Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File:                     nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier:          nq4JVygamnW5H3EDN6RWN03MpUdDOvdShmanECxvgcY=
Subject key identifier:   87:6C:B1:24:53:71:C9:F5:C5:0D:D4:78:DF:E0:35:5B:82:08:B3:47
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer:       /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial:       01995BD7F4E8A9D1269C52D0E328EB9A28AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number:          166E
Signing time:             Thu 18 Sep 2025 08:01:43 +0000
Manifest this update:     Thu 18 Sep 2025 08:01:43 +0000
Manifest next update:     Fri 19 Sep 2025 08:01:43 +0000
Files and hashes:         1: 7OjUVrWvd7B0o85DaKLfYgEDYYg.roa (hash: ElsP3+WGZy5wELbMJiGSwWwzyGB160S3FayAOyAR3A0=)
                          2: 8fw2tBPm8-dk07FF86WEj68NsSM.roa (hash: 9R57W9brfUx0SayL8ULp3+gRula33F2inaK6dFDPaew=)
                          3: JUWn6tZ6js3OQBG2kVmBzCYaASs.roa (hash: ZWaMncDoxletMNjHKIW8FwbEakDn9YubUJeGI0AcYdQ=)
                          4: miGTaFk5Cl8OYVzdHPitg-4uIW0.roa (hash: AGqT78lBpkV9yA91ZQMLyqGPYCLhxFGELYf24q65eEw=)
                          5: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: Si9HNjN6LN0EFboL24HgJQqByMcqswom/QQP2MAHGQk=)
                          6: q06qTUv5-JCRpItbJ_9COQqHH6A.roa (hash: elj4UEL+GeLcIcxtH4+ahp+BuvQR4jhMQkNkTFsz2eM=)
                          7: zn7RiYTFSuY_H6EW4hkd0ugXhg4.roa (hash: TjPxbEKTKC4G0EExaKEE++vAM3LyoGQfvbpHNfpM9R0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 08:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5b:d7:f4:e8:a9:d1:26:9c:52:d0:e3:28:eb:9a:28:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
        Validity
            Not Before: Sep 18 08:01:43 2025 GMT
            Not After : Sep 19 08:01:43 2025 GMT
        Subject: CN=876cb1245371c9f5c50dd478dfe0355b8208b347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:aa:e9:d7:a7:fc:be:77:c1:07:b0:30:5a:bb:
                    d2:b1:8b:45:28:e3:41:d3:d1:fc:fb:06:28:9b:ea:
                    21:3e:42:e7:aa:3d:05:89:f1:c1:f6:af:12:cb:de:
                    8f:4c:fe:65:6e:6f:5c:83:cb:4b:73:61:7b:0b:0b:
                    fb:03:9a:c8:24:5e:4c:91:9c:de:ab:a8:c4:84:7c:
                    56:2c:80:e4:89:de:df:7c:c4:ec:d6:a2:fb:5d:ea:
                    f0:06:2b:92:f4:66:99:80:6d:66:c5:b0:f6:45:6e:
                    4c:07:7d:c0:8c:8a:fb:ae:39:b1:34:c6:c3:83:f4:
                    63:99:ec:90:4a:02:7f:62:ec:16:9f:1f:c5:3e:fc:
                    ef:d6:00:38:6a:a2:b2:be:7a:1d:a3:5a:97:43:3c:
                    2e:27:89:7d:d4:9a:e6:dc:3b:5f:85:81:b0:55:3f:
                    c3:8b:fc:ff:6c:84:36:d8:24:a4:f3:34:0f:5e:24:
                    23:ee:54:a8:a4:2d:ff:58:cd:11:26:0d:da:fc:a1:
