Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
File:                     jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft (raw, json)
Hash identifier:          E+kmRPprDmk1/RIhDtIP3uDRfvG3JA1MZPnz9BO4zB8=
Subject key identifier:   04:12:DE:9F:01:72:7D:4E:F7:5B:A9:63:E5:8E:C9:40:DF:41:12:AD
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Certificate issuer:       /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial:       019853B1B2D1B02A09D0A5823C4AC4086FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
Manifest number:          160D
Signing time:             Tue 29 Jul 2025 01:00:11 +0000
Manifest this update:     Tue 29 Jul 2025 01:00:11 +0000
Manifest next update:     Wed 30 Jul 2025 01:00:11 +0000
Files and hashes:         1: RqtwSOLfZXCtT6i-iXJPBXlS-Tw.roa (hash: x++OoIBpOVlhu2bDSyq/BzG7LV3g3RGN/EJ/KyFGWbM=)
                          2: XKepb_otZzL7k3ZMkl3G2IMgCSU.roa (hash: W9mkN91xRU3+fkW8j4EQwJJwcHraAc/r3I+DAJzdLtk=)
                          3: f_hutObJVKzz6DlV5Z0Llo7x9Mo.roa (hash: EtfvCVNkvIMaBjs3btihMYeczz7+WNuxXv7JAgL/tcs=)
                          4: iaU8sQHpBoTYxwRTPRlwZtUJd5I.roa (hash: IaAKm54QKxYLazRG6lIcABBh26piQgK4yLfNw8crUL0=)
                          5: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl (hash: j977pjVe1hTrSMAC1EoogeDPve7H23vwPBkk4k6w1EI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:b1:b2:d1:b0:2a:09:d0:a5:82:3c:4a:c4:08:6f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
        Validity
            Not Before: Jul 29 01:00:11 2025 GMT
            Not After : Jul 30 01:00:11 2025 GMT
        Subject: CN=0412de9f01727d4ef75ba963e58ec940df4112ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:f0:a4:c6:80:1f:95:e8:69:17:45:44:c9:
                    40:3c:42:0b:b6:39:58:88:0c:44:34:c2:07:24:f6:
                    cb:1e:46:59:bd:47:5a:79:07:4b:3e:d6:1c:3f:28:
                    06:f4:d8:91:46:ac:9a:f0:c2:9f:67:26:f3:cb:30:
                    34:7e:eb:48:1b:6c:b9:84:b2:c7:e8:96:f3:01:f0:
                    70:9e:11:ad:49:f4:42:d0:f7:01:e7:63:d5:e5:a9:
                    23:eb:be:54:00:fd:1c:7a:20:3b:df:6e:e0:79:32:
                    5c:53:88:a6:53:01:a5:9b:1a:8e:23:50:10:41:2e:
                    e2:c4:03:82:3e:d7:a0:c6:65:9b:74:2b:45:c4:5a:
                    49:d3:4a:2d:fe:8c:81:4c:89:a6:75:80:cf:69:48:
                    26:7e:1a:da:b8:9f:14:1d:1d:04:be:68:b8:b1:ee:
                    18:e0:43:16:62:7d:bc:67:c4:3c:19:6b:15:af:b4:
                    c2:cc:36:82:4d:65:e3:94:87:8d:df:80:f8:6e:89:
                    1b:18:b6:1a:41:bb:f0:b1:9b:fe:dd:48:cc:68:96:
                    be:3a:52:9e:af:1f:c5:af:d2:ef:21:c6:b0:d8:3a:
                    87:a5:99:97:35:7f:91:9f:e0:90:84:19:14:44:94:
                    a1:a3:47:57:15:34:cb:ee:1b:25:3e:93:82:3a:3b:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:12:DE:9F:01:72:7D:4E:F7:5B:A9:63:E5:8E:C9:40:DF:41:12:AD
            X509v3 Authority Key Identifier:
                keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:65:bb:6d:cc:01:59:a2:d9:fc:cd:82:fb:de:e6:8c:62:cb:
         08:0e:ff:a7:b2:73:bd:9f:ba:85:28:10:73:cd:7f:00:4d:a1:
         a1:ba:d1:78:2f:d2:32:f0:b5:89:1a:2c:3d:b4:73:d2:1a:1b:
         eb:ab:cb:e3:8e:9e:fb:68:24:dd:b3:c0:87:cd:5d:0d:f4:79:
         4c:59:76:3f:5b:29:87:71:fe:a9:98:e1:02:95:22:ba:fd:36:
         3a:d0:df:b6:a7:90:83:71:23:8d:31:0b:cd:70:79:0f:af:d5:
         97:01:00:26:06:1d:46:41:13:bc:af:49:8d:30:1d:f5:54:cb:
         85:15:91:a3:31:74:60:c5:c2:27:4f:65:e7:59:e4:89:c4:b3:
         f8:90:f9:79:e8:45:6b:41:97:bd:91:69:b9:3f:ac:cb:9b:5c:
         d6:1c:2a:02:0d:dc:e2:d0:06:d3:1f:85:c0:e0:70:ac:9f:5f:
         eb:37:46:bb:3d:44:df:45:a8:ea:02:a1:f6:31:0f:29:23:83:
         6c:1b:09:a7:0e:86:ff:82:01:7d:fd:a7:21:55:04:a4:a3:60:
         88:85:65:c3:d5:a8:aa:79:0b:7b:44:8f:f9:08:15:a2:43:c5:
         e1:93:7b:8e:a1:5b:6e:ae:54:48:d4:98:00:6e:f3:ec:2a:de:
         48:2b:b5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:07:06 2025 by rpki-client