Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File:                     OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier:          F1LoegyL+iDvkIYQUnBgPsk451nFTp0Fx4CMw+S/+V4=
Subject key identifier:   F7:9B:5A:52:FA:CA:C3:93:5A:A7:CE:84:13:7B:0E:1F:65:1B:87:FE
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer:       /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial:       01984AAEA7B21DB1188C9F32151B5B239E99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number:          160B
Signing time:             Sun 27 Jul 2025 07:00:16 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:16 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:16 +0000
Files and hashes:         1: 3bo1_VmMil_ykLbPMkJbRag9ebw.roa (hash: 7RqP40Y7gY2KH0eL1Md3M9TCvHi+FVAYp4Z84nyqF5I=)
                          2: 76T3wUVzKrccOze-NEOdu7-TKxc.roa (hash: 0jI/L5T33OWVMZBqU9OicvpSu2R8kTlL46/YK1PJ/4A=)
                          3: DistZ3VDkIUvSA_5uNuXIQPOXPQ.roa (hash: kpTlHHw5FsxD4697vv8Q+YHIpuXKVuz/l4Fu6lFpvJY=)
                          4: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: OAI/FmBF5pjakgiKSuJ7RrmF8BRk2v3toSDQB5lx5/k=)
                          5: SWMQOyTGATFbPpkUlNDEK9R_wf8.roa (hash: 7EyjDFKkXOO8nAJj/SWkoOh1Lc7HdnR9vXAWI1FbOGc=)
                          6: b5nAqkkbKBuuBF130kEHNP2qdVo.roa (hash: jUduPFl66e708dXNBc3a1/JM6+tcz9eKKz+qAjUZvhI=)
                          7: f_cRzhAwjQsRWIpABQIN6zrQUL4.roa (hash: zcaLl6mU3qlNMRBKmml1zlcCseGH1tjLvTej/h7Zeow=)
                          8: lbQJ2rq_BHyJF6s2vYGbT2GOaEI.roa (hash: aJ2Q0VP1V764a0H8xEOx6D+4ZkJqxXjOkmvFmOkcjng=)
                          9: u5j-w6koTI1w-MwveI_x0rT-ay0.roa (hash: gQTgZPcEOXTFI4ML0tCh67l8MTBl09iBxAa1VarPhx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:a7:b2:1d:b1:18:8c:9f:32:15:1b:5b:23:9e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
        Validity
            Not Before: Jul 27 07:00:16 2025 GMT
            Not After : Jul 28 07:00:16 2025 GMT
        Subject: CN=f79b5a52facac3935aa7ce84137b0e1f651b87fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:37:f6:53:ab:94:42:cf:9c:ad:3d:19:f7:
                    76:06:4e:c0:b9:a7:6a:25:c5:58:b3:c5:4d:97:e0:
                    dc:a9:b7:62:07:86:1d:dc:67:12:99:bb:98:f8:17:
                    31:52:02:d4:c5:81:8e:81:51:15:c6:cf:52:84:01:
                    a7:0b:8a:de:f4:84:95:96:02:55:1f:ac:b2:bd:9e:
                    71:bd:67:b5:48:ab:1d:e1:15:93:11:ad:30:e8:18:
                    39:68:5f:e5:90:e8:9f:a8:3c:83:67:6d:c8:b9:dc:
                    35:26:f4:17:b2:a9:0b:dc:09:e6:08:c2:57:f2:cb:
                    6f:59:57:39:37:13:92:60:7b:60:2e:77:24:06:fb:
                    9b:df:54:17:62:84:e3:ae:d3:9a:15:fc:69:83:06:
                    c4:5c:3a:0e:bf:c8:b3:5b:45:e0:12:6a:6e:8f:cc:
                    9e:15:72:01:b9:fd:83:f8:e0:05:fc:7b:41:25:9a:
                    db:e4:5c:06:73:69:41:9c:62:d9:93:54:6b:a4:84:
                    05:86:69:11:ac:a5:93:4b:63:22:22:29:9f:8b:7b:
                    85:9f:0c:54:0d:80:25:a2:a3:95:e6:47:ce:5f:71:
                    30:9b:fc:a8:87:e3:03:84:47:7f:a2:b9:67:f1:20:
                    55:53:7d:d1:66:ba:53:06:b2:15:3f:a4:40:4d:1c:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9B:5A:52:FA:CA:C3:93:5A:A7:CE:84:13:7B:0E:1F:65:1B:87:FE
            X509v3 Authority Key Identifier:
                keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:6f:b7:98:3a:07:d7:19:05:6a:f6:26:d9:cb:da:4f:c3:27:
         49:cc:f7:c6:7e:d8:41:c7:2b:60:08:90:f9:56:52:c2:e6:23:
         f2:cc:f5:e0:34:81:b7:e6:47:4a:7c:fc:ad:83:d5:63:f9:66:
         f6:40:90:88:a3:3f:08:0f:b2:92:b2:47:d2:a4:3e:76:d2:29:
         bc:ac:a1:25:62:1f:ca:fa:f6:ab:94:64:ad:84:35:46:67:33:
         56:0a:73:80:38:c5:95:1a:fc:57:b1:51:70:06:37:56:1c:ed:
         8c:20:1c:51:f6:a2:fb:4e:5f:8f:eb:00:48:26:0f:95:3d:60:
         57:6c:a7:cd:03:46:f0:20:f6:03:13:1a:2a:56:a0:05:fd:e2:
         2b:65:25:06:4d:91:d3:5a:1a:98:9d:42:bd:14:28:2d:1b:5d:
         dd:4d:75:2b:62:31:59:7c:e8:e5:7e:c0:a0:50:2e:d1:f3:77:
         2b:62:52:34:b5:37:d3:eb:ca:bf:1d:ba:9e:af:ee:25:f8:82:
         a2:3f:79:c4:a4:fe:95:8e:f6:e8:0a:9f:5c:75:74:4b:53:b9:
         f1:0e:42:3d:96:bb:71:fa:2e:f4:e6:58:f8:4b:34:8f:70:04:
         4a:c7:ca:0d:5f:09:13:db:0b:5c:36:eb:14:92:21:2a:1f:32:
         02:de:28:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:59:16 2025 by rpki-client