                    90:32:9b:5e:2d:19:35:6a:9b:af:cd:89:e7:c2:10:
                    71:e1:ef:53:94:ba:80:20:1b:f4:f9:5f:d9:a4:8c:
                    ec:a8:cd:42:df:a1:81:3d:a7:58:20:8a:eb:e3:ef:
                    83:84:82:87:25:70:0a:76:90:be:1a:9e:29:00:10:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6C:B1:24:53:71:C9:F5:C5:0D:D4:78:DF:E0:35:5B:82:08:B3:47
            X509v3 Authority Key Identifier:
                keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a6:a5:c2:db:27:01:24:2b:0f:f6:57:b7:57:5a:f2:61:23:
         0f:42:81:46:34:d7:0e:98:e8:29:d2:ed:86:8b:b0:51:39:5b:
         74:58:2a:81:9c:6b:98:f9:d1:ba:a3:8c:00:d3:ec:39:08:da:
         14:fb:96:51:f0:df:a2:d3:4f:e0:21:2e:2d:41:92:18:65:46:
         3c:23:90:91:16:95:2f:b7:90:9c:df:4d:90:b8:c3:44:c6:50:
         b8:2f:6a:9d:b7:02:94:78:95:0e:88:67:55:4c:2a:c3:9d:66:
         78:4a:a0:38:cd:f9:39:d9:a7:01:68:4e:7f:9f:99:60:4d:17:
         92:90:89:aa:d3:49:ec:bb:d9:05:68:bb:a6:9d:84:8b:ad:ef:
         15:60:c3:f2:0c:cf:0a:a3:a6:6c:da:a3:06:b3:f1:7c:e6:66:
         09:08:4a:6a:02:dc:73:28:a6:d4:18:8c:cf:ce:bc:e3:96:5a:
         2a:a5:4e:63:92:62:5a:41:91:73:4f:99:c6:a9:44:77:30:5e:
         c6:69:64:8a:55:96:8d:6e:4a:c3:0d:aa:7b:8c:29:1b:eb:4e:
         8e:dc:4b:3d:2e:45:80:9c:23:e6:3a:64:ef:d4:fc:31:46:64:
         f4:5c:65:cc:7b:57:84:e1:c0:91:c8:0c:2b:d6:83:2c:bf:e3:
         dd:22:cf:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlb1/ToqdEmnFLQ4yjrmiiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNmNGNiNGJhYjVjMTA4MDFhNzcwNjU4ZGY4OTFjZmI4
YzY4YzYwHhcNMjUwOTE4MDgwMTQzWhcNMjUwOTE5MDgwMTQzWjAzMTEwLwYDVQQD
Eyg4NzZjYjEyNDUzNzFjOWY1YzUwZGQ0NzhkZmUwMzU1YjgyMDhiMzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+qrp16f8vnfBB7AwWrvSsYtFKONB
09H8+wYom+ohPkLnqj0FifHB9q8Sy96PTP5lbm9cg8tLc2F7Cwv7A5rIJF5MkZze
q6jEhHxWLIDkid7ffMTs1qL7XerwBiuS9GaZgG1mxbD2RW5MB33AjIr7rjmxNMbD
g/RjmeyQSgJ/YuwWnx/FPvzv1gA4aqKyvnodo1qXQzwuJ4l91Jrm3DtfhYGwVT/D
i/z/bIQ22CSk8zQPXiQj7lSopC3/WM0RJg3a/KGQMpteLRk1apuvzYnnwhBx4e9T
lLqAIBv0+V/ZpIzsqM1C36GBPadYIIrr4++DhIKHJXAKdpC+Gp4pABBX1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdssSRTccn1xQ3UeN/gNVuCCLNHMB8GA1UdIwQY
MBaAFJ0j9MtLq1wQgBp3BljfiRz7jGjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODkt
MDE1NzdhOTI3ZmE5LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODktMDE1NzdhOTI3ZmE5
LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaalwtsn
ASQrD/ZXt1da8mEjD0KBRjTXDpjoKdLthouwUTlbdFgqgZxrmPnRuqOMANPsOQja
FPuWUfDfotNP4CEuLUGSGGVGPCOQkRaVL7eQnN9NkLjDRMZQuC9qnbcClHiVDohn
VUwqw51meEqgOM35OdmnAWhOf5+ZYE0XkpCJqtNJ7LvZBWi7pp2Ei63vFWDD8gzP
CqOmbNqjBrPxfOZmCQhKagLccyim1BiMz86845ZaKqVOY5JiWkGRc0+ZxqlEdzBe
xmlkilWWjW5Kww2qe4wpG+tOjtxLPS5FgJwj5jpk79T8MUZk9FxlzHtXhOHAkcgM
K9aDLL/j3SLPtw==
-----END CERTIFICATE-----
Generated at Thu Sep 18 12:25:39 2025 by rpki-client