Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
File:                     R05tfOu9CCEsqMjVka5aBrwDuXg.mft (raw, json)
Hash identifier:          7dh8LAr9paK8lSPoPjqXNiX33gRvKZHhXrJxHrZNdzo=
Subject key identifier:   0E:6F:A3:96:99:B1:FA:63:AB:19:75:73:9F:FD:25:DE:E2:BD:41:97
Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
Certificate issuer:       /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Certificate serial:       0199228D11588F1F468A38EA9FC0A837B4E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 05:01:34 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:34 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:34 +0000
Files and hashes:         1: 55UIdoVHgz_zVQ06ZwTWNV5GXvE.roa (hash: BpKkh7LDQyf6uUNi8iRnAaBEcPZvxWPd4MzDyZiEyPU=)
                          2: R05tfOu9CCEsqMjVka5aBrwDuXg.crl (hash: 2CPie7jtwC1Oft24+kcXsk+n8OSfvcmeEFbQquwe3rI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8d:11:58:8f:1f:46:8a:38:ea:9f:c0:a8:37:b4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
        Validity
            Not Before: Sep  7 05:01:34 2025 GMT
            Not After : Sep  8 05:01:34 2025 GMT
        Subject: CN=0e6fa39699b1fa63ab1975739ffd25dee2bd4197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:b2:de:ba:0f:a0:d3:c1:a5:1a:96:e6:e0:
                    28:be:3c:14:cb:48:ac:1c:c6:8c:86:97:c7:b4:2a:
                    89:c7:ec:2c:de:a0:a4:a1:4a:4b:12:35:fe:8d:6a:
                    34:16:69:da:86:65:e2:32:93:a0:d5:81:ca:bb:1d:
                    05:93:b2:69:d0:f2:f4:d7:a2:ac:aa:5c:c3:d2:55:
                    82:a5:c3:c4:b0:de:89:0c:d4:a0:39:41:ae:96:65:
                    c1:4b:e7:fb:32:b1:52:16:ab:47:4f:77:aa:49:de:
                    df:04:72:97:bd:ba:c8:0a:34:53:e9:ad:e0:72:0d:
                    44:dc:49:74:20:05:f4:81:3e:89:86:38:31:10:d5:
                    68:26:2b:14:de:8b:d3:45:f7:99:4a:d7:b7:d4:0c:
                    cb:de:7e:a9:8a:5e:06:1b:f7:28:23:83:7e:9a:38:
                    bf:55:c4:6c:4a:16:31:95:ca:cf:08:01:46:05:f3:
                    3f:8f:8b:1a:a6:07:99:38:e7:d7:9f:d6:2e:70:00:
                    b3:f9:0a:16:07:6c:df:17:15:c4:e4:9b:98:78:e1:
                    94:f3:d7:8c:c8:38:0e:bb:23:11:3b:ed:7e:88:93:
                    88:0b:ba:d6:2d:83:be:d4:2d:1b:40:c7:9e:c3:32:
                    02:5f:bd:1a:c5:13:46:05:38:22:44:85:24:8b:70:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6F:A3:96:99:B1:FA:63:AB:19:75:73:9F:FD:25:DE:E2:BD:41:97
            X509v3 Authority Key Identifier:
                keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:fd:25:c0:f4:ae:90:77:e6:ba:ed:58:8c:e5:bf:5d:a0:8f:
         27:19:ad:3b:a2:fc:ac:58:13:3b:db:03:33:3b:6a:92:bd:41:
         de:24:12:dc:f5:8c:87:e5:aa:9c:16:6f:af:ee:0d:77:86:5f:
         fd:5e:cb:7c:b6:6b:89:e5:f4:3b:f5:18:93:1b:fb:17:d7:6a:
         cb:ad:a4:2b:99:63:24:c5:18:9d:e1:71:39:57:e3:a4:31:70:
         0c:ec:fa:8c:58:90:30:67:e7:df:8f:92:f4:76:69:ef:ab:34:
         23:36:c7:a3:6c:6d:e1:f6:f7:58:c4:66:4d:b7:4e:d7:43:ad:
         a4:15:17:da:e8:90:30:73:ac:10:ca:3c:da:d2:58:aa:ed:b6:
         ec:b2:04:ad:e0:4a:44:a1:1f:b6:3e:c9:10:5b:02:2b:96:9c:
         28:42:a3:36:36:59:7c:bd:8a:cf:97:37:25:8f:78:63:b1:33:
         f9:ba:53:e7:24:79:f4:d8:ac:71:e2:f0:96:55:f7:bd:da:60:
         7c:11:21:c3:9f:b3:2a:c1:fb:20:a6:f3:f5:ef:f0:1e:fe:f3:
         01:b6:63:e2:9a:a6:ea:a2:84:eb:3b:8a:21:2f:a7:0c:4c:a3:
         cf:d1:c6:59:81:e4:f1:d6:df:4a:72:10:f5:8c:ab:9f:cf:b6:
         3e:48:47:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijRFYjx9Gijjqn8CoN7ThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGU2ZDdjZWJiZDA4MjEyY2E4YzhkNTkxYWU1YTA2YmMw
M2I5NzgwHhcNMjUwOTA3MDUwMTM0WhcNMjUwOTA4MDUwMTM0WjAzMTEwLwYDVQQD
EygwZTZmYTM5Njk5YjFmYTYzYWIxOTc1NzM5ZmZkMjVkZWUyYmQ0MTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvqy3roPoNPBpRqW5uAovjwUy0is
HMaMhpfHtCqJx+ws3qCkoUpLEjX+jWo0FmnahmXiMpOg1YHKux0Fk7Jp0PL016Ks
qlzD0lWCpcPEsN6JDNSgOUGulmXBS+f7MrFSFqtHT3eqSd7fBHKXvbrICjRT6a3g
cg1E3El0IAX0gT6JhjgxENVoJisU3ovTRfeZSte31AzL3n6pil4GG/coI4N+mji/
VcRsShYxlcrPCAFGBfM/j4sapgeZOOfXn9YucACz+QoWB2zfFxXE5JuYeOGU89eM
yDgOuyMRO+1+iJOIC7rWLYO+1C0bQMeewzICX70axRNGBTgiRIUki3BODQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5vo5aZsfpjqxl1c5/9Jd7ivUGXMB8GA1UdIwQY
MBaAFEdObXzrvQghLKjI1ZGuWga8A7l4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjA1dGZPdTlDQ0VzcU1qVmthNWFCcndEdVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80ZTJjNmUtZjc4MS00Mzk0LTk1NjUt
MjljNzUyY2M1OTU2LzEvUjA1dGZPdTlDQ0VzcU1qVmthNWFCcndEdVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS80ZTJjNmUtZjc4MS00Mzk0LTk1NjUtMjljNzUyY2M1OTU2
LzEvUjA1dGZPdTlDQ0VzcU1qVmthNWFCcndEdVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXP0lwPSu
kHfmuu1YjOW/XaCPJxmtO6L8rFgTO9sDMztqkr1B3iQS3PWMh+WqnBZvr+4Nd4Zf
/V7LfLZrieX0O/UYkxv7F9dqy62kK5ljJMUYneFxOVfjpDFwDOz6jFiQMGfn34+S
9HZp76s0IzbHo2xt4fb3WMRmTbdO10OtpBUX2uiQMHOsEMo82tJYqu227LIEreBK
RKEftj7JEFsCK5acKEKjNjZZfL2Kz5c3JY94Y7Ez+bpT5yR59NisceLwllX3vdpg
fBEhw5+zKsH7IKbz9e/wHv7zAbZj4pqm6qKE6zuKIS+nDEyjz9HGWYHk8dbfSnIQ
9Yyrn8+2PkhHOw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:03:59 2025 by rpki-client