Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
File:                     rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft (raw, json)
Hash identifier:          7VWYMVmZ8+DkiptgLncZBk9HB3FyNutuCYtT8BRIwp8=
Subject key identifier:   CB:E6:D8:E3:4E:DD:74:6E:8E:C0:9A:EF:3F:97:61:EB:F7:35:6F:D8
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Certificate issuer:       /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial:       0198530DF091139AC1AA32B07FEAC5FB761B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
Manifest number:          160B
Signing time:             Mon 28 Jul 2025 22:01:19 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:19 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:19 +0000
Files and hashes:         1: Om1wv9kKbABhZ26Wcsp4q_OWfLk.roa (hash: oXVUH9ZBbgANEdJAJeCILVApckD4agNE3Eg9le5/r/E=)
                          2: VwUk7y0zO5Mx4dqI1nqU1mCPomA.roa (hash: 3ETxsuTriFcqg8JNihvATf+SJzxphG0A2lHFWKrQspQ=)
                          3: X4IP2kI-czd9MCpMhWTXvpvPDiU.roa (hash: JHSYTyokADXHW2ty3rRXa/J2++iIi8eoIsZUayXCWYo=)
                          4: rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl (hash: PTZoa2SxpcgAanV/nOGm9LK/7XBaymItDDJYdi3jSfM=)
                          5: sIxfC6vb_F45uySffIKtVbXqOYs.roa (hash: ++32p2bkxPyvz4Hx8QLxSpYxKyhb3oHx1J6fv7+P8ts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0d:f0:91:13:9a:c1:aa:32:b0:7f:ea:c5:fb:76:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
        Validity
            Not Before: Jul 28 22:01:19 2025 GMT
            Not After : Jul 29 22:01:19 2025 GMT
        Subject: CN=cbe6d8e34edd746e8ec09aef3f9761ebf7356fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:37:b4:ff:85:28:46:86:53:a9:46:c5:d5:
                    bb:b6:0c:7a:02:ec:ae:48:c9:81:0e:0b:23:92:49:
                    c5:08:e1:a7:31:4f:92:41:e6:f4:2d:4f:82:82:25:
                    4c:5a:4b:ce:ea:73:68:f3:b6:89:5d:a9:77:94:f5:
                    7f:bc:53:49:b9:24:9a:a4:04:3e:87:0a:88:58:9b:
                    35:02:2c:ba:64:0a:79:9a:4e:53:8b:7a:03:06:5a:
                    40:19:85:68:5e:92:77:ae:fb:0b:1e:0c:82:c8:82:
                    d2:8e:bc:17:41:39:13:39:e6:13:2f:a1:19:8a:dc:
                    50:fd:f9:62:4f:d9:1c:68:3c:33:59:3b:16:9b:fe:
                    03:24:82:88:4e:6c:e1:46:dc:55:9f:c3:24:6a:44:
                    9b:ff:49:1d:d9:71:79:1c:d9:88:e6:90:c7:ab:d7:
                    6a:34:8d:4d:b9:57:92:4e:40:e3:52:1f:26:de:87:
                    3f:2e:ef:ec:3e:58:a1:9c:5c:30:a2:6d:f3:0c:6f:
                    27:3a:75:b1:03:fc:69:81:14:c2:3b:bf:96:ef:03:
                    bf:bb:21:77:22:e2:76:49:e6:53:ff:61:7a:5e:e3:
