Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File:                     R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier:          9HRNkZWAimTkBcVofGbc+RigoO09vaISRBn6/GOnoAY=
Subject key identifier:   D0:51:42:8F:97:CE:D9:B2:83:A2:B2:91:31:D3:E1:7A:EA:91:57:B1
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer:       /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial:       01993048121482E0E8455E96FCA221E12DD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number:          168C
Signing time:             Tue 09 Sep 2025 21:00:53 +0000
Manifest this update:     Tue 09 Sep 2025 21:00:53 +0000
Manifest next update:     Wed 10 Sep 2025 21:00:53 +0000
Files and hashes:         1: 95vGqOrfq-A06Cg8RsHNae6rv14.roa (hash: M+Iqf7FteINIZ68Ce/QsvfRQOwsa3vBIFGqQoKfMdTY=)
                          2: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: ItkoU9z+6EbrTbh32oZI7FgmSkqStgsJJIqm3+cX+VE=)
                          3: YI4k3ENYRJqaDSUhSenx1oLWDr4.roa (hash: /gA7fz8Cy1YxK69gPpp37L8R7jjMwoMYWidH5G4YDU4=)
                          4: j5UDDhxpTv4ushx1mWgWUG65pLw.roa (hash: /0/V6H+X8Ix/QnnafguyBKn8HfbnAIhcS2Wv2jx5XnY=)
                          5: j8PaDOqMy9bnUnm61uhmKRQqO40.roa (hash: az4KYeOww26kcXer0MbYBu03FnI/TiStTGp2SRSz2UQ=)
                          6: jT6NkmL7YzecSayVxKLBX2lYFl0.roa (hash: pN4nTNkxgnBnRMvOcO7lpmhLow3FyCajR2fUpr6WK+o=)
                          7: shVxNeuAvqU2EZg6AvUFKFXrrss.roa (hash: swqDkI/VzYd3AR5PZIZqpbPJTNwO2OZsMXyq7SU+z6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:48:12:14:82:e0:e8:45:5e:96:fc:a2:21:e1:2d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
        Validity
            Not Before: Sep  9 21:00:53 2025 GMT
            Not After : Sep 10 21:00:53 2025 GMT
        Subject: CN=d051428f97ced9b283a2b29131d3e17aea9157b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:aa:2d:e0:8b:59:d4:4f:6a:dc:38:12:50:
                    cc:ee:11:ac:da:82:45:82:df:66:a0:5b:4c:88:1f:
                    e5:c7:59:c2:e3:0d:5e:2c:40:68:ea:46:35:5e:61:
                    9e:81:54:68:b8:fd:96:c2:26:7b:a6:7d:20:22:84:
                    b6:fd:25:80:e1:4a:81:5b:71:17:28:63:23:58:9e:
                    96:ea:22:29:5f:bf:58:dd:cd:11:9c:db:2c:1d:29:
                    cf:0b:76:c9:34:e2:bb:eb:f8:8b:6e:0e:63:7a:b7:
                    d8:36:1a:be:bd:a0:8b:e3:76:91:0f:f2:8f:c2:4c:
                    ab:94:28:90:67:dc:4d:4b:9d:5c:99:93:15:eb:b7:
                    dd:51:79:76:ed:40:d2:79:4c:d5:a3:93:ea:2d:dc:
                    92:1a:98:58:df:6b:45:ca:63:c6:00:20:3c:6f:6f:
                    75:20:e3:3f:3f:37:7d:78:12:95:bd:d6:c8:ba:37:
                    88:c3:b7:93:eb:22:69:a7:b5:20:28:6a:ba:f6:24:
                    32:20:70:71:8c:52:6a:5e:e8:55:b4:7d:5e:42:f3:
                    7f:24:9f:cf:17:63:5d:d1:9e:e5:e0:40:10:22:92:
                    b6:6c:81:f7:39:04:1e:2f:dc:5a:b1:06:a5:ad:79:
                    1d:3f:db:f6:7a:0f:9b:75:e4:ef:a7:fe:72:3a:c1:
                    c3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:51:42:8F:97:CE:D9:B2:83:A2:B2:91:31:D3:E1:7A:EA:91:57:B1
            X509v3 Authority Key Identifier:
                keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:d9:50:9e:9d:4a:f4:a6:de:4c:b3:80:e8:5e:96:00:0e:1e:
         a2:a4:24:c0:42:ab:03:d2:fa:57:6f:32:a6:49:a5:1c:e4:1d:
         ea:7c:af:5c:27:81:e3:ee:ec:7b:be:31:a8:7e:76:35:5f:0b:
         8e:72:2c:7d:53:7b:8a:b1:8e:7a:94:35:af:7b:f5:6b:58:65:
         0c:2c:a2:35:65:c7:a3:f9:6e:75:5f:01:f7:85:f7:53:4c:e8:
         d6:e4:cf:87:73:fc:71:09:04:bd:37:4c:59:4d:3b:27:ae:3c:
         36:e9:ef:11:7c:83:6b:a0:47:95:93:6b:5e:32:c3:c2:5f:00:
         ea:0f:1f:c3:a2:93:6b:4b:cf:37:3c:70:b7:54:41:05:a6:d1:
         a8:bc:53:18:c3:9f:36:f6:f3:16:54:c4:ac:e1:30:7a:2c:aa:
         31:0f:46:5b:88:a2:1c:98:4f:4e:e5:1f:10:1c:07:ce:85:69:
         86:ae:92:33:4c:ea:25:91:a3:fb:33:bb:6d:a3:86:eb:73:08:
         7f:0c:db:57:53:d7:58:a4:58:44:c8:28:cc:73:55:3c:77:82:
         0e:40:8b:df:66:03:67:ac:d8:cb:e7:dd:eb:e0:9b:49:05:d1:
         da:27:ab:89:94:fb:9e:39:ac:54:c9:74:f1:d8:5a:f1:99:5b:
         ff:ad:f8:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwSBIUguDoRV6W/KIh4S3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl
ZDhjMWMwHhcNMjUwOTA5MjEwMDUzWhcNMjUwOTEwMjEwMDUzWjAzMTEwLwYDVQQD
EyhkMDUxNDI4Zjk3Y2VkOWIyODNhMmIyOTEzMWQzZTE3YWVhOTE1N2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWCqLeCLWdRPatw4ElDM7hGs2oJF
gt9moFtMiB/lx1nC4w1eLEBo6kY1XmGegVRouP2WwiZ7pn0gIoS2/SWA4UqBW3EX
KGMjWJ6W6iIpX79Y3c0RnNssHSnPC3bJNOK76/iLbg5jerfYNhq+vaCL43aRD/KP
wkyrlCiQZ9xNS51cmZMV67fdUXl27UDSeUzVo5PqLdySGphY32tFymPGACA8b291
IOM/Pzd9eBKVvdbIujeIw7eT6yJpp7UgKGq69iQyIHBxjFJqXuhVtH1eQvN/JJ/P
F2Nd0Z7l4EAQIpK2bIH3OQQeL9xasQalrXkdP9v2eg+bdeTvp/5yOsHDpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBRQo+Xztmyg6KykTHT4XrqkVexMB8GA1UdIwQY
MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt
YmQ5MGEzZjA2ZTE2LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2
LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAudlQnp1K
9KbeTLOA6F6WAA4eoqQkwEKrA9L6V28ypkmlHOQd6nyvXCeB4+7se74xqH52NV8L
jnIsfVN7irGOepQ1r3v1a1hlDCyiNWXHo/ludV8B94X3U0zo1uTPh3P8cQkEvTdM
WU07J648NunvEXyDa6BHlZNrXjLDwl8A6g8fw6KTa0vPNzxwt1RBBabRqLxTGMOf
NvbzFlTErOEweiyqMQ9GW4iiHJhPTuUfEBwHzoVphq6SM0zqJZGj+zO7baOG63MI
fwzbV1PXWKRYRMgozHNVPHeCDkCL32YDZ6zYy+fd6+CbSQXR2ieriZT7njmsVMl0
8dha8Zlb/634Dg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 22:54:07 2025 by rpki-client