:e5:d0:67:
                    b0:e9:4d:93:0a:9a:2a:da:15:e2:8a:07:02:6e:cf:
                    5d:4a:ef:60:f2:5c:49:8f:c4:52:1e:30:67:93:ec:
                    d9:f9:bb:f1:79:b6:94:e1:82:90:07:76:e6:21:13:
                    e4:15:ee:82:65:fe:fe:f7:1d:28:e6:4c:6f:bb:d4:
                    4a:bb:6d:dd:94:37:4b:da:1f:a4:45:49:d6:b8:f1:
                    24:09:03:b3:c8:a5:35:7c:ba:e2:3f:bc:8c:de:ff:
                    bb:29:9f:66:75:4a:f8:2f:ae:35:73:c6:74:0a:a5:
                    68:47:a3:47:0d:94:97:2d:4e:a4:ff:d2:c2:0f:3b:
                    a9:d9:2f:4d:af:e7:62:3c:be:59:14:7b:d6:39:23:
                    7e:e0:9e:5d:a0:a1:2f:d2:55:42:26:1f:70:ab:0c:
                    fb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AC:FD:A1:02:D8:0B:8A:9B:40:16:82:EA:54:2D:2B:AC:F6:64:7A
            X509v3 Authority Key Identifier:
                keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:18:ae:f8:ab:2d:c8:06:e6:d3:54:86:db:83:9c:13:15:2b:
         04:b5:01:48:40:66:6c:2d:be:00:d0:21:66:a8:f2:81:7b:cc:
         43:4c:12:22:7e:0f:d1:84:7e:30:a3:3b:97:55:3f:7a:4e:bd:
         1b:0b:d6:aa:34:8b:9b:90:f2:e0:b9:60:62:2f:1d:97:ee:b0:
         63:34:94:0f:5e:67:d0:89:7c:5c:79:36:c3:ed:de:ba:27:e3:
         cd:0a:da:85:a3:f3:49:64:cc:8b:ac:74:99:aa:5d:b6:75:6e:
         24:fe:bc:84:23:88:e1:d9:ec:a6:64:97:e0:d8:33:fa:c6:03:
         6d:32:b2:1c:c9:eb:ce:d9:a8:48:ea:ac:1f:1f:42:e1:9a:a9:
         ed:80:54:c8:49:70:ef:b9:3b:5f:83:7d:fd:10:46:cf:91:d7:
         f5:e1:9a:d6:45:f6:8b:b3:53:68:62:1c:d8:b1:ce:cf:3e:30:
         52:3f:d8:83:8f:97:86:5b:7a:bf:47:1b:c6:37:ce:b8:80:58:
         aa:08:14:9f:a5:0c:19:e8:6b:98:42:1e:6c:c0:db:f5:65:2b:
         50:eb:80:8f:13:97:a9:bb:de:18:e1:6d:90:03:a7:fb:62:cc:
         41:2d:06:00:d7:8c:e8:70:51:aa:72:2f:15:fe:54:fd:4b:71:
         fe:96:8a:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBkypeMPPHAy/Zi51g01WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMGQzOWVkZGIwMDhkMWI4OWRmOTc0MTk2MGRiZjIwNDRm
NjU3ZmIwHhcNMjUwODA0MDMwMDQ5WhcNMjUwODA1MDMwMDQ5WjAzMTEwLwYDVQQD
EyhjNGFjZmRhMTAyZDgwYjhhOWI0MDE2ODJlYTU0MmQyYmFjZjY2NDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfUn3BcSQsPKyyU8chQEfJyCVqGU
TEvll+Xabctg4coCaU2uH3uy4tsGPC/DTzThqDt3em02HoAzhq0TaISqLNOdlMkf
8eOD53RkiJpoxKLQ8FcpgQ8XLzwWKiXRbdfqiMHNb7rl0Gew6U2TCpoq2hXiigcC
bs9dSu9g8lxJj8RSHjBnk+zZ+bvxebaU4YKQB3bmIRPkFe6CZf7+9x0o5kxvu9RK
u23dlDdL2h+kRUnWuPEkCQOzyKU1fLriP7yM3v+7KZ9mdUr4L641c8Z0CqVoR6NH
DZSXLU6k/9LCDzup2S9Nr+diPL5ZFHvWOSN+4J5doKEv0lVCJh9wqwz76wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSs/aEC2AuKm0AWgupULSus9mR6MB8GA1UdIwQY
MBaAFPENOe3bAI0bid+XQZYNvyBE9lf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUt
ZjU2MmI4OTc0ZDhiLzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUtZjU2MmI4OTc0ZDhi
LzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRiu+Kst
yAbm01SG24OcExUrBLUBSEBmbC2+ANAhZqjygXvMQ0wSIn4P0YR+MKM7l1U/ek69
GwvWqjSLm5Dy4LlgYi8dl+6wYzSUD15n0Il8XHk2w+3euifjzQrahaPzSWTMi6x0
mapdtnVuJP68hCOI4dnspmSX4Ngz+sYDbTKyHMnrztmoSOqsHx9C4Zqp7YBUyElw
77k7X4N9/RBGz5HX9eGa1kX2i7NTaGIc2LHOzz4wUj/Yg4+Xhlt6v0cbxjfOuIBY
qggUn6UMGehrmEIebMDb9WUrUOuAjxOXqbveGOFtkAOn+2LMQS0GANeM6HBRqnIv
Ff5U/Utx/paK+A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:49 2025 by rpki-client