Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
File:                     XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json)
Hash identifier:          9NDGpaxHhDCph1ct6egaNIXt3znmVji0P3+r5umytJ4=
Subject key identifier:   C7:84:53:EE:B9:30:92:91:F9:C4:73:A9:3A:43:55:C7:44:ED:8E:39
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Certificate issuer:       /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial:       019848F72C5F23E8D2B4203C2F48B3795E95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
Manifest number:          160C
Signing time:             Sat 26 Jul 2025 23:00:14 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:14 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:14 +0000
Files and hashes:         1: 1ZFRCjoLi_l_VlnDb8o8tJWIa2E.roa (hash: vVgcWoftvDNuMTcgCwdMnGyQwGXGLdFZoBkxUeU+jcg=)
                          2: LxxlY-veNdEFSuClmgliyHMOZOA.roa (hash: eyCm9s0PQeZ1TTpko+C38z1BbPAWbfE1nA0PWObj7+Q=)
                          3: NqBM7SejbvGbff9d0C8tNNMd9cE.roa (hash: NsdFpCr4tDnCXl/0XE2a5AdGU138fFNht03h3yMplDQ=)
                          4: VxT65LZX5OJbZTHZNAIInJvh5YE.roa (hash: FdPAlwlk9S7n3Fuj8UVdtKrTsnGqgq5r13WKEZND4dA=)
                          5: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: Xi3wiuCQrWyZ1/sntL1YFbbJqTis58zkTAsYmJaWahQ=)
                          6: aa3wYkdpjQEDieV4Tr1D1UlS-yQ.roa (hash: OvNz6w0TsSCTT94cQ7JVYM2YwdlsjARoid2lWLlXj5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:2c:5f:23:e8:d2:b4:20:3c:2f:48:b3:79:5e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
        Validity
            Not Before: Jul 26 23:00:14 2025 GMT
            Not After : Jul 27 23:00:14 2025 GMT
        Subject: CN=c78453eeb9309291f9c473a93a4355c744ed8e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:50:3a:bb:31:f9:43:aa:45:cd:5c:c1:e1:de:
                    41:c5:7e:31:f0:f1:50:93:b9:f3:03:d2:e3:18:bf:
                    96:de:70:35:5b:e7:79:bc:1d:b1:c2:92:82:b7:96:
                    d8:9e:e2:a3:bd:86:8d:3c:a7:0d:11:69:80:4f:ac:
                    21:29:3b:1e:7c:6d:53:d3:a2:fc:db:83:03:b7:7f:
                    33:68:28:66:24:6c:2a:90:f1:81:e7:56:07:c8:cb:
                    07:6c:d3:5a:c6:98:68:e2:3b:cf:0a:eb:a9:d1:9a:
                    1e:46:cd:ee:a8:4b:52:f5:0b:3f:0f:a4:2d:3c:64:
                    06:10:a5:61:1d:17:b7:2b:ff:26:82:9e:61:41:66:
                    c8:c1:b7:d9:37:97:db:3b:9a:aa:7f:e4:aa:59:ef:
                    a4:6d:99:ff:ce:cb:4e:6f:bd:91:9c:72:9a:6a:cf:
                    8f:37:ae:d0:d4:56:85:1c:b3:d6:97:7e:64:1c:c4:
                    84:3b:d3:e0:36:07:5e:a2:2f:90:92:1e:80:8b:b0:
                    f0:5e:50:db:4d:cf:75:37:e9:17:6f:89:21:df:8f:
                    a7:80:f8:10:98:08:4c:53:86:67:fd:9f:3d:bf:ff:
                    bb:56:4f:2d:76:74:56:18:e5:61:7d:fe:c8:b7:20:
                    69:56:83:da:d4:01:b4:29:c5:c7:66:14:58:14:f7:
                    5b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:84:53:EE:B9:30:92:91:F9:C4:73:A9:3A:43:55:C7:44:ED:8E:39
            X509v3 Authority Key Identifier:
                keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d8:11:88:cf:1f:15:d1:66:6e:24:78:52:cd:ba:be:d0:65:
         05:74:85:6c:e9:cb:6e:1f:3b:e7:02:0e:45:e9:9b:09:9b:9f:
         b3:f6:f7:de:75:1a:f0:d6:6f:61:fd:de:84:1f:8e:30:da:fc:
         b9:80:c2:a7:69:14:55:91:78:2e:b8:71:d4:9c:ee:12:00:a2:
         85:e8:e3:06:01:28:fb:56:7e:1d:49:2a:fd:84:87:bd:72:c8:
         e8:b5:41:ae:36:93:a7:e0:f5:19:4c:51:5b:55:89:37:d2:8d:
         44:99:61:5a:aa:9b:a4:0f:15:b1:85:df:ca:9e:21:15:6c:8d:
         14:13:42:67:2f:5d:f2:8d:1e:69:7d:8a:35:39:69:1a:97:00:
         32:a0:11:12:75:8e:44:aa:fa:c5:a4:65:09:02:c8:6f:b0:28:
         b4:9b:67:e1:da:23:6a:31:20:20:25:1b:d1:6a:e0:13:af:b9:
         f3:7e:ce:43:28:c8:f2:e8:26:66:b6:68:43:91:1a:64:c0:cb:
         94:40:68:1a:01:22:a8:43:2e:70:8d:8b:27:b8:6b:a4:be:68:
         51:b8:ec:2b:b8:bb:04:61:35:07:3e:33:93:d6:55:b7:7c:55:
         33:52:d5:37:82:56:25:ca:2f:64:a2:d8:cb:eb:55:80:36:7f:
         0c:81:85:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:19 2025 by rpki-client