Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
File:                     96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json)
Hash identifier:          FNhru8A7hEeSjkSFbm1DJRlQ/dtLz3kbodog5KJzPNc=
Subject key identifier:   BA:09:25:EC:B2:B4:7F:FA:44:B9:D8:8C:3B:9C:F2:D5:F3:42:00:C2
Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
Certificate issuer:       /CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Certificate serial:       0198A04F0669492560D0A68733F0ED0F653C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
Manifest number:          162E
Signing time:             Tue 12 Aug 2025 22:03:10 +0000
Manifest this update:     Tue 12 Aug 2025 22:03:10 +0000
Manifest next update:     Wed 13 Aug 2025 22:03:10 +0000
Files and hashes:         1: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: PxjCCLUPvws4DMLfoboA0Qk/9epZiNMLf54vDh7YIls=)
                          2: T-ndwyW2lzOqFwfi0HlwvxGN6hA.roa (hash: SwBUiR0PUxgXxZT0VaCgm/zNAN819Fxo/yeUtptTXzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4f:06:69:49:25:60:d0:a6:87:33:f0:ed:0f:65:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def
        Validity
            Not Before: Aug 12 22:03:10 2025 GMT
            Not After : Aug 13 22:03:10 2025 GMT
        Subject: CN=ba0925ecb2b47ffa44b9d88c3b9cf2d5f34200c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:99:05:b7:6a:45:a2:97:b4:97:46:f3:d7:0e:
                    fc:98:ff:48:6a:34:f4:b5:51:e8:a3:f9:ab:02:a6:
                    10:ec:1f:86:e3:7d:d5:ed:f8:b3:03:6c:91:ca:22:
                    2b:64:5c:16:07:77:e0:00:10:45:c6:c5:fc:b7:73:
                    a2:15:1e:2a:e8:f0:25:93:18:0c:0d:cf:4d:0e:65:
                    ce:f7:d6:13:0b:64:eb:5a:bd:38:8e:e1:e4:64:74:
                    0a:52:bc:df:d5:af:97:3a:d3:0f:df:14:c4:c9:59:
                    99:d0:d6:4e:5d:96:0b:45:0c:21:d3:27:7a:05:8c:
                    34:ce:60:8b:be:83:2d:45:a1:ac:61:97:b2:01:8a:
                    d1:ad:d7:37:ef:7e:d8:5e:67:27:b9:4e:b3:c9:4e:
                    c9:48:cc:1f:fd:1f:62:16:fd:9c:57:4f:50:7e:24:
                    cf:70:7b:da:95:59:e8:32:1b:50:b2:fb:17:a7:28:
                    74:d2:47:67:6d:9f:d1:74:4a:1e:b0:aa:71:eb:45:
                    93:56:45:f2:75:e7:1f:44:aa:fd:d2:cc:4b:0a:46:
                    31:89:8b:18:93:f7:9c:28:68:59:9a:2d:0e:55:a9:
                    10:69:27:1d:79:a6:e8:9f:b3:35:3a:d6:90:28:a4:
                    4f:14:22:9a:07:ad:76:4e:4f:b3:76:e8:eb:60:e1:
                    35:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:09:25:EC:B2:B4:7F:FA:44:B9:D8:8C:3B:9C:F2:D5:F3:42:00:C2
            X509v3 Authority Key Identifier:
                keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:0c:62:96:5c:78:e4:84:87:de:2a:79:e9:f3:e9:bd:c4:b4:
         c9:eb:8e:f6:71:0e:b4:c9:3d:86:a7:ac:0b:3c:9d:ea:27:09:
         f4:5d:a9:f3:c2:54:89:29:89:63:44:ae:62:83:0f:b4:ed:53:
         82:d6:46:49:73:75:2e:9e:bc:87:15:db:a9:fb:b7:e3:d0:2b:
         39:d0:05:4a:ef:54:8e:87:f2:2e:9a:86:ca:7e:fe:2a:9a:6b:
         bc:9e:ca:e8:cf:10:f1:b9:dc:91:2e:f7:0a:6e:f8:d0:33:4a:
         69:80:c8:6c:c4:81:67:d0:8c:eb:bd:b2:6a:fb:ac:5c:d3:f3:
         d2:01:85:d5:46:0f:d2:69:c7:18:8d:9b:0f:78:8f:7c:11:d7:
         5f:f5:09:f0:34:96:91:10:e6:78:b5:f5:c2:44:92:72:aa:f3:
         ce:de:d6:2b:5f:b5:06:4f:bb:f2:22:5f:e7:5a:4c:a6:4f:29:
         d4:c1:fd:b6:94:0c:86:52:84:8a:e8:8b:ba:b5:c9:dc:e7:b9:
         02:7b:29:a5:d1:81:ef:9f:95:3f:2f:75:20:b0:7b:ec:33:6e:
         23:b5:b3:3d:6a:73:bc:9a:b0:4c:38:06:47:ab:fa:54:ca:a6:
         e5:79:c8:ed:a4:98:38:8d:30:da:24:53:19:52:a4:84:72:99:
         6d:5c:0f:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTwZpSSVg0KaHM/DtD2U8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YTU4ZDFiMTJhZWI1NTgzMzI4ZGRhNTI1ZDA2OTg2NzRi
YjFkZWYwHhcNMjUwODEyMjIwMzEwWhcNMjUwODEzMjIwMzEwWjAzMTEwLwYDVQQD
EyhiYTA5MjVlY2IyYjQ3ZmZhNDRiOWQ4OGMzYjljZjJkNWYzNDIwMGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5kFt2pFope0l0bz1w78mP9IajT0
tVHoo/mrAqYQ7B+G433V7fizA2yRyiIrZFwWB3fgABBFxsX8t3OiFR4q6PAlkxgM
Dc9NDmXO99YTC2TrWr04juHkZHQKUrzf1a+XOtMP3xTEyVmZ0NZOXZYLRQwh0yd6
BYw0zmCLvoMtRaGsYZeyAYrRrdc3737YXmcnuU6zyU7JSMwf/R9iFv2cV09QfiTP
cHvalVnoMhtQsvsXpyh00kdnbZ/RdEoesKpx60WTVkXydecfRKr90sxLCkYxiYsY
k/ecKGhZmi0OVakQaScdeabon7M1OtaQKKRPFCKaB612Tk+zdujrYOE1oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoJJeyytH/6RLnYjDuc8tXzQgDCMB8GA1UdIwQY
MBaAFPeljRsSrrVYMyjdpSXQaYZ0ux3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAt
YThkMzgzODA1MmQwLzEvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAtYThkMzgzODA1MmQw
LzEvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgxillx4
5ISH3ip56fPpvcS0yeuO9nEOtMk9hqesCzyd6icJ9F2p88JUiSmJY0SuYoMPtO1T
gtZGSXN1Lp68hxXbqfu349ArOdAFSu9UjofyLpqGyn7+KpprvJ7K6M8Q8bnckS73
Cm740DNKaYDIbMSBZ9CM672yavusXNPz0gGF1UYP0mnHGI2bD3iPfBHXX/UJ8DSW
kRDmeLX1wkSScqrzzt7WK1+1Bk+78iJf51pMpk8p1MH9tpQMhlKEiuiLurXJ3Oe5
AnsppdGB75+VPy91ILB77DNuI7WzPWpzvJqwTDgGR6v6VMqm5XnI7aSYOI0w2iRT
GVKkhHKZbVwPFQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:41:55 2025 by rpki-client