Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File:                     aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier:          0PpJ2TGeFGzxeRcPVw22ofTC8WDpRvqpbFP9ioOahuw=
Subject key identifier:   EB:68:41:8F:36:EE:E0:5A:9F:27:51:CD:ED:7D:BC:44:B7:4D:F0:6F
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer:       /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial:       01987C0988E8A60BE243404BF0D681D83C07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number:          161D
Signing time:             Tue 05 Aug 2025 21:00:56 +0000
Manifest this update:     Tue 05 Aug 2025 21:00:56 +0000
Manifest next update:     Wed 06 Aug 2025 21:00:56 +0000
Files and hashes:         1: 0hbCuxhGBbcq1BE_SuUs0Qoi-Vg.roa (hash: MAtioDj4t6UaO211UFLR8yqYOPNcNMxWi5lPTtRkcJ4=)
                          2: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: jZgdJH4ImqRTvqdyc374N6dZUgZb8PrpcUA0AzBsHR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:88:e8:a6:0b:e2:43:40:4b:f0:d6:81:d8:3c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
        Validity
            Not Before: Aug  5 21:00:56 2025 GMT
            Not After : Aug  6 21:00:56 2025 GMT
        Subject: CN=eb68418f36eee05a9f2751cded7dbc44b74df06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:c4:d2:e1:da:33:ad:6a:9f:e0:23:16:38:
                    05:b4:b1:09:29:15:41:15:31:5d:f0:a7:88:45:43:
                    7d:c3:a0:4a:93:9a:46:6a:d2:b9:ec:61:82:41:a9:
                    2f:e1:30:40:9a:2d:15:cc:bf:0f:73:9c:02:be:a5:
                    3c:ca:51:15:23:5f:ee:e9:bf:61:97:33:90:65:66:
                    48:7d:df:05:5d:8f:d0:b7:b8:87:64:2b:ca:b3:85:
                    3a:e8:31:07:da:a0:57:9b:52:78:d8:82:00:86:16:
                    7a:51:25:7c:db:bc:9b:36:65:91:20:79:68:f0:69:
                    19:ff:58:66:e9:b3:af:92:93:52:7e:0f:08:a6:a1:
                    7b:f8:b4:d0:8c:03:69:72:04:8b:09:7b:3b:14:11:
                    51:dd:db:41:d2:02:3b:b2:15:83:9a:96:53:95:1f:
                    4f:05:e4:56:5f:a0:2c:0a:e5:50:a7:96:ee:b3:6d:
                    cc:2e:61:2e:e7:9a:38:a0:97:7b:25:df:7d:aa:68:
                    d9:b5:12:9e:94:69:f2:67:4b:89:52:e3:6d:3e:63:
                    2c:34:43:3b:98:e4:0a:38:bb:2c:ed:1c:77:ed:0d:
                    7e:81:ea:ac:24:04:c8:f6:21:50:81:3c:7a:7b:62:
                    d9:b7:d4:ac:fb:ae:f7:8c:7e:91:b9:6c:57:59:fd:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:68:41:8F:36:EE:E0:5A:9F:27:51:CD:ED:7D:BC:44:B7:4D:F0:6F
            X509v3 Authority Key Identifier:
                keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e3:ea:27:19:a4:ce:7d:2d:91:02:d6:f2:90:a8:ba:5a:3b:
         04:3f:cb:75:d0:a0:7f:40:09:bf:6b:47:94:49:32:88:94:47:
         b8:6f:6f:fa:56:5f:71:d2:7f:a8:c4:c7:6b:a7:07:3e:0e:4e:
         15:09:0e:bf:5c:3f:03:92:12:f8:58:df:64:9f:ec:62:67:47:
         5f:83:43:4a:49:a7:6c:0c:85:f6:37:6e:e3:6c:0d:20:d2:c4:
         fa:81:43:25:60:f4:a0:86:09:85:2b:4f:f8:51:64:93:bd:ad:
         04:a6:00:87:cf:9c:93:08:20:86:84:3c:a7:80:bc:ce:1b:3b:
         0f:82:e6:86:67:f4:b3:b5:01:5e:40:c7:a1:41:bb:e9:e5:48:
         26:2c:a2:65:82:33:3d:43:29:9e:cd:01:21:9b:0b:d1:2f:10:
         a1:d9:25:15:d2:c8:04:66:68:b0:fc:26:e8:3d:63:f7:48:a1:
         c7:31:d8:ea:bc:87:10:c4:04:d7:31:f8:15:f6:df:2b:e8:5f:
         81:55:1d:03:db:cf:85:32:1e:27:02:27:e4:1f:27:46:51:2a:
         76:cc:f7:dd:c3:d6:4e:f6:9c:c5:0f:3f:43:f9:f4:8e:cc:ce:
         80:ee:8b:81:69:a7:b9:60:9a:1a:cb:da:70:6d:e1:b7:4b:d3:
         a0:e2:a9:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8CYjopgviQ0BL8NaB2DwHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGEyZWQ5YTQxMjc0N2ZjZDY0NDc0OWRlNTdkOWZmNzgw
MzkzYWEwHhcNMjUwODA1MjEwMDU2WhcNMjUwODA2MjEwMDU2WjAzMTEwLwYDVQQD
EyhlYjY4NDE4ZjM2ZWVlMDVhOWYyNzUxY2RlZDdkYmM0NGI3NGRmMDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2TE0uHaM61qn+AjFjgFtLEJKRVB
FTFd8KeIRUN9w6BKk5pGatK57GGCQakv4TBAmi0VzL8Pc5wCvqU8ylEVI1/u6b9h
lzOQZWZIfd8FXY/Qt7iHZCvKs4U66DEH2qBXm1J42IIAhhZ6USV827ybNmWRIHlo
8GkZ/1hm6bOvkpNSfg8IpqF7+LTQjANpcgSLCXs7FBFR3dtB0gI7shWDmpZTlR9P
BeRWX6AsCuVQp5bus23MLmEu55o4oJd7Jd99qmjZtRKelGnyZ0uJUuNtPmMsNEM7
mOQKOLss7Rx37Q1+geqsJATI9iFQgTx6e2LZt9Ss+673jH6RuWxXWf3RkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtoQY827uBanydRze19vES3TfBvMB8GA1UdIwQY
MBaAFGlKLtmkEnR/zWRHSd5X2f94A5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEt
YWRmNDNmMDRlYzljLzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEtYWRmNDNmMDRlYzlj
LzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOPqJxmk
zn0tkQLW8pCoulo7BD/LddCgf0AJv2tHlEkyiJRHuG9v+lZfcdJ/qMTHa6cHPg5O
FQkOv1w/A5IS+FjfZJ/sYmdHX4NDSkmnbAyF9jdu42wNINLE+oFDJWD0oIYJhStP
+FFkk72tBKYAh8+ckwgghoQ8p4C8zhs7D4Lmhmf0s7UBXkDHoUG76eVIJiyiZYIz
PUMpns0BIZsL0S8QodklFdLIBGZosPwm6D1j90ihxzHY6ryHEMQE1zH4FfbfK+hf
gVUdA9vPhTIeJwIn5B8nRlEqdsz33cPWTvacxQ8/Q/n0jszOgO6LgWmnuWCaGsva
cG3ht0vToOKpxQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:15 2025 by rpki-client