Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
File:                     oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json)
Hash identifier:          AwfZ6imWCOx8l+jyZ6jFxCndrrBibuEb9IuV/sw+HWo=
Subject key identifier:   41:C0:69:F5:00:F7:51:BB:11:5C:8B:AD:2F:47:64:D8:83:E1:5A:52
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Certificate issuer:       /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial:       01991DD45C52EE01EB8745FE10A2D8BF3FDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
Manifest number:          166C
Signing time:             Sat 06 Sep 2025 07:01:20 +0000
Manifest this update:     Sat 06 Sep 2025 07:01:20 +0000
Manifest next update:     Sun 07 Sep 2025 07:01:20 +0000
Files and hashes:         1: VpVmsYSCQdNXwRHKQt0NXlzsSG0.roa (hash: E6B6Bl1mDcetd5EsaNvc0boHcTeWIhqXRqGoFPj9kUc=)
                          2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: w/Vr8YmY+G3fFhi7PLUVwBqBflK+5BnJNCLaeR6aWPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1d:d4:5c:52:ee:01:eb:87:45:fe:10:a2:d8:bf:3f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
        Validity
            Not Before: Sep  6 07:01:20 2025 GMT
            Not After : Sep  7 07:01:20 2025 GMT
        Subject: CN=41c069f500f751bb115c8bad2f4764d883e15a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:53:15:f8:0d:07:e9:2e:94:fc:6a:ed:4a:
                    92:d3:76:76:3d:80:ee:4a:13:1f:b9:a5:4a:57:0e:
                    cb:c5:ab:b1:2d:2f:cf:a4:cf:e3:a8:cb:82:31:c5:
                    c6:8b:ce:1c:47:9b:4d:64:bf:6a:5f:d4:9b:6c:a6:
                    5b:fe:71:de:fa:a3:cb:d3:0e:a0:e8:ce:b6:ab:bf:
                    0c:32:e3:e7:8d:f4:8f:a4:a5:0b:c2:67:3b:2a:0d:
                    9e:23:2e:ec:bb:b3:3b:f5:5a:a8:7a:38:dd:6e:36:
                    f8:29:33:d2:0b:fa:74:d3:36:4b:be:4a:b9:8b:2a:
                    e9:a3:9b:b3:0b:a3:54:9f:da:65:2b:b1:18:77:74:
                    fc:6f:d0:fa:e3:3b:04:ec:87:9a:8e:88:b1:b2:8c:
                    77:02:21:b4:36:68:0b:0a:7e:01:77:eb:2c:6e:ce:
                    c7:27:c4:38:5f:78:60:73:41:6f:b6:0c:9c:ae:56:
                    26:38:19:13:76:c5:63:61:fd:cd:76:2a:fc:99:89:
                    a3:05:ee:93:73:47:f7:9a:5c:46:37:56:09:a6:91:
                    c7:dd:55:3d:2e:8e:b4:11:32:13:c4:34:94:33:21:
                    04:d4:55:2a:ee:93:e8:66:73:33:e4:10:b5:d8:be:
                    4d:17:b9:dd:c3:b3:34:7f:11:c5:c4:d8:b4:b6:a1:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C0:69:F5:00:F7:51:BB:11:5C:8B:AD:2F:47:64:D8:83:E1:5A:52
            X509v3 Authority Key Identifier:
                keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:35:e5:cb:02:39:fe:8c:ee:bb:d0:ad:03:52:ee:25:3a:
         f8:8d:2f:0e:91:17:b5:8d:79:b4:c1:26:e5:2f:ed:14:de:4c:
         1a:af:bd:b6:67:e3:e3:16:63:25:4e:44:0e:56:7d:7f:c9:0b:
         8e:95:57:99:98:a7:ca:3f:f3:ee:08:57:55:5d:81:b6:44:fc:
         30:0d:a5:a5:83:70:3f:9c:8e:41:cf:0d:f6:bb:79:e2:16:bf:
         57:85:2c:8c:7a:98:98:1b:b3:8a:5d:21:bf:d0:b7:f9:0b:83:
         c7:f7:83:6b:ae:db:f7:c8:8d:57:e8:06:4d:26:7d:62:99:03:
         1f:06:c5:6c:c1:26:35:c8:29:20:a2:5a:23:d2:6d:52:b7:ec:
         18:05:14:88:41:6a:10:1e:28:e5:6f:44:0a:22:80:66:4f:95:
         01:f2:00:1e:6c:59:00:da:8f:3e:a8:81:4f:d0:ce:bc:d7:a2:
         b6:0e:ad:7a:0a:e5:81:82:75:ea:5d:1a:e5:a7:6d:e1:05:85:
         1b:e6:02:f7:00:f5:79:ae:ff:bd:45:87:37:cf:4d:1c:29:0d:
         77:fc:13:14:f0:dd:e4:57:51:cf:25:7d:d6:76:ed:38:a9:f7:
         43:e0:66:2c:67:bb:b0:2b:15:17:cc:2a:e1:0f:34:1e:bb:28:
         9f:d9:c7:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkd1FxS7gHrh0X+EKLYvz/aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZjI3ZDRmMDY3NjE0YmNiYzI3MDM0NmZhMGQ0NGIxNWY4
MDUxNjMwHhcNMjUwOTA2MDcwMTIwWhcNMjUwOTA3MDcwMTIwWjAzMTEwLwYDVQQD
Eyg0MWMwNjlmNTAwZjc1MWJiMTE1YzhiYWQyZjQ3NjRkODgzZTE1YTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwxTFfgNB+kulPxq7UqS03Z2PYDu
ShMfuaVKVw7LxauxLS/PpM/jqMuCMcXGi84cR5tNZL9qX9SbbKZb/nHe+qPL0w6g
6M62q78MMuPnjfSPpKULwmc7Kg2eIy7su7M79Vqoejjdbjb4KTPSC/p00zZLvkq5
iyrpo5uzC6NUn9plK7EYd3T8b9D64zsE7Ieajoixsox3AiG0NmgLCn4Bd+ssbs7H
J8Q4X3hgc0FvtgycrlYmOBkTdsVjYf3Ndir8mYmjBe6Tc0f3mlxGN1YJppHH3VU9
Lo60ETITxDSUMyEE1FUq7pPoZnMz5BC12L5NF7ndw7M0fxHFxNi0tqH7dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHAafUA91G7EVyLrS9HZNiD4VpSMB8GA1UdIwQY
MBaAFKDyfU8GdhS8vCcDRvoNRLFfgFFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1BKOVR3WjJGTHk4SndORy1nMUVzVi1BVVdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNzMyYTAtZGM2Mi00MzI2LTg1ZTIt
OTM2NTk4ZTAwY2ZlLzEvb1BKOVR3WjJGTHk4SndORy1nMUVzVi1BVVdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNzMyYTAtZGM2Mi00MzI2LTg1ZTItOTM2NTk4ZTAwY2Zl
LzEvb1BKOVR3WjJGTHk4SndORy1nMUVzVi1BVVdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntY15csC
Of6M7rvQrQNS7iU6+I0vDpEXtY15tMEm5S/tFN5MGq+9tmfj4xZjJU5EDlZ9f8kL
jpVXmZinyj/z7ghXVV2BtkT8MA2lpYNwP5yOQc8N9rt54ha/V4UsjHqYmBuzil0h
v9C3+QuDx/eDa67b98iNV+gGTSZ9YpkDHwbFbMEmNcgpIKJaI9JtUrfsGAUUiEFq
EB4o5W9ECiKAZk+VAfIAHmxZANqPPqiBT9DOvNeitg6tegrlgYJ16l0a5adt4QWF
G+YC9wD1ea7/vUWHN89NHCkNd/wTFPDd5FdRzyV91nbtOKn3Q+BmLGe7sCsVF8wq
4Q80Hrson9nHAw==
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:03:30 2025 by rpki-client