                    dd:1e:aa:89:6c:51:8c:47:87:8f:f2:93:df:bb:eb:
                    6b:03:d8:36:76:97:25:b5:2f:26:ea:1a:23:a4:74:
                    a9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E6:D8:E3:4E:DD:74:6E:8E:C0:9A:EF:3F:97:61:EB:F7:35:6F:D8
            X509v3 Authority Key Identifier:
                keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:eb:96:e9:be:7e:66:82:d0:f5:54:1d:52:58:c8:07:32:55:
         6b:ea:35:c4:ed:46:ab:60:56:3f:d8:05:2d:bc:de:a0:5d:c9:
         fb:b2:f6:3b:98:bc:35:de:69:96:c4:ac:de:03:39:25:4e:0a:
         34:1d:e0:e6:5f:57:06:83:cd:79:a0:18:d8:84:50:73:57:c9:
         22:9a:bc:95:f8:09:62:59:87:20:44:10:79:9e:3b:41:54:9f:
         7d:4a:73:ef:92:98:49:4b:65:3b:7a:ea:b2:33:20:73:56:32:
         0f:d0:e3:14:4b:16:75:d0:07:35:55:dd:08:08:e4:ff:19:b3:
         62:1e:b4:24:f0:8b:1d:a5:c8:9f:93:f3:92:27:c6:c2:03:dd:
         12:ac:0e:dd:e5:c5:00:4e:54:ee:b4:13:47:9a:ab:19:7d:5b:
         e3:7e:bf:12:72:b6:5b:1e:51:52:e3:3e:a6:1a:ee:f5:b8:d5:
         75:51:8c:6f:58:f3:da:08:93:61:86:db:f4:64:ee:12:1a:7c:
         c8:8d:69:1a:c8:84:fa:0c:42:61:b4:f9:2e:d7:2f:97:47:71:
         c2:59:18:e7:d9:f7:44:20:56:c3:8e:25:44:1b:65:76:79:f2:
         9f:09:0b:0f:39:f9:2b:4e:4d:b2:e5:4f:ea:f9:2a:70:ab:ad:
         94:28:f5:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDfCRE5rBqjKwf+rF+3YbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTA5ZGVlNmZiZGMyNTZkZjkxMTQ2MGNjYzkxNWQwNjZh
OGZmOGIwHhcNMjUwNzI4MjIwMTE5WhcNMjUwNzI5MjIwMTE5WjAzMTEwLwYDVQQD
EyhjYmU2ZDhlMzRlZGQ3NDZlOGVjMDlhZWYzZjk3NjFlYmY3MzU2ZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqE3tP+FKEaGU6lGxdW7tgx6Auyu
SMmBDgsjkknFCOGnMU+SQeb0LU+CgiVMWkvO6nNo87aJXal3lPV/vFNJuSSapAQ+
hwqIWJs1Aiy6ZAp5mk5Ti3oDBlpAGYVoXpJ3rvsLHgyCyILSjrwXQTkTOeYTL6EZ
itxQ/fliT9kcaDwzWTsWm/4DJIKITmzhRtxVn8MkakSb/0kd2XF5HNmI5pDHq9dq
NI1NuVeSTkDjUh8m3oc/Lu/sPlihnFwwom3zDG8nOnWxA/xpgRTCO7+W7wO/uyF3
IuJ2SeZT/2F6XuPdHqqJbFGMR4eP8pPfu+trA9g2dpcltS8m6hojpHSpSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvm2ONO3XRujsCa7z+XYev3NW/YMB8GA1UdIwQY
MBaAFK0Qne5vvcJW35EUYMzJFdBmqP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYt
ZjY2MjZiNjMzODNlLzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYtZjY2MjZiNjMzODNl
LzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeuW6b5+
ZoLQ9VQdUljIBzJVa+o1xO1Gq2BWP9gFLbzeoF3J+7L2O5i8Nd5plsSs3gM5JU4K
NB3g5l9XBoPNeaAY2IRQc1fJIpq8lfgJYlmHIEQQeZ47QVSffUpz75KYSUtlO3rq
sjMgc1YyD9DjFEsWddAHNVXdCAjk/xmzYh60JPCLHaXIn5PzkifGwgPdEqwO3eXF
AE5U7rQTR5qrGX1b436/EnK2Wx5RUuM+phru9bjVdVGMb1jz2giTYYbb9GTuEhp8
yI1pGsiE+gxCYbT5Ltcvl0dxwlkY59n3RCBWw44lRBtldnnynwkLDzn5K05NsuVP
6vkqcKutlCj1xQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:50:40 2025 by rpki-client