Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File:                     fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier:          4uIZW/+zXdDdc0hF1keci6pQrviUNuqy6mSKKRigFRk=
Subject key identifier:   7B:DB:4E:00:BB:B7:68:D5:01:C3:EA:A3:65:C2:02:3C:17:78:40:F6
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer:       /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial:       01988167C25439361E0329B350B73A837EC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 22:01:57 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:57 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:57 +0000
Files and hashes:         1: 691mCGSXoSch_5n-_pfK7VBK24U.roa (hash: Wd9PO6+/FM13l9qBnW2wnUGn1u/XUolVRvwtK5oFjWQ=)
                          2: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: a3JHlvh9pZ2WWu3pb7AfJQU2w3f7yVdPl+GeQN05dC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:c2:54:39:36:1e:03:29:b3:50:b7:3a:83:7e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
        Validity
            Not Before: Aug  6 22:01:57 2025 GMT
            Not After : Aug  7 22:01:57 2025 GMT
        Subject: CN=7bdb4e00bbb768d501c3eaa365c2023c177840f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:c1:f0:1b:d3:b2:59:05:bc:51:b7:c0:5e:
                    0c:b5:eb:01:4a:43:3c:5a:b1:12:59:30:8f:51:99:
                    22:b5:77:cf:ac:8a:86:76:9f:3f:f8:33:8d:c8:80:
                    18:c4:4e:da:64:0c:04:7c:bc:60:29:30:74:81:98:
                    57:0a:ef:30:db:77:df:1d:3e:6c:8b:4c:ff:42:68:
                    d8:f8:e4:ae:15:9c:99:02:fc:35:8f:db:c0:66:4a:
                    18:46:e2:67:b6:a2:cb:96:e2:3c:9d:b1:86:99:72:
                    62:1d:ac:47:f9:6b:95:0f:c2:82:69:b2:31:db:6c:
                    c4:2d:ed:48:53:15:be:2c:e6:a7:86:0c:53:93:4f:
                    cf:5d:0c:34:27:96:70:fc:f9:c8:63:23:55:fe:d2:
                    f4:65:71:80:06:aa:97:84:3d:4e:a0:39:bd:f5:4f:
                    08:66:3b:1f:7d:07:2a:cf:2a:d3:a4:5c:2b:41:3f:
                    d2:eb:61:3b:f2:a5:82:01:3d:c3:68:e0:5d:f1:6c:
                    50:e8:ca:75:74:b5:51:68:fa:e7:b9:76:85:ee:cd:
                    04:21:cd:4d:f7:a1:47:50:fe:b7:4e:84:3c:89:c5:
                    05:6d:62:d3:7f:e9:3b:c4:33:54:03:4a:b2:54:55:
                    58:f7:d4:75:53:97:0f:1d:20:41:01:23:8a:db:34:
                    ec:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DB:4E:00:BB:B7:68:D5:01:C3:EA:A3:65:C2:02:3C:17:78:40:F6
            X509v3 Authority Key Identifier:
                keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9a:25:d6:7b:5e:7c:6a:4d:37:79:06:75:0e:e4:0b:a2:e0:
         32:c6:fd:3e:a8:75:46:23:33:42:1b:70:62:49:d3:7e:50:8b:
         c4:3e:f7:50:8f:6e:e8:e9:33:ae:e7:93:f2:35:2d:b1:9b:64:
         3f:a6:da:c8:d1:9c:67:28:e7:64:f0:8c:f9:1c:73:a7:3f:00:
         42:21:e2:4c:6e:9f:f8:c2:45:34:f6:60:1e:78:50:4e:61:2a:
         ee:19:fa:63:72:98:21:c3:17:03:f9:b4:72:79:7b:fa:8a:1b:
         3c:71:01:bf:04:a3:d7:62:6a:d6:cd:82:50:37:b8:9b:e5:14:
         e8:fe:cc:3e:02:db:76:59:53:dd:5d:f5:eb:93:a1:9e:3c:1b:
         0c:58:34:5d:ac:50:af:7a:63:ff:ed:bb:5b:8d:55:53:2c:79:
         5c:26:89:45:d6:20:60:43:54:cb:bb:ed:e2:46:c3:e1:d6:c6:
         6a:59:09:5a:7f:7b:b7:c1:a9:28:5f:1b:3e:70:b3:61:72:3c:
         8e:ac:58:f3:cf:76:cf:2c:72:d2:d4:53:81:9b:f3:fe:20:6b:
         f4:ac:a2:6c:b6:ca:96:3b:93:31:68:23:80:44:ac:49:71:e0:
         ef:69:d6:2d:68:5a:4b:31:d4:f0:94:d1:e7:cc:c0:f9:ef:d3:
         a0:4a:7a:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZ8JUOTYeAymzULc6g37IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTU0MGZkZDVhZGQ2Yjc3NTQ5OGMxZTNmMjVjOTBlMjEz
YTYxMmYwHhcNMjUwODA2MjIwMTU3WhcNMjUwODA3MjIwMTU3WjAzMTEwLwYDVQQD
Eyg3YmRiNGUwMGJiYjc2OGQ1MDFjM2VhYTM2NWMyMDIzYzE3Nzg0MGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo7B8BvTslkFvFG3wF4MtesBSkM8
WrESWTCPUZkitXfPrIqGdp8/+DONyIAYxE7aZAwEfLxgKTB0gZhXCu8w23ffHT5s
i0z/QmjY+OSuFZyZAvw1j9vAZkoYRuJntqLLluI8nbGGmXJiHaxH+WuVD8KCabIx
22zELe1IUxW+LOanhgxTk0/PXQw0J5Zw/PnIYyNV/tL0ZXGABqqXhD1OoDm99U8I
ZjsffQcqzyrTpFwrQT/S62E78qWCAT3DaOBd8WxQ6Mp1dLVRaPrnuXaF7s0EIc1N
96FHUP63ToQ8icUFbWLTf+k7xDNUA0qyVFVY99R1U5cPHSBBASOK2zTsvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvbTgC7t2jVAcPqo2XCAjwXeED2MB8GA1UdIwQY
MBaAFH4VQP3Vrda3dUmMHj8lyQ4hOmEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hNGRlYmItMjdiNy00MTQwLWIyN2Ut
ZWE2NTM4MjRiMWYyLzEvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9hNGRlYmItMjdiNy00MTQwLWIyN2UtZWE2NTM4MjRiMWYy
LzEvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZol1nte
fGpNN3kGdQ7kC6LgMsb9Pqh1RiMzQhtwYknTflCLxD73UI9u6OkzrueT8jUtsZtk
P6bayNGcZyjnZPCM+Rxzpz8AQiHiTG6f+MJFNPZgHnhQTmEq7hn6Y3KYIcMXA/m0
cnl7+oobPHEBvwSj12Jq1s2CUDe4m+UU6P7MPgLbdllT3V3165OhnjwbDFg0XaxQ
r3pj/+27W41VUyx5XCaJRdYgYENUy7vt4kbD4dbGalkJWn97t8GpKF8bPnCzYXI8
jqxY8892zyxy0tRTgZvz/iBr9KyibLbKljuTMWgjgESsSXHg72nWLWhaSzHU8JTR
58zA+e/ToEp62g==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:59 2025 by rpki-client