Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
File:                     kW-Aw18gLrAnZkGb-30oISX_4Vg.mft (raw, json)
Hash identifier:          ablioTSSzwyOky8ZeeZcv3ai6QfxZ8NJtHZ5sRyB5bo=
Subject key identifier:   DC:85:DB:10:17:B5:0B:B4:B2:96:66:D0:F4:CD:B5:52:AF:D7:4A:BA
Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
Certificate issuer:       /CN=916f80c35f202eb02766419bfb7d282125ffe158
Certificate serial:       019854FD0933299FA78ADA09A0224730A60F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
Manifest number:          160C
Signing time:             Tue 29 Jul 2025 07:02:05 +0000
Manifest this update:     Tue 29 Jul 2025 07:02:05 +0000
Manifest next update:     Wed 30 Jul 2025 07:02:05 +0000
Files and hashes:         1: Nooohr4P5yKkhRHUp5WOKPpdMDs.roa (hash: yQvSjkqhAqaWpvZ1QnemaJY2V/F+jwI7osUi/29zs8c=)
                          2: kW-Aw18gLrAnZkGb-30oISX_4Vg.crl (hash: IBXeqKcoTY2AoVi/tOa064/yDfQZLuIzRGrjOM6ppno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 07:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:fd:09:33:29:9f:a7:8a:da:09:a0:22:47:30:a6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158
        Validity
            Not Before: Jul 29 07:02:05 2025 GMT
            Not After : Jul 30 07:02:05 2025 GMT
        Subject: CN=dc85db1017b50bb4b29666d0f4cdb552afd74aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:97:5b:32:ed:21:04:29:b6:22:c7:0f:3d:
                    e0:db:ef:52:0a:a5:71:6a:7a:f5:7b:db:c7:38:01:
                    25:f7:83:29:54:75:f8:65:4a:9a:df:7d:e1:51:a4:
                    0b:ff:9e:ce:d1:a6:01:0c:2d:6e:85:98:12:ce:da:
                    b7:58:c9:c1:24:89:75:47:fe:e2:87:42:56:44:73:
                    df:c9:ee:8f:15:e7:5f:c6:66:6e:a8:d2:da:74:42:
                    f9:3f:c4:6b:6b:d1:f8:b4:e3:86:e9:6d:37:e6:7d:
                    7d:16:b2:5c:65:24:2d:31:d7:b7:6b:8d:72:de:13:
                    e2:fe:dc:de:96:7b:c0:3a:3e:73:49:d2:49:d9:03:
                    39:54:30:db:45:b1:b3:41:18:58:23:77:f1:43:e6:
                    7b:dd:72:62:85:5b:55:21:b6:5a:ed:13:07:a2:b1:
                    57:9a:45:a7:22:39:b0:94:f5:6c:de:2e:df:eb:ba:
                    c0:1b:cb:41:90:55:ef:c4:58:16:b8:3c:85:c8:9d:
                    b4:f8:cf:4d:2f:9f:87:96:9a:73:30:02:5a:b6:d9:
                    f6:9a:6b:bf:c9:f0:1b:18:94:15:0f:d0:77:66:63:
                    d9:83:9d:69:30:06:ce:b9:76:e6:ec:ed:ad:15:28:
                    82:18:b4:b1:6b:94:cf:da:35:8b:b1:42:20:19:24:
                    46:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:85:DB:10:17:B5:0B:B4:B2:96:66:D0:F4:CD:B5:52:AF:D7:4A:BA
            X509v3 Authority Key Identifier:
                keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:31:72:23:80:33:0c:1d:2f:28:c0:5e:c4:bd:27:73:f6:0c:
         62:11:99:43:4e:05:e6:07:35:95:d5:8a:22:59:06:9b:21:35:
         48:30:ba:9e:2b:f3:33:d6:48:01:d0:87:c5:ea:d6:20:44:a0:
         61:69:f8:81:e1:37:fd:8f:89:19:9d:e4:7a:29:c1:c6:83:b1:
         a1:b7:04:ec:5d:c7:f6:15:3b:b7:e1:9d:b8:20:a1:fe:98:db:
         b5:36:a6:bf:c8:51:98:f4:78:4f:5e:bd:b0:9f:11:86:3e:33:
         dd:c3:32:1b:d4:b4:ef:10:44:f1:72:0d:a7:6b:25:54:94:9d:
         0e:de:06:61:2d:82:6d:50:c6:ae:b2:a1:3d:7e:0b:2f:25:4f:
         a8:21:54:82:4a:9d:8b:12:51:bd:71:f7:e9:27:db:e5:2e:f2:
         f7:82:57:c5:79:02:04:f1:4a:c9:35:ff:f3:67:f2:32:83:ed:
         67:be:88:7d:0a:0b:93:e7:12:c2:84:bd:84:90:00:af:65:71:
         25:8d:40:da:fb:bf:79:21:dc:5e:67:8d:c4:a4:ea:f2:ee:85:
         f8:f3:69:36:1c:26:05:bc:f8:15:91:79:c6:44:19:29:f4:e4:
         b1:d7:be:b8:93:a0:6f:bb:c7:76:90:e6:a5:42:9d:1e:3d:da:
         62:8f:29:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:41:47 2025 by rpki-client