Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
File:                     0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json)
Hash identifier:          ISz424dkaZXqLLxia7i6qbvxNvLNIRFBjaf8f8ekrHk=
Subject key identifier:   59:45:F9:92:61:65:38:33:35:44:35:63:80:95:D2:3C:8B:4A:90:75
Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
Certificate issuer:       /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Certificate serial:       0199228C52CF163A35144B8F8E33695F0193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 05:00:45 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:45 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:45 +0000
Files and hashes:         1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: UkL9su7BIY+l4T4B3yJuVD+z/YAJ6xW2DtPU68jKaxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:52:cf:16:3a:35:14:4b:8f:8e:33:69:5f:01:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
        Validity
            Not Before: Sep  7 05:00:45 2025 GMT
            Not After : Sep  8 05:00:45 2025 GMT
        Subject: CN=5945f99261653833354435638095d23c8b4a9075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:6a:74:c3:e6:b8:9e:56:61:7b:19:a1:4d:
                    54:12:15:00:9e:a7:6c:eb:d2:73:20:8a:4c:0f:c3:
                    0a:cf:89:18:de:c6:6b:f2:04:47:51:72:92:be:69:
                    2d:59:53:37:a9:33:5d:cc:9f:15:c1:84:d4:4b:27:
                    ab:3f:f7:d5:31:6b:fc:93:f2:f4:59:ca:05:5f:b0:
                    db:35:03:1f:b9:5b:ca:15:19:45:03:a0:d5:d5:7f:
                    08:86:ab:90:29:af:9d:74:1f:e2:64:39:9f:28:f0:
                    90:6b:75:4d:ba:69:09:41:f4:45:93:e1:2a:eb:d5:
                    e5:b6:24:f5:a9:c5:ac:41:a4:6b:6b:28:7c:9a:af:
                    2a:83:34:e0:17:59:cc:87:dd:86:10:06:89:14:e9:
                    78:81:3e:b3:bd:d8:ba:3d:c3:41:bc:4f:67:4a:71:
                    b7:63:eb:44:9d:5b:0c:27:9f:8c:0e:83:68:09:3f:
                    aa:83:73:ca:a3:19:95:83:34:5e:38:34:da:0c:bd:
                    ca:bd:20:e9:c5:7c:74:9c:45:38:c6:78:0b:5d:37:
                    22:21:bf:d7:df:9d:7c:44:66:37:7c:7c:dd:62:42:
                    cd:38:8c:10:0b:41:80:ca:cd:a8:36:7b:1c:c8:af:
                    ee:9e:01:f3:2a:df:e4:b3:d7:e9:69:15:22:66:b2:
                    36:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:45:F9:92:61:65:38:33:35:44:35:63:80:95:D2:3C:8B:4A:90:75
            X509v3 Authority Key Identifier:
                keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b7:7b:41:27:f6:2d:7f:63:c4:63:1a:d5:57:4f:c8:09:b9:
         15:50:ac:46:ad:4b:10:8c:ad:2c:c5:70:a8:44:cb:ba:6b:b1:
         dd:99:29:f8:38:e9:f0:b7:f9:e1:37:34:c8:61:46:a7:44:81:
         6e:c6:a4:9c:e1:1b:70:50:36:16:d3:a9:d6:16:69:3e:39:05:
         f9:e9:47:fb:5e:f3:3b:f4:d2:81:50:6a:8c:d8:c3:f3:76:82:
         36:1f:e4:60:73:73:f2:16:f1:72:2d:8d:47:c7:f6:b3:91:d4:
         49:62:a4:d0:8b:96:c7:09:0a:7e:4c:70:9a:98:45:14:88:4d:
         9a:b1:84:58:30:74:0d:35:94:03:f2:a8:7b:63:d5:5d:4b:f0:
         fb:f0:d1:b8:90:d0:32:aa:b8:8b:5f:2a:81:85:8f:58:d1:cc:
         e8:84:b5:b4:b1:58:ac:b1:cf:b3:d1:ce:88:a0:8f:1a:65:48:
         1e:fc:76:a4:c3:d3:df:d5:15:65:b4:d7:6a:87:50:d4:f4:c8:
         41:a2:b7:08:41:67:39:12:d4:44:65:9e:b0:11:bb:e3:d4:d3:
         59:44:2c:a1:64:48:4f:7f:b6:45:75:69:c1:c0:6c:0c:44:25:
         38:3e:ce:7f:0a:30:db:26:26:5f:f6:8a:88:a4:14:74:2b:92:
         bf:e0:e0:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijFLPFjo1FEuPjjNpXwGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjU3ZjU5NzgyZjk0MWI1ZDJlYjNkNDI4NmQ1OTExYjE3
OWUwMDYwHhcNMjUwOTA3MDUwMDQ1WhcNMjUwOTA4MDUwMDQ1WjAzMTEwLwYDVQQD
Eyg1OTQ1Zjk5MjYxNjUzODMzMzU0NDM1NjM4MDk1ZDIzYzhiNGE5MDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya5qdMPmuJ5WYXsZoU1UEhUAnqds
69JzIIpMD8MKz4kY3sZr8gRHUXKSvmktWVM3qTNdzJ8VwYTUSyerP/fVMWv8k/L0
WcoFX7DbNQMfuVvKFRlFA6DV1X8IhquQKa+ddB/iZDmfKPCQa3VNumkJQfRFk+Eq
69XltiT1qcWsQaRrayh8mq8qgzTgF1nMh92GEAaJFOl4gT6zvdi6PcNBvE9nSnG3
Y+tEnVsMJ5+MDoNoCT+qg3PKoxmVgzReODTaDL3KvSDpxXx0nEU4xngLXTciIb/X
3518RGY3fHzdYkLNOIwQC0GAys2oNnscyK/ungHzKt/ks9fpaRUiZrI2ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlF+ZJhZTgzNUQ1Y4CV0jyLSpB1MB8GA1UdIwQY
MBaAFNK1f1l4L5QbXS6z1ChtWRGxeeAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3Yjct
MDdjYjIyYmY0MjRkLzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3YjctMDdjYjIyYmY0MjRk
LzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbd7QSf2
LX9jxGMa1VdPyAm5FVCsRq1LEIytLMVwqETLumux3Zkp+Djp8Lf54Tc0yGFGp0SB
bsaknOEbcFA2FtOp1hZpPjkF+elH+17zO/TSgVBqjNjD83aCNh/kYHNz8hbxci2N
R8f2s5HUSWKk0IuWxwkKfkxwmphFFIhNmrGEWDB0DTWUA/Koe2PVXUvw+/DRuJDQ
Mqq4i18qgYWPWNHM6IS1tLFYrLHPs9HOiKCPGmVIHvx2pMPT39UVZbTXaodQ1PTI
QaK3CEFnORLURGWesBG749TTWUQsoWRIT3+2RXVpwcBsDEQlOD7Ofwow2yYmX/aK
iKQUdCuSv+DgfQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:27 2025 by rpki-client