Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
File:                     EjDNjhPIbY74NcGqx9X5U0VcA1w.mft (raw, json)
Hash identifier:          O/864KsVzEla9AwFrlZNJ9pxQS0kWhmFF5qMXjm1Tng=
Subject key identifier:   5A:E3:19:BC:25:06:CD:D1:6E:A9:9A:D4:D2:84:97:CC:E1:63:D7:06
Authority key identifier: 12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
Certificate issuer:       /CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Certificate serial:       0198530EDAC7108F291649A4A2A518BE0454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
Manifest number:          160B
Signing time:             Mon 28 Jul 2025 22:02:19 +0000
Manifest this update:     Mon 28 Jul 2025 22:02:19 +0000
Manifest next update:     Tue 29 Jul 2025 22:02:19 +0000
Files and hashes:         1: EjDNjhPIbY74NcGqx9X5U0VcA1w.crl (hash: FEGJn50PZjwJ4Smbq0lrMug6Xa0lMif01TxjouJud5k=)
                          2: EuTRnDRPWoJDEbfoQ9YIxpO9TN0.roa (hash: EVaUNHk2Qu3G8oVzY476ffZKfbJEuXrpbZc/APBPpMk=)
                          3: b8RNw6wNZBUS0XUnxqzLg6D0g_w.roa (hash: AdXDem7YUDKKSd2QGj+mGrBRtmEygT0nynWrGR1dSEY=)
                          4: bQEYESoW6-YfVJJkms0PN9EdFG8.roa (hash: siylmy82T6MgNttjWP9qLukosQqCg2IPyAiFKmhvNyc=)
                          5: vcKt0zOQQ6an75BQh7z38HORZ2w.roa (hash: 0chDeDV60oI3Dqsiz81D+oiboZjN2X2iRmyvKaEriO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0e:da:c7:10:8f:29:16:49:a4:a2:a5:18:be:04:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
        Validity
            Not Before: Jul 28 22:02:19 2025 GMT
            Not After : Jul 29 22:02:19 2025 GMT
        Subject: CN=5ae319bc2506cdd16ea99ad4d28497cce163d706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:81:7c:69:e5:02:b7:62:d1:aa:5f:95:a2:e9:
                    ac:f7:32:3e:4d:09:c3:70:27:cf:43:db:26:64:58:
                    81:75:b8:bd:83:24:ea:b4:5c:5b:b7:f8:8e:ee:44:
                    10:83:6c:50:51:c0:dd:8a:73:e8:95:89:58:d6:23:
                    f0:a6:33:24:b4:48:28:6e:a5:9e:a8:0b:cc:32:ff:
                    fe:cd:d5:71:5f:22:43:9f:d7:f5:fc:b4:14:78:3a:
                    f7:e9:70:c0:f2:51:96:7a:6b:37:e5:6a:95:ca:1e:
                    a9:02:96:89:52:58:f8:f5:dd:be:a4:d0:12:4e:7d:
                    8f:0e:2e:12:6f:24:9f:c7:d6:09:6a:bc:10:72:da:
                    77:e6:0e:1c:62:54:29:56:1d:bb:7c:ce:37:76:93:
                    29:7a:21:97:4f:92:cb:67:b8:29:5e:aa:80:1c:d4:
                    b6:0a:ae:da:82:d2:25:6e:af:e7:1c:f4:54:a5:f1:
                    55:f2:25:f9:5c:52:83:ac:a6:68:c3:84:56:87:33:
                    d3:10:da:5f:45:25:83:ef:a8:b2:9b:9a:2d:42:86:
                    61:e4:14:6c:81:23:fa:3d:64:35:d8:a2:19:98:98:
                    74:a2:89:6d:fc:7d:fe:f1:d4:8c:c9:9a:a7:8d:54:
                    83:c3:87:e8:a6:9c:da:25:85:c2:7c:db:58:6d:ea:
                    3b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E3:19:BC:25:06:CD:D1:6E:A9:9A:D4:D2:84:97:CC:E1:63:D7:06
            X509v3 Authority Key Identifier:
                keyid:12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:9a:5e:7f:3a:a0:a0:de:b7:a1:bd:22:6e:94:c6:44:e4:e7:
         36:3a:0b:23:1b:6a:ea:ad:f7:65:d6:f9:92:fc:24:c4:61:a7:
         78:ae:e3:19:00:72:04:5d:5c:c7:e3:9c:ce:09:da:22:3d:9a:
         c7:10:48:4d:d6:12:5b:73:82:11:42:e7:71:be:3c:29:3e:ae:
         6f:b3:8e:7f:8d:af:ac:25:44:34:31:64:52:bb:02:01:c9:e6:
         e7:a7:c6:06:ea:c1:33:05:76:cc:9f:da:24:84:19:64:a1:c7:
         2b:8b:28:ac:d5:ed:e4:41:4d:40:8b:6c:f2:8c:30:bc:f7:75:
         91:3d:7f:49:a8:5e:30:97:69:6c:bf:9f:c7:ca:27:2e:27:b0:
         62:a1:4d:e1:50:c7:e2:94:07:06:11:3e:39:6b:c5:00:32:d0:
         4b:fe:42:ea:13:9a:59:b2:ea:40:08:db:af:b0:31:db:bb:fa:
         1a:c4:cd:68:00:90:09:09:b7:bf:4f:66:8f:45:76:b1:3e:31:
         38:8d:2b:bd:c5:e9:92:69:4a:6b:e5:8a:79:3c:55:12:a9:1c:
         3e:d2:e8:0c:82:40:6a:53:51:f8:f7:73:e9:41:aa:cd:51:b2:
         7b:9d:e4:81:10:bf:8e:61:d0:03:66:a6:55:96:d4:49:d7:ba:
         96:7e:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:48 2025 by rpki-client