Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
File:                     IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json)
Hash identifier:          J7HQcWsdMjZq3BDhVcDn1kryapXXHsEB6pnjwPfHIJU=
Subject key identifier:   65:BF:84:4E:EE:8F:1D:3B:56:C7:82:BF:E9:F5:AB:BE:FB:F2:3D:5E
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Certificate issuer:       /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial:       019880F91952E3FD616C73B360F7BB2EF38B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
Manifest number:          162C
Signing time:             Wed 06 Aug 2025 20:01:05 +0000
Manifest this update:     Wed 06 Aug 2025 20:01:05 +0000
Manifest next update:     Thu 07 Aug 2025 20:01:05 +0000
Files and hashes:         1: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: JKyTW2QMZisiIzUasLnBhztpOXo01ZJUR/uhUqk7gVk=)
                          2: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=)
                          3: LLDN_VlIX6uSYmTBHX9Ec_R1T-4.roa (hash: hv1fz/RMOjKKf9RN0y/htAasmo3HpIuTxmY1YS1UNXM=)
                          4: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=)
                          5: NlD60E7lLlgKw-PAVTBiBt31h5g.roa (hash: Be7pkoxW5md2fMzfMMkXfWt3s8AQ9PfjTdxxsGL6hhM=)
                          6: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=)
                          7: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=)
                          8: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=)
                          9: eOgvquigvzDPj-8dhQt95xkui_E.roa (hash: zEpy4lJB9tJ5de8zvRSwkcXfAVk3pin2iihLqa8DHd8=)
                          10: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f9:19:52:e3:fd:61:6c:73:b3:60:f7:bb:2e:f3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
        Validity
            Not Before: Aug  6 20:01:05 2025 GMT
            Not After : Aug  7 20:01:05 2025 GMT
        Subject: CN=65bf844eee8f1d3b56c782bfe9f5abbefbf23d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:40:cf:3f:21:5c:55:99:f5:df:e6:72:fa:f9:
                    ad:3a:64:3d:b0:53:52:b9:64:d4:d2:27:65:d9:d9:
                    ff:4d:bc:b3:fe:51:b3:35:77:7a:4c:3f:2a:6c:3e:
                    d9:ae:b0:b6:36:1f:89:86:fd:68:fb:e4:d2:6a:83:
                    a8:f5:14:af:7e:bc:46:cd:f0:5a:7b:9d:e2:4f:ba:
                    9a:ea:ca:68:c4:74:73:16:56:92:02:32:8a:d3:43:
                    dc:d9:6f:cd:54:37:98:f2:6c:37:80:a1:f2:42:6e:
                    7e:2b:58:ef:d9:95:a8:97:1a:85:3b:ec:48:6f:a7:
                    f4:c3:01:b9:cf:d6:88:f9:23:a5:55:01:be:98:2d:
                    63:5b:ac:1c:af:ae:b8:ab:93:a1:ad:43:24:3b:cc:
                    8c:3d:b1:cc:98:c7:88:40:e3:72:52:7f:eb:14:39:
                    e9:50:10:74:16:94:fb:d3:bf:b7:d5:a9:24:21:41:
                    2c:bb:12:47:39:dd:82:47:86:3b:df:e8:73:6f:02:
                    01:ab:dc:66:3a:4a:50:6b:75:59:11:2d:50:5b:db:
                    04:ad:44:36:17:6a:1a:4d:c7:7a:27:20:04:ec:99:
                    ad:ac:c7:ee:a2:cd:d5:40:6e:e2:2b:0b:ec:ea:05:
                    46:78:a4:1c:f5:89:c5:50:d4:97:59:17:31:60:9f:
                    c3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BF:84:4E:EE:8F:1D:3B:56:C7:82:BF:E9:F5:AB:BE:FB:F2:3D:5E
            X509v3 Authority Key Identifier:
                keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c1:2b:91:f6:c3:51:73:34:4f:5b:b4:06:76:2c:4f:26:93:
         4d:07:0e:ce:e8:89:7c:81:0a:5b:39:e6:a7:3f:01:a7:ea:60:
         a1:b2:2a:fe:e0:7d:51:5b:9e:74:be:e3:33:73:c0:34:1f:1b:
         aa:04:95:68:4f:7a:71:4d:38:7a:b8:f4:7b:49:a1:4f:53:60:
         8e:3c:83:37:7a:a6:eb:84:17:b7:d8:74:9e:a4:ec:e2:f9:e0:
         a2:a6:d4:47:fa:11:46:6e:0d:80:c7:73:da:3d:c8:27:d0:76:
         ca:90:d9:34:1c:35:41:0a:03:86:20:b0:ff:1a:c5:d4:25:bf:
         7b:61:06:60:75:74:50:64:83:66:93:17:f8:65:37:a1:9d:61:
         12:2d:0a:d4:a7:af:ec:9f:3e:01:32:79:89:84:2b:bb:b0:51:
         18:aa:b9:18:a5:ed:d5:37:25:5b:10:d2:6c:de:41:34:87:8f:
         6f:93:25:2e:64:d6:59:38:1f:d3:c5:aa:f5:43:50:30:4b:01:
         ce:b6:f4:f7:50:7c:19:e8:75:ad:dd:b7:19:e6:b8:eb:2c:30:
         88:57:c9:59:d6:a1:eb:10:f6:fd:22:60:8e:e9:f9:3b:a0:91:
         47:16:83:29:f3:ac:ed:7f:af:ab:ad:9c:74:01:95:30:a6:a2:
         d9:f7:c9:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiA+RlS4/1hbHOzYPe7LvOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5
MjFlYzMwHhcNMjUwODA2MjAwMTA1WhcNMjUwODA3MjAwMTA1WjAzMTEwLwYDVQQD
Eyg2NWJmODQ0ZWVlOGYxZDNiNTZjNzgyYmZlOWY1YWJiZWZiZjIzZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00DPPyFcVZn13+Zy+vmtOmQ9sFNS
uWTU0idl2dn/Tbyz/lGzNXd6TD8qbD7ZrrC2Nh+Jhv1o++TSaoOo9RSvfrxGzfBa
e53iT7qa6spoxHRzFlaSAjKK00Pc2W/NVDeY8mw3gKHyQm5+K1jv2ZWolxqFO+xI
b6f0wwG5z9aI+SOlVQG+mC1jW6wcr664q5OhrUMkO8yMPbHMmMeIQONyUn/rFDnp
UBB0FpT707+31akkIUEsuxJHOd2CR4Y73+hzbwIBq9xmOkpQa3VZES1QW9sErUQ2
F2oaTcd6JyAE7JmtrMfuos3VQG7iKwvs6gVGeKQc9YnFUNSXWRcxYJ/DFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGW/hE7ujx07VseCv+n1q7778j1eMB8GA1UdIwQY
MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt
YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy
LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcErkfbD
UXM0T1u0BnYsTyaTTQcOzuiJfIEKWznmpz8Bp+pgobIq/uB9UVuedL7jM3PANB8b
qgSVaE96cU04erj0e0mhT1NgjjyDN3qm64QXt9h0nqTs4vngoqbUR/oRRm4NgMdz
2j3IJ9B2ypDZNBw1QQoDhiCw/xrF1CW/e2EGYHV0UGSDZpMX+GU3oZ1hEi0K1Kev
7J8+ATJ5iYQru7BRGKq5GKXt1TclWxDSbN5BNIePb5MlLmTWWTgf08Wq9UNQMEsB
zrb091B8Geh1rd23Gea46ywwiFfJWdah6xD2/SJgjun5O6CRRxaDKfOs7X+vq62c
dAGVMKai2ffJrQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:03:08 2025 by rpki-client