Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File:                     c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier:          xVug1YiqedOf2