Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File:                     22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier:          D2PWRx5gtGd0kh3sQK9FdVv2MOhwHi5JzF5qN1oJjfE=
Subject key identifier:   69:82:5F:0D:8A:5C:85:4B:63:19:38:4A:C0:A6:A4:FD:A8:45:4A:CB
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer:       /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial:       01988166B73EF20F61670FD950C90CD7BF5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 22:00:49 +0000
Manifest this update:     Wed 06 Aug 2025 22:00:49 +0000
Manifest next update:     Thu 07 Aug 2025 22:00:49 +0000
Files and hashes:         1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: hOwkf44Go1GMegMfJdIU2KGyEKd5oticXl7Xpgo7cOI=)
                          2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
                          3: 8mzSvC4v5Ni41t8FB8aiAfYjJcI.roa (hash: QyI7qjDJOZQBTsa2Xsr+TTNwnCK4F/pFTnriXbmvjf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:b7:3e:f2:0f:61:67:0f:d9:50:c9:0c:d7:bf:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
        Validity
            Not Before: Aug  6 22:00:49 2025 GMT
            Not After : Aug  7 22:00:49 2025 GMT
        Subject: CN=69825f0d8a5c854b6319384ac0a6a4fda8454acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:0c:e8:16:de:99:e7:5f:6b:c8:08:2d:a6:
                    58:e7:f4:37:65:59:64:4f:d3:fc:1f:91:09:81:1b:
                    36:f8:3d:2b:1c:eb:2c:37:9b:79:fc:3e:36:be:ed:
                    db:ce:25:b5:c5:64:17:d4:7c:db:38:b2:35:3d:df:
                    41:6c:e6:8b:2f:37:63:3e:41:dd:d5:39:b8:b0:1a:
                    fb:74:f7:97:e0:b0:69:74:c2:18:e9:57:7f:cf:d5:
                    4e:dd:a8:d9:5a:cc:cd:3e:c7:bf:63:7f:84:ce:ff:
                    fe:18:db:53:9f:59:e9:0e:02:83:96:98:a4:9d:d9:
                    0b:a5:d0:dc:ed:f5:ea:3a:f0:af:29:ed:23:60:90:
                    3d:73:85:47:42:70:57:1a:cc:a2:45:3f:ab:74:99:
                    72:f9:e7:d9:41:ba:79:5d:c2:d7:ff:d3:17:8c:26:
                    e7:9d:2b:f2:a3:6a:76:3d:8b:6e:84:04:1d:e7:4e:
                    47:97:0f:a5:51:5f:37:6f:9e:84:91:59:1e:98:76:
                    b1:e9:e3:4f:bc:66:11:35:db:7a:bb:16:af:01:a9:
                    71:a8:50:4e:7f:67:2a:b1:58:9e:2e:3d:51:34:19:
                    90:e5:90:33:fd:f4:93:e4:85:4f:84:99:61:ef:83:
                    35:28:d2:66:db:98:a0:f9:26:97:15:a7:7b:26:f6:
                    6b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:82:5F:0D:8A:5C:85:4B:63:19:38:4A:C0:A6:A4:FD:A8:45:4A:CB
            X509v3 Authority Key Identifier:
                keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d3:4f:cc:01:d6:bc:18:15:2c:f4:24:c3:51:03:2a:a1:5b:
         90:52:25:99:e5:67:9d:ca:0d:df:83:45:4d:96:18:7d:05:b1:
         66:e0:2e:c6:95:e5:b5:ed:09:1f:69:66:f9:10:fe:e6:3b:c9:
         21:3b:f1:3c:24:dd:c9:d7:7e:0a:1d:9a:73:f8:b2:43:ab:ab:
         8b:a7:7f:e2:af:9b:58:ca:62:4f:c1:45:87:4e:0b:3d:8b:2d:
         96:22:bf:f7:11:66:7f:af:c2:f4:2d:32:1b:d3:d5:ab:e7:86:
         9a:53:3b:42:2f:8e:d7:9d:76:3a:6d:2d:4d:d3:d5:22:e6:3d:
         ac:1f:6e:7c:cc:f3:ad:50:f2:d6:2a:ac:c8:24:21:1e:85:c2:
         9e:85:68:bf:4e:22:9a:c7:3e:2c:a1:6d:fd:74:90:a0:da:f9:
         b4:37:32:c7:b5:56:39:81:88:5f:6f:c3:2d:d7:dc:c5:40:86:
         b3:b8:db:b8:a7:ac:53:f9:95:07:e5:f0:67:c3:19:e6:48:42:
         0f:79:34:b3:5b:5d:7e:4d:09:ce:f6:96:bd:e4:8a:7c:91:de:
         43:ef:c6:85:be:9d:94:e4:b5:e7:79:62:a7:59:d4:88:fe:75:
         36:85:7e:1b:8b:86:bd:dd:8e:ce:2d:3c:53:a1:4d:ba:ea:19:
         74:5a:db:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZrc+8g9hZw/ZUMkM179cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNjQxZmM5MDNkNWI0Y2M5NzE2NDkzMjRhNGIzNGU0Zjgy
NDIyYzUwHhcNMjUwODA2MjIwMDQ5WhcNMjUwODA3MjIwMDQ5WjAzMTEwLwYDVQQD
Eyg2OTgyNWYwZDhhNWM4NTRiNjMxOTM4NGFjMGE2YTRmZGE4NDU0YWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq4M6Bbemedfa8gILaZY5/Q3ZVlk
T9P8H5EJgRs2+D0rHOssN5t5/D42vu3bziW1xWQX1HzbOLI1Pd9BbOaLLzdjPkHd
1Tm4sBr7dPeX4LBpdMIY6Vd/z9VO3ajZWszNPse/Y3+Ezv/+GNtTn1npDgKDlpik
ndkLpdDc7fXqOvCvKe0jYJA9c4VHQnBXGsyiRT+rdJly+efZQbp5XcLX/9MXjCbn
nSvyo2p2PYtuhAQd505Hlw+lUV83b56EkVkemHax6eNPvGYRNdt6uxavAalxqFBO
f2cqsVieLj1RNBmQ5ZAz/fST5IVPhJlh74M1KNJm25ig+SaXFad7JvZr4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmCXw2KXIVLYxk4SsCmpP2oRUrLMB8GA1UdIwQY
MBaAFNtkH8kD1bTMlxZJMkpLNOT4JCLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzkt
N2ZlZTU5MWEyMDljLzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzktN2ZlZTU5MWEyMDlj
LzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNNPzAHW
vBgVLPQkw1EDKqFbkFIlmeVnncoN34NFTZYYfQWxZuAuxpXlte0JH2lm+RD+5jvJ
ITvxPCTdydd+Ch2ac/iyQ6uri6d/4q+bWMpiT8FFh04LPYstliK/9xFmf6/C9C0y
G9PVq+eGmlM7Qi+O1512Om0tTdPVIuY9rB9ufMzzrVDy1iqsyCQhHoXCnoVov04i
msc+LKFt/XSQoNr5tDcyx7VWOYGIX2/DLdfcxUCGs7jbuKesU/mVB+XwZ8MZ5khC
D3k0s1tdfk0JzvaWveSKfJHeQ+/Ghb6dlOS153lip1nUiP51NoV+G4uGvd2Ozi08
U6FNuuoZdFrb3Q==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:30:43 2025 by rpki-client