Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
File:                     pTmv66zomajuC7T4u0R1_iR6FSg.mft (raw, json)
Hash identifier:          xmHKLX//FViNuiPsyJVDULHiMdt4toW0UVtszCW47ak=
Subject key identifier:   36:B4:30:1B:51:D7:DA:79:CC:28:89:B3:8C:87:1A:D0:0E:9B:A4:6B
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Certificate issuer:       /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial:       0198425050D442D7B818A7F577994A0810C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
Manifest number:          164B
Signing time:             Fri 25 Jul 2025 16:00:16 +0000
Manifest this update:     Fri 25 Jul 2025 16:00:16 +0000
Manifest next update:     Sat 26 Jul 2025 16:00:16 +0000
Files and hashes:         1: 1-bk62IWKrSZzzdVcShXkFvqxkl0.roa (hash: Kl/dAts5LKa+SfBn4cKmh5vmLiAlVwqYIz2UeNCJ1iU=)
                          2: 1-rGoQ0Tdy7up4TbdFStpjg1PQZc.roa (hash: NEBz7IPzQdgVGife4eImD2TAPPPzuFn58trdu+E7I9M=)
                          3: 4AWGZqxgdDbuinb8PgzycPgjQHo.roa (hash: 0MUhlNn3UwdUKa27OAF15oWX5cYNcmG6DsLUO/PP0pE=)
                          4: 8Z1U6oiaYILl5QFuSVlM1xZVAo0.roa (hash: Z0yQrMp3DnhS8bJWMvt8Fv7YgMbkZzaeLDljUW2aX8Y=)
                          5: 93oAKYvO6XYFsiZOJUeBk34alow.roa (hash: OMaRC1Me7Y5SHCHx/1b5M8xkqo0CIdN293P1j1+C9f0=)
                          6: 9jmR0jtKFtOeaqxxSmCi0f7Xflk.roa (hash: /UlnktLBtYlahSnqletcALvH8tmcRVU8Atc0U8lv3Og=)
                          7: JufXc30H2gDJ9htaoc5snhv9H4M.roa (hash: UDnCJVj9+FetwmXa7FA8iihb1eZHsYZtFmy1T9KSJ6w=)
                          8: KMe75VLXZokwL2kemGRZB7L6oN8.roa (hash: xlf6IO6a2AQYVmnqnu4hVw/U0VPvpTL4IwpI35qfYyw=)
                          9: ML7Lpx2n5IaRHvErxQ3F3mC9eoA.roa (hash: 7lh8IVxMzNOye7MoV2wQmo8+k8SIYxp7usLH9MCvefs=)
                          10: OYPY3gF3s1cp0YO06O3pINQLd6w.roa (hash: bcalgYqjszitJ2nTuJxpP+zc9mz/ySwIOlx3rr+xOrI=)
                          11: PnIUOaZTtm2gYot3Ty_z81HaxFg.roa (hash: iyty2fBHEEZGHeVBEkiIUxtySJJdOiac1gbSc8T8xHg=)
                          12: SoXV8K-5RRRRG3MNkK9ADRjUw68.roa (hash: piFPFAv4NTkQWPfJcDD5swhwQm6lgH8QwyqXPK5Cnuo=)
                          13: WjBimzywiq-8Yrfcs0lYstgI3ds.roa (hash: 4EfZBP66WNjm2OW7080n5DX6+5O4ByUCAqCUKZoTFJs=)
                          14: XtmDae46QkYa7sEtA72HCIbTV4Q.roa (hash: ao7gCVHbh6StUEiDryV1leL/0iZ1OGU6VawDFaNVP8A=)
                          15: ZbRMfj9YfzPDdPWPOjDMA_pE5qY.roa (hash: /KAZcMzJGIdc2dYTw+AeY+8hxTs35s3WCjigCyXOcJQ=)
                          16: cn-oXj_T-RfCKsQxrw6E8Ys-CgQ.roa (hash: 3NJ5fBtNUF5n7GronNY2Bv83Oykj7G7TI/8gRlMpuMo=)
                          17: gDW3ab1PqB8HZ5e8A_qbKIWXK64.roa (hash: PQcff6BW0vltVudS5RZqj+SpgMTVSYVY9jCJhfcHTLA=)
                          18: pTmv66zomajuC7T4u0R1_iR6FSg.crl (hash: vL3V94NyR6Zsn1xz8T4jrzPxECjYQtJp2Ux3mOEz33U=)
                          19: qz_R1TGXZbGqhqM3g1GKGHaKees.roa (hash: 43NOOm+JlcC5EDJuUoKJaXArhrxFvOp4ARvvoT/qKOs=)
                          20: u30uSL9wmmrrs1Xj770glr3MdDo.roa (hash: xtIgG9wchGphTb8JbvlmWsYrjnTKE4qCe5ydlOYINVQ=)
                          21: uBM8xkKDMiWlyAC9isOmm2koO64.roa (hash: /CyKvmM2YRRvwwcm5j+Yf26y64D4OTHxMMF86WDXsTE=)
                          22: vhaCW0twv6M6-2zpbCqh7ISIylE.roa (hash: UAEgEgdU1O1Fn/EwiOd9/xUaWf/QSUK/jq51sDBklgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:50:50:d4:42:d7:b8:18:a7:f5:77:99:4a:08:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
        Validity
            Not Before: Jul 25 16:00:16 2025 GMT
            Not After : Jul 26 16:00:16 2025 GMT
        Subject: CN=36b4301b51d7da79cc2889b38c871ad00e9ba46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:c5:c1:2b:c4:64:1a:9d:50:20:cf:f3:a9:
                    e6:2f:00:ac:92:a2:4a:5e:d0:f6:8f:63:c1:a4:0e:
                    96:37:ba:f8:89:45:f6:82:ef:61:0a:64:3a:e1:a8:
                    b6:58:1f:3a:a1:da:bb:39:86:79:a1:e0:00:64:6e:
                    2a:13:7a:2e:0b:5b:cd:0b:4d:e9:40:a1:ca:a1:d1:
                    aa:08:9f:8a:1c:45:63:ec:b2:55:4a:5d:eb:48:a5:
                    ff:b2:0f:76:49:ae:df:cc:19:5a:93:52:43:e7:eb:
                    cf:d4:00:b1:56:b8:5f:c4:d4:2f:28:30:89:56:16:
                    c6:58:94:b3:b4:f8:99:aa:66:bc:26:69:f4:08:05:
                    20:6b:f9:66:5d:97:f9:34:83:95:2a:62:6b:64:ad:
                    11:a9:9d:aa:3b:64:49:f7:7b:72:8b:1f:3f:bc:9b:
                    a6:6e:fc:11:28:cf:8c:2d:6f:15:da:1c:36:5a:90:
                    1d:fa:28:0d:f6:30:52:7c:99:9a:d9:a1:5d:a3:4e:
                    e7:10:88:b7:71:3e:b9:08:62:42:f8:85:a5:2f:c8:
                    90:89:e7:09:44:83:91:75:0c:0f:53:9b:7d:bf:8e:
                    ee:96:0b:31:4e:36:49:8e:a0:41:fd:9a:1a:b5:38:
                    fc:c3:1e:8c:b6:2a:56:7d:f8:dc:23:ed:a6:3a:c3:
                    b8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B4:30:1B:51:D7:DA:79:CC:28:89:B3:8C:87:1A:D0:0E:9B:A4:6B
            X509v3 Authority Key Identifier:
                keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c6:bd:ef:bf:99:2b:7b:a4:91:f5:ee:3b:9f:d6:bb:62:af:
         81:da:a0:e3:b0:7c:05:ab:4f:37:92:63:ce:f3:d9:cb:3f:92:
         c7:02:45:59:8f:4b:be:f2:79:df:17:61:e5:b8:9c:c1:54:77:
         93:57:4b:22:79:66:30:5f:35:82:4b:5f:81:15:f5:d9:85:60:
         03:8f:99:35:5e:31:e7:a7:d2:31:e8:61:8a:d9:e8:cc:f8:e9:
         a3:17:00:9a:df:0f:7e:64:1b:e6:a8:2a:0e:f1:03:a8:74:73:
         ea:08:de:82:98:17:3f:80:4e:94:3d:2a:fa:49:27:44:b4:9b:
         3b:0e:b1:6c:c9:04:0a:44:44:44:37:c8:42:c0:08:a8:87:58:
         5b:37:1e:d9:9d:5c:d7:b7:77:c5:04:70:3e:66:70:6b:7d:e7:
         9e:6a:9b:38:fc:ee:7e:b4:f6:4f:ed:cc:71:f1:4a:24:a9:a2:
         73:e7:38:4b:a6:bd:b8:8f:25:f2:ae:83:4f:7d:78:f1:7c:7a:
         4d:92:33:1c:97:02:32:5c:60:f2:39:b7:3c:3f:b9:3c:20:ed:
         72:54:df:a7:14:41:ce:cc:9e:2c:c4:34:41:1d:c9:3f:e0:93:
         e5:55:78:33:96:df:a7:43:f3:32:5d:ed:f9:2b:7a:82:85:6b:
         a0:b8:7d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 22:23:14 2025 by rpki-client