Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File:                     0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier:          SzWGqUzMzVTND08eDs4w/LVY7wFGbVl4Gd2LPR23aM0=
Subject key identifier:   90:5C:4F:C3:28:D7:6E:9D:51:95:B0:3A:DF:23:0A:DA:6E:AB:40:BD
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer:       /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial:       0198A084427EC95E440B19315F657BFCCF09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number:          162F
Signing time:             Tue 12 Aug 2025 23:01:18 +0000
Manifest this update:     Tue 12 Aug 2025 23:01:18 +0000
Manifest next update:     Wed 13 Aug 2025 23:01:18 +0000
Files and hashes:         1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: 0IdJlUZ6tsFYnQ0huP9+a38vwELjg0N3z4hBvX54o7g=)
                          2: juIbMy-ZOag5FvgvGV0o5yTeEN8.roa (hash: +hUGE34YMtW1+houvKxGq1sllVhVFyMUSU1KkXLa0fI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:84:42:7e:c9:5e:44:0b:19:31:5f:65:7b:fc:cf:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
        Validity
            Not Before: Aug 12 23:01:18 2025 GMT
            Not After : Aug 13 23:01:18 2025 GMT
        Subject: CN=905c4fc328d76e9d5195b03adf230ada6eab40bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:92:b1:fd:d4:a2:67:2f:6b:2b:c1:3f:e7:
                    98:24:f3:46:98:9a:ff:e9:dc:32:23:6b:3e:ea:8f:
                    d1:03:62:32:9f:23:74:7d:1a:ad:0f:9d:fd:52:15:
                    c4:f9:ad:85:c7:08:03:2e:fc:ac:0e:77:87:1b:51:
                    6e:c0:a3:59:80:af:f1:88:96:bf:1f:f6:2e:5e:06:
                    45:37:0f:12:22:5f:91:3a:db:ce:b4:78:b4:17:60:
                    a9:ba:6b:d1:84:fc:65:48:e3:04:b1:1a:50:19:9d:
                    83:06:a7:93:9b:8e:a8:cf:79:b2:4e:1f:47:30:eb:
                    6a:00:14:1a:79:ed:7e:55:60:4d:46:dd:57:4f:36:
                    60:48:51:c5:64:bb:d1:60:0a:97:4e:2a:93:bf:52:
                    42:71:e8:8a:0b:98:02:5f:23:3c:29:d2:e0:62:d8:
                    39:05:67:de:ac:b2:01:9f:47:e9:79:63:d8:31:5f:
                    3c:a6:96:0e:c8:42:61:b2:64:1b:74:41:97:1e:a5:
                    21:c4:25:56:96:0d:32:28:6b:34:fa:23:80:ad:8d:
                    7f:fe:66:15:35:4c:d5:f0:e5:0d:8e:db:31:7a:ee:
                    94:fe:6e:a4:32:a4:ad:28:29:0a:a0:89:d0:bc:f7:
                    ff:3e:fa:28:d6:19:22:94:5d:1a:df:2c:3c:e8:ed:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5C:4F:C3:28:D7:6E:9D:51:95:B0:3A:DF:23:0A:DA:6E:AB:40:BD
            X509v3 Authority Key Identifier:
                keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ca:fb:7d:f6:d1:43:1f:39:f4:82:90:42:5d:54:9f:8f:01:
         82:a5:4f:3f:c9:c4:97:2d:dd:d4:85:0f:be:af:65:4f:c5:3c:
         92:ec:e7:93:2c:dc:9c:0a:4d:9e:75:76:9a:dc:2f:bf:68:04:
         ae:8e:c1:fd:eb:f4:5b:b4:7e:87:28:9c:a4:63:b5:58:a7:f7:
         40:e4:1a:5e:ce:fa:cd:8e:52:6b:10:01:00:fa:a1:a6:45:85:
         26:84:2b:d0:94:9c:32:fd:4c:46:f0:2b:af:bd:0e:e6:de:6c:
         e3:27:a5:73:ea:9c:46:47:3d:0b:58:32:7d:c9:55:77:ab:3e:
         12:ad:70:41:28:ff:ea:ab:7b:34:3e:38:c8:37:04:8f:29:91:
         e7:2f:5e:73:e9:47:1d:d9:4f:36:f5:97:66:83:fe:ac:09:d2:
         45:81:1e:89:d4:f9:2f:a3:4c:ec:61:75:ab:72:48:38:c1:80:
         13:77:2e:da:76:f9:a1:f1:e2:8d:ea:00:bd:98:8e:9b:2d:aa:
         a1:1a:02:26:98:bf:11:74:b2:5b:ee:db:c8:e2:9d:54:d9:6a:
         fd:b5:55:af:b0:14:ba:4f:4c:57:8d:55:87:a2:0b:05:b8:51:
         c8:4b:3c:62:bb:21:3a:fe:17:33:01:d7:f3:fe:3e:7e:cb:f1:
         fa:45:1a:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZighEJ+yV5ECxkxX2V7/M8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmFhYjliZDhjNjlkMDdiNjUwMTE0NzU0M2RmNzQyNzBh
MzNhMjEwHhcNMjUwODEyMjMwMTE4WhcNMjUwODEzMjMwMTE4WjAzMTEwLwYDVQQD
Eyg5MDVjNGZjMzI4ZDc2ZTlkNTE5NWIwM2FkZjIzMGFkYTZlYWI0MGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5OSsf3UomcvayvBP+eYJPNGmJr/
6dwyI2s+6o/RA2IynyN0fRqtD539UhXE+a2FxwgDLvysDneHG1FuwKNZgK/xiJa/
H/YuXgZFNw8SIl+ROtvOtHi0F2CpumvRhPxlSOMEsRpQGZ2DBqeTm46oz3myTh9H
MOtqABQaee1+VWBNRt1XTzZgSFHFZLvRYAqXTiqTv1JCceiKC5gCXyM8KdLgYtg5
BWferLIBn0fpeWPYMV88ppYOyEJhsmQbdEGXHqUhxCVWlg0yKGs0+iOArY1//mYV
NUzV8OUNjtsxeu6U/m6kMqStKCkKoInQvPf/Pvoo1hkilF0a3yw86O3qHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBcT8Mo126dUZWwOt8jCtpuq0C9MB8GA1UdIwQY
MBaAFNC6q5vYxp0HtlARR1Q990JwozohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUt
OWJkNWQ1MTM4MDU5LzEvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUtOWJkNWQ1MTM4MDU5
LzEvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMr7ffbR
Qx859IKQQl1Un48BgqVPP8nEly3d1IUPvq9lT8U8kuznkyzcnApNnnV2mtwvv2gE
ro7B/ev0W7R+hyicpGO1WKf3QOQaXs76zY5SaxABAPqhpkWFJoQr0JScMv1MRvAr
r70O5t5s4yelc+qcRkc9C1gyfclVd6s+Eq1wQSj/6qt7ND44yDcEjymR5y9ec+lH
HdlPNvWXZoP+rAnSRYEeidT5L6NM7GF1q3JIOMGAE3cu2nb5ofHijeoAvZiOmy2q
oRoCJpi/EXSyW+7byOKdVNlq/bVVr7AUuk9MV41Vh6ILBbhRyEs8YrshOv4XMwHX
8/4+fsvx+kUaXA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:27:44 2025 by rpki-client