Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File:                     nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier:          YMWbI9qT0lJsh5npQLO8qeUh7vSWx1bYRjHn48q2hQI=
Subject key identifier:   A0:67:5C:55:F7:7E:4F:BC:DB:FA:65:E9:B7:60:AC:C9:AD:0D:92:BE
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer:       /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial:       01984A415E5EC2607C3FAA5A106886D03C98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number:          160C
Signing time:             Sun 27 Jul 2025 05:00:54 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:54 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:54 +0000
Files and hashes:         1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=)
                          2: atuec3UTPwJqa2nbFVc6PceCm_U.roa (hash: mxjn4P2BAxt4/rhflGcv4gtLgmXNo6T8LNPaEGy8CeQ=)
                          3: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=)
                          4: lnxBICiuOhb0S2Ss6UKdeHcB0oo.roa (hash: hdI3xj2P7Sjw6pCwaS0Na+6UrppqSPkWbMvSGZ4mxkQ=)
                          5: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: HoBqWInwPU1E5nBOPtfPNNHAk2V5m3wrGWA/Ew/lzsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:5e:5e:c2:60:7c:3f:aa:5a:10:68:86:d0:3c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
        Validity
            Not Before: Jul 27 05:00:54 2025 GMT
            Not After : Jul 28 05:00:54 2025 GMT
        Subject: CN=a0675c55f77e4fbcdbfa65e9b760acc9ad0d92be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:82:d2:31:11:25:e0:f5:a7:35:a8:06:10:
                    a1:67:96:62:63:f5:07:87:2d:cc:64:25:fe:ed:28:
                    19:ca:09:4f:a8:a9:52:f1:08:0e:bf:90:f9:a9:e6:
                    ae:d8:d1:54:4d:85:9d:c0:ae:26:22:21:f7:29:64:
                    48:7b:4a:eb:a2:d1:5c:06:58:f6:0a:f0:81:b3:c2:
                    c5:8a:5f:c9:6f:ff:32:78:d9:f6:26:0f:c8:54:99:
                    10:d4:17:0a:bb:96:4a:56:d0:77:19:fb:97:59:07:
                    67:57:33:3d:80:9a:5a:ea:56:40:ce:61:7c:75:0c:
                    f6:e5:58:d2:9c:40:18:65:0e:70:c9:42:24:77:2a:
                    71:be:d6:dd:b6:2d:04:a5:d5:8c:2d:a8:61:24:ec:
                    2d:81:1a:27:72:7c:cf:da:67:cb:7b:91:04:87:ba:
                    12:ee:0e:9e:5b:8c:57:2d:03:cb:91:61:c6:5f:15:
                    e1:f5:4a:e3:f7:e1:fd:74:e7:b0:e1:b0:16:f3:5a:
                    8a:4d:4d:16:37:f5:c4:49:67:8f:2e:e7:2b:a8:7f:
                    53:01:7c:a9:0a:41:57:65:97:34:aa:d6:7e:40:2f:
                    d5:86:fa:4b:26:d5:07:99:a9:58:34:3a:08:a8:dc:
                    b4:1e:1a:9a:39:12:0a:77:23:88:db:76:ee:38:c0:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:67:5C:55:F7:7E:4F:BC:DB:FA:65:E9:B7:60:AC:C9:AD:0D:92:BE
            X509v3 Authority Key Identifier:
                keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:00:b4:3e:7c:8e:23:cc:f5:0e:2e:41:8c:7d:d0:dc:49:0b:
         6c:6c:cb:3d:e8:8e:5f:7f:e7:a4:ad:d4:f3:8b:9e:cb:c0:c9:
         f6:cd:81:f4:13:20:26:f9:fd:4e:24:06:4c:3b:50:ee:6f:e7:
         1d:63:ba:25:84:c2:9a:0b:30:b3:da:1f:15:a1:86:c4:95:99:
         36:0b:57:42:95:a9:f4:ed:38:e3:83:c4:ba:f2:0b:59:e8:48:
         45:da:ac:fb:06:92:14:d5:67:0f:4a:61:a7:c0:45:5f:10:a7:
         64:ed:22:51:68:57:e6:13:d4:b1:ed:da:4e:93:3b:6a:2e:20:
         35:98:a8:17:19:06:e9:f6:35:c2:96:3c:28:99:32:16:5b:f0:
         5d:ae:ee:d2:ac:7d:71:05:dc:67:05:4a:a5:95:4e:e2:64:06:
         05:d9:06:0b:08:f4:d3:3a:06:5a:92:e9:32:e3:65:fa:f4:8c:
         68:7e:50:28:b4:d4:ab:41:5c:23:2e:cd:93:39:7f:ec:c4:83:
         2a:82:b1:81:b1:ac:5b:04:d4:64:48:50:41:e7:66:c5:02:05:
         ce:07:84:a5:3e:18:14:6b:d0:7b:e9:28:3a:6d:33:96:9e:e6:
         6d:9d:79:e7:0d:be:d9:91:a2:c1:8f:1c:90:77:0e:6a:2d:da:
         d9:af:54:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQV5ewmB8P6paEGiG0DyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjUwNzI3MDUwMDU0WhcNMjUwNzI4MDUwMDU0WjAzMTEwLwYDVQQD
EyhhMDY3NWM1NWY3N2U0ZmJjZGJmYTY1ZTliNzYwYWNjOWFkMGQ5MmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGqC0jERJeD1pzWoBhChZ5ZiY/UH
hy3MZCX+7SgZyglPqKlS8QgOv5D5qeau2NFUTYWdwK4mIiH3KWRIe0rrotFcBlj2
CvCBs8LFil/Jb/8yeNn2Jg/IVJkQ1BcKu5ZKVtB3GfuXWQdnVzM9gJpa6lZAzmF8
dQz25VjSnEAYZQ5wyUIkdypxvtbdti0EpdWMLahhJOwtgRoncnzP2mfLe5EEh7oS
7g6eW4xXLQPLkWHGXxXh9Urj9+H9dOew4bAW81qKTU0WN/XESWePLucrqH9TAXyp
CkFXZZc0qtZ+QC/VhvpLJtUHmalYNDoIqNy0HhqaORIKdyOI23buOMDAAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBnXFX3fk+82/pl6bdgrMmtDZK+MB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwC0PnyO
I8z1Di5BjH3Q3EkLbGzLPeiOX3/npK3U84uey8DJ9s2B9BMgJvn9TiQGTDtQ7m/n
HWO6JYTCmgsws9ofFaGGxJWZNgtXQpWp9O0444PEuvILWehIRdqs+waSFNVnD0ph
p8BFXxCnZO0iUWhX5hPUse3aTpM7ai4gNZioFxkG6fY1wpY8KJkyFlvwXa7u0qx9
cQXcZwVKpZVO4mQGBdkGCwj00zoGWpLpMuNl+vSMaH5QKLTUq0FcIy7Nkzl/7MSD
KoKxgbGsWwTUZEhQQedmxQIFzgeEpT4YFGvQe+koOm0zlp7mbZ155w2+2ZGiwY8c
kHcOai3a2a9U5Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:36:38 2025 by rpki-client