Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
File:                     fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json)
Hash identifier:          aRyYeUcJYE569FK9pHsLATBxX2lfJtE5hG98IZQJIV8=
Subject key identifier:   97:BB:00:1B:17:7F:2B:B7:F6:C8:19:9C:4E:1E:05:CA:EA:BD:94:4E
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Certificate issuer:       /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial:       019921B125CDC386387EB42A3D5614519C8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
Manifest number:          1166
Signing time:             Sun 07 Sep 2025 01:01:21 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:21 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:21 +0000
Files and hashes:         1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: qdiErJ7AcoKbHhhnkrSkv7PiCzqim8czYIBELJ1O6iw=)
                          2: j5qbmBs0_BfbwDwd52YtHtTdhQg.roa (hash: LA1lDjQr1OL9kDtbpIDDn8ilyEOxmrMJjPxRdvdaCKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:25:cd:c3:86:38:7e:b4:2a:3d:56:14:51:9c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
        Validity
            Not Before: Sep  7 01:01:21 2025 GMT
            Not After : Sep  8 01:01:21 2025 GMT
        Subject: CN=97bb001b177f2bb7f6c8199c4e1e05caeabd944e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6b:04:84:28:dd:8c:e2:18:cc:fc:47:c3:7a:
                    b7:0a:07:ed:40:55:c4:d0:52:d3:ed:9c:9e:9c:f4:
                    e3:5e:d6:c3:c9:c9:c9:8d:67:f0:a9:47:41:b3:ae:
                    f5:b1:3c:c4:c9:83:a8:31:63:6d:79:82:83:2b:8a:
                    09:3d:7b:74:00:3b:f8:24:1d:c6:d0:2a:3a:ae:d2:
                    4a:ca:44:ee:91:32:c5:36:b7:90:66:54:0b:ec:e8:
                    38:04:68:0c:39:82:82:cf:6a:50:5b:fd:ce:02:d2:
                    6f:74:80:18:ad:b2:9c:40:0e:75:02:12:aa:f6:eb:
                    b2:34:ba:d7:5f:6c:11:be:8f:7c:3a:d5:fe:6e:d4:
                    4a:6d:8f:27:34:e4:c5:e9:f8:40:54:ea:89:71:15:
                    5f:04:b3:26:dd:7a:32:87:79:a7:17:b0:57:6b:23:
                    f3:37:0d:3d:f1:83:c0:08:36:c8:86:2e:59:40:5d:
                    05:91:ca:21:5b:f7:b9:f0:2c:17:29:77:7d:bd:e8:
                    81:8d:63:9e:90:34:75:eb:09:b3:82:6f:24:26:dd:
                    0b:c7:cd:dc:7d:f6:6b:3c:69:5d:3d:4b:da:e3:73:
                    a4:41:7d:22:42:12:46:27:1f:19:f5:53:9e:b5:42:
                    ca:da:14:c9:9b:5a:b4:62:48:c2:47:72:8c:39:07:
                    c5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BB:00:1B:17:7F:2B:B7:F6:C8:19:9C:4E:1E:05:CA:EA:BD:94:4E
            X509v3 Authority Key Identifier:
                keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:2f:99:da:ec:07:81:52:94:a7:d1:83:e5:34:c6:16:a2:6a:
         1e:dd:9e:ba:3d:3e:4f:3b:e3:67:42:23:02:ff:4f:3b:57:fd:
         d1:32:bb:1d:c6:44:bf:0a:80:ab:25:66:cb:63:ea:d0:c8:a4:
         86:e9:26:0c:e9:ef:89:18:c6:65:31:6f:3e:8f:19:35:b9:28:
         80:82:94:aa:cd:4c:13:9e:30:aa:86:dc:79:98:d6:20:6d:a9:
         ec:7d:ae:ae:07:34:d9:b1:ae:18:9e:0f:1c:1b:ae:bd:f8:69:
         1a:c5:7b:44:fd:bb:11:21:be:ad:27:c9:c0:73:ee:72:6b:03:
         e3:86:c8:59:af:82:52:ca:28:c5:e0:8a:e1:d6:d7:b9:49:0d:
         ce:6f:c1:48:5b:9a:9e:f1:5d:ff:95:fd:07:57:4b:8f:85:2d:
         27:f2:72:48:64:05:a4:57:4d:32:68:f0:6e:6d:29:94:d5:3e:
         66:4d:bb:7c:69:55:2d:92:02:7a:d3:13:fd:f0:51:0a:32:4d:
         da:b4:6f:9c:cc:97:5a:a0:04:dc:7a:98:38:33:73:57:50:1d:
         1c:70:1e:8a:2d:7f:12:ea:4b:d1:53:ff:cd:e2:7e:8c:a5:3e:
         84:4d:5d:8a:f8:e1:aa:98:86:27:90:08:78:86:d5:53:c9:53:
         f2:66:0c:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsSXNw4Y4frQqPVYUUZyLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOGVlNGFmMmZjMWM0ZWMxYjE3NjdlM2QzZjI2MDczMmVk
ZjkxNjkwHhcNMjUwOTA3MDEwMTIxWhcNMjUwOTA4MDEwMTIxWjAzMTEwLwYDVQQD
Eyg5N2JiMDAxYjE3N2YyYmI3ZjZjODE5OWM0ZTFlMDVjYWVhYmQ5NDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWsEhCjdjOIYzPxHw3q3CgftQFXE
0FLT7ZyenPTjXtbDycnJjWfwqUdBs671sTzEyYOoMWNteYKDK4oJPXt0ADv4JB3G
0Co6rtJKykTukTLFNreQZlQL7Og4BGgMOYKCz2pQW/3OAtJvdIAYrbKcQA51AhKq
9uuyNLrXX2wRvo98OtX+btRKbY8nNOTF6fhAVOqJcRVfBLMm3Xoyh3mnF7BXayPz
Nw098YPACDbIhi5ZQF0FkcohW/e58CwXKXd9veiBjWOekDR16wmzgm8kJt0Lx83c
ffZrPGldPUva43OkQX0iQhJGJx8Z9VOetULK2hTJm1q0YkjCR3KMOQfFVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJe7ABsXfyu39sgZnE4eBcrqvZROMB8GA1UdIwQY
MBaAFHyO5K8vwcTsGxdn49PyYHMu35FpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjIt
ODNjMjE1N2JkYWMwLzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjItODNjMjE1N2JkYWMw
LzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnC+Z2uwH
gVKUp9GD5TTGFqJqHt2euj0+TzvjZ0IjAv9PO1f90TK7HcZEvwqAqyVmy2Pq0Mik
hukmDOnviRjGZTFvPo8ZNbkogIKUqs1ME54wqobceZjWIG2p7H2urgc02bGuGJ4P
HBuuvfhpGsV7RP27ESG+rSfJwHPucmsD44bIWa+CUsooxeCK4dbXuUkNzm/BSFua
nvFd/5X9B1dLj4UtJ/JySGQFpFdNMmjwbm0plNU+Zk27fGlVLZICetMT/fBRCjJN
2rRvnMyXWqAE3HqYODNzV1AdHHAeii1/EupL0VP/zeJ+jKU+hE1divjhqpiGJ5AI
eIbVU8lT8mYM3Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:24 2025 by rpki-client