Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
File:                     pB97t76hWBYk_LZQOrWnD0IMmz4.mft (raw, json)
Hash identifier:          FYqZ2VMAYLrwLzpkkLguRqbLXpWyM1q4hbBChqctzUg=
Subject key identifier:   7E:6B:94:80:27:08:09:7A:A3:86:45:0A:E8:0E:FE:7B:88:33:C4:AC
Authority key identifier: A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E
Certificate issuer:       /CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e
Certificate serial:       0199C4FBA1B021875E94D33F613559D037DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
Manifest number:          0178
Signing time:             Wed 08 Oct 2025 18:00:49 +0000
Manifest this update:     Wed 08 Oct 2025 18:00:49 +0000
Manifest next update:     Thu 09 Oct 2025 18:00:49 +0000
Files and hashes:         1: TOnoVfX8Ap4KHroZhyTiZTPqFbo.roa (hash: h8XoURF67JqruQUoq14dZxGEi4Cnu4hmR974XbY5rg8=)
                          2: bktyDBqNSVITQAf_MKFUeQ2s_nU.roa (hash: q/tuR42MGkp/VtZe/IwxRfy5LTdFIBVwnpSc5i4a68A=)
                          3: pB97t76hWBYk_LZQOrWnD0IMmz4.crl (hash: MQmoC4NwMFKJL3HhdzoafhSnjz23y238TCAEBpymf4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 16:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c4:fb:a1:b0:21:87:5e:94:d3:3f:61:35:59:d0:37:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e
        Validity
            Not Before: Oct  8 18:00:49 2025 GMT
            Not After : Oct  9 18:00:49 2025 GMT
        Subject: CN=7e6b94802708097aa386450ae80efe7b8833c4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:97:b5:67:59:f9:b8:3c:aa:78:f5:71:5b:a6:
                    2f:fb:b1:c6:7e:ed:a7:1a:db:07:d1:ae:05:f8:22:
                    fe:bf:72:08:34:99:55:f8:13:9a:69:6b:1d:a7:f5:
                    b6:93:fa:c6:d7:c2:c4:6e:01:5c:35:21:5c:0a:e8:
                    92:8a:cc:6a:b8:92:14:34:cd:7b:3d:00:c4:00:0a:
                    9f:2e:84:21:4b:cb:f5:86:a8:35:c4:ee:a6:ad:f3:
                    f9:c3:cd:5f:bc:cf:6c:7a:1f:ff:57:ac:55:4a:ae:
                    a5:79:6d:9e:48:f0:ba:59:9f:b0:11:9b:91:b1:ca:
                    79:e9:e0:b0:24:81:62:0c:61:08:5c:1e:db:ec:76:
                    5c:0a:ae:7e:aa:e1:8f:92:b5:7a:55:92:f5:8a:7a:
                    61:14:02:3c:dd:3a:5e:43:49:5c:67:4e:53:05:f5:
                    32:ac:06:4c:ed:0d:3d:d3:f2:63:6c:f7:0a:bc:ec:
                    d9:59:0e:de:45:1c:ae:15:6c:10:84:30:f5:f2:fc:
                    03:31:3b:cb:15:29:2a:47:24:02:e6:48:96:a0:c4:
                    ed:c8:ff:c8:c0:75:c3:68:9d:69:4f:61:af:fb:8c:
                    d0:34:da:08:39:57:a6:f2:57:9e:ae:78:80:03:62:
                    89:3f:35:6b:b4:f3:1f:58:60:bb:42:12:74:bd:28:
                    1b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6B:94:80:27:08:09:7A:A3:86:45:0A:E8:0E:FE:7B:88:33:C4:AC
            X509v3 Authority Key Identifier:
                keyid:A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:80:1f:ce:40:04:17:64:3a:86:fc:ca:76:c8:65:b5:4d:0b:
         e4:ef:33:fd:60:87:92:8c:0b:27:00:9b:8c:0e:91:64:da:85:
         da:a9:f1:12:2d:13:a7:48:66:e9:4f:d2:06:80:f9:cf:04:b4:
         d4:21:2d:09:16:69:bf:af:02:21:98:46:13:f9:3b:88:60:21:
         27:3b:7b:bd:8f:43:45:72:a3:3c:4e:1a:96:54:44:54:48:e3:
         74:43:3d:c6:61:c7:18:ff:cc:cd:70:5e:9c:b8:af:28:4a:c6:
         cb:51:7a:52:b7:2d:7b:6a:0e:1e:99:a1:6e:46:72:56:6e:3a:
         d3:e7:00:be:d5:27:3d:01:5a:11:40:ca:a9:c1:37:4d:d5:61:
         6f:fd:a6:cf:c0:c0:8e:88:ef:e0:57:71:32:f3:10:7a:39:ef:
         cf:6f:45:df:c3:b2:d8:ae:b7:e9:68:eb:f1:28:47:cb:2e:40:
         9d:91:36:f2:10:f7:fb:f8:fd:67:18:04:fb:20:2c:23:b9:c3:
         7f:fd:a7:69:70:04:1a:e3:df:de:84:2d:cb:f4:46:f1:26:04:
         8c:a1:b3:db:55:28:31:e7:d5:90:aa:2c:c7:8b:4f:ad:26:08:
         4b:cc:b5:0e:85:e2:01:19:08:f1:9c:b1:56:3f:d1:a9:97:10:
         3f:2a:5a:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnE+6GwIYdelNM/YTVZ0DfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MWY3YmI3YmVhMTU4MTYyNGZjYjY1MDNhYjVhNzBmNDIw
YzliM2UwHhcNMjUxMDA4MTgwMDQ5WhcNMjUxMDA5MTgwMDQ5WjAzMTEwLwYDVQQD
Eyg3ZTZiOTQ4MDI3MDgwOTdhYTM4NjQ1MGFlODBlZmU3Yjg4MzNjNGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15e1Z1n5uDyqePVxW6Yv+7HGfu2n
GtsH0a4F+CL+v3IINJlV+BOaaWsdp/W2k/rG18LEbgFcNSFcCuiSisxquJIUNM17
PQDEAAqfLoQhS8v1hqg1xO6mrfP5w81fvM9seh//V6xVSq6leW2eSPC6WZ+wEZuR
scp56eCwJIFiDGEIXB7b7HZcCq5+quGPkrV6VZL1inphFAI83TpeQ0lcZ05TBfUy
rAZM7Q090/JjbPcKvOzZWQ7eRRyuFWwQhDD18vwDMTvLFSkqRyQC5kiWoMTtyP/I
wHXDaJ1pT2Gv+4zQNNoIOVem8leerniAA2KJPzVrtPMfWGC7QhJ0vSgbMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5rlIAnCAl6o4ZFCugO/nuIM8SsMB8GA1UdIwQY
MBaAFKQfe7e+oVgWJPy2UDq1pw9CDJs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yMTYwZjQtN2Q1Ny00YzdjLTg5YWYt
OThmMWEyZGZjMzljLzEvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yMTYwZjQtN2Q1Ny00YzdjLTg5YWYtOThmMWEyZGZjMzlj
LzEvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYAfzkAE
F2Q6hvzKdshltU0L5O8z/WCHkowLJwCbjA6RZNqF2qnxEi0Tp0hm6U/SBoD5zwS0
1CEtCRZpv68CIZhGE/k7iGAhJzt7vY9DRXKjPE4allREVEjjdEM9xmHHGP/MzXBe
nLivKErGy1F6Urcte2oOHpmhbkZyVm460+cAvtUnPQFaEUDKqcE3TdVhb/2mz8DA
jojv4FdxMvMQejnvz29F38Oy2K636Wjr8ShHyy5AnZE28hD3+/j9ZxgE+yAsI7nD
f/2naXAEGuPf3oQty/RG8SYEjKGz21UoMefVkKosx4tPrSYIS8y1DoXiARkI8Zyx
Vj/RqZcQPypa+Q==
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:18:56 2025 by rpki-client