Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
File:                     _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json)
Hash identifier:          sUcz2A+cHMqejL3E4JvKamXfCubsag4+/bPwtMjTIp4=
Subject key identifier:   62:4C:15:01:69:46:25:53:F1:97:8D:85:8B:EA:24:31:ED:23:8F:55
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Certificate issuer:       /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial:       019848530719B78A0E0BCFB227BB4FCCFC26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
Manifest number:          160B
Signing time:             Sat 26 Jul 2025 20:00:57 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:57 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:57 +0000
Files and hashes:         1: 0nspkNZBD4AF3c6BuZHawbNEn4s.roa (hash: uIJdsMvT5D3zL8bAjl80cE2Pwz5BnxnpyFyZ11QSq50=)
                          2: 54-UEvGfxV4WPcy4WxLxIFxxE-U.roa (hash: ojna0RnGjI7OjDPWs+roB1Amf6WKyl5pMZi5IPEPWP8=)
                          3: 5Tf-mqxbzy7qofAM2dNl7l1t3mU.roa (hash: 6mVr252OaOJiHsmGk/+j0aXnhIUGcpjMKQ+02iLXgcA=)
                          4: HIpztZT__B_f9n2gN6auamR5pIU.roa (hash: rJY52okWB1TeezbKU/iuTbv7tjIWb1W5p6bbeWIcdzo=)
                          5: LuyH1oX8EXWypVZ7iAaDpvRYVVc.roa (hash: PwqXxZGK4PUOy9TXRGdRnGJ0Q9f2SZmolPNVfAk0WgM=)
                          6: NkdsfBqVz48X5H2Y1WQJSu8vlt4.roa (hash: tuiwHFcQQ4SB/tCeR0sJ8nBN9XREzDRoO1cXDj6kEqo=)
                          7: UjPxDMGW7lYqCuTCh7JHOA6hizY.roa (hash: ANkRdXMj6bkHEGkvb/XWLCpMoxX6nYg0dbetuBTbz8U=)
                          8: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: AcjFgsaAifoz9OqlEJ+8qguq/ZKBMgXEZePxVMGo0jU=)
                          9: jqfbqOe3Dnj2fXOhZ9LOHypCFAI.roa (hash: /x0Hcf4qFuhf8+J5QzDuB3C52+I2nDMc1dbR/JkR1Cw=)
                          10: meQ5SBMnqJBkFHe-JOcEGhCsKFY.roa (hash: TMc5toGudrJJLzHO6dJLOGc8MvIeTEaZ3Nzvom9Ftsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:53:07:19:b7:8a:0e:0b:cf:b2:27:bb:4f:cc:fc:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
        Validity
            Not Before: Jul 26 20:00:57 2025 GMT
            Not After : Jul 27 20:00:57 2025 GMT
        Subject: CN=624c150169462553f1978d858bea2431ed238f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:9b:78:a4:93:98:d5:87:d9:6c:b4:28:d1:
                    5d:2c:48:79:6b:6e:f1:37:7f:2e:c0:49:06:19:b4:
                    5b:83:92:f2:7c:2a:3c:5f:58:2a:0b:8a:34:fe:7b:
                    6d:ed:c1:75:e6:e9:7f:a4:94:c3:8d:82:de:23:a0:
                    2e:8a:17:43:84:4f:b6:9f:b1:44:51:4f:07:f7:7e:
                    f5:7e:82:ad:e4:c4:db:0c:c4:fa:02:f7:7d:45:b0:
                    ae:4b:f1:70:59:6d:e5:e6:c4:cb:6d:b0:ff:c8:3b:
                    94:35:a2:b2:76:af:97:8d:1f:0e:d3:ca:64:fd:04:
                    10:66:a0:65:24:c9:ac:5f:ae:77:bc:90:52:5a:e4:
                    f0:a3:41:19:0e:17:b4:15:3f:75:2b:e6:27:0a:d3:
                    89:6f:c3:bb:ac:09:59:79:62:2a:87:12:70:65:bf:
                    43:74:51:fe:04:b3:e7:6d:6e:d4:a6:4d:af:0e:ad:
                    f8:7c:01:a7:ea:9e:fb:e0:6e:f4:12:1b:dd:78:07:
                    f7:8e:83:44:87:dd:16:c2:f8:43:d3:12:97:e1:ad:
                    cd:34:fb:e7:fe:10:a8:e4:03:02:69:09:c8:82:ca:
                    7b:c7:52:60:cc:0c:1a:f2:5a:08:ba:6d:fa:bb:22:
                    a0:51:5d:19:4c:d3:eb:44:f0:0f:39:0c:ed:0d:3c:
                    05:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4C:15:01:69:46:25:53:F1:97:8D:85:8B:EA:24:31:ED:23:8F:55
            X509v3 Authority Key Identifier:
                keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d8:9f:bc:04:b2:dd:8f:2e:d6:e2:06:3f:e3:e1:0f:07:03:
         8e:4f:4e:17:f1:5f:0e:db:05:98:5f:b9:9f:31:ee:c0:41:81:
         e6:6c:af:bf:f4:34:fa:fd:ee:91:a0:c9:35:cd:0b:ae:55:5c:
         6e:ea:40:f8:9e:7a:9c:10:0c:18:29:c9:11:9c:56:4c:04:6a:
         f1:5f:0a:9c:3c:1d:c8:98:99:e7:c9:2d:97:20:9a:f8:eb:19:
         b1:6e:f2:40:c8:f6:c0:b0:7c:d7:0c:87:c4:7a:ec:00:19:27:
         5e:72:dd:2e:b1:66:88:ed:03:bb:22:96:9e:ce:b3:48:fd:c7:
         96:33:dc:a1:a0:41:9c:87:07:05:cc:07:75:f4:41:21:03:98:
         a1:13:fb:b3:12:14:27:fa:f6:e2:f9:04:ec:b3:5f:18:b5:9a:
         bf:4b:ad:99:de:a4:b9:c5:0e:90:de:59:9e:69:3f:43:e9:7d:
         fe:d2:b5:59:88:a7:30:5c:37:09:ed:78:36:f0:78:96:cc:ab:
         93:cf:63:91:ce:4d:27:26:15:dc:00:d6:db:68:d6:aa:09:41:
         a2:8a:85:08:61:19:5a:f8:1c:ff:2a:81:2d:31:6e:38:95:6f:
         f1:2d:36:98:89:01:41:63:99:7a:c1:b6:e4:9b:7b:d1:d7:fc:
         17:02:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:41:09 2025 by rpki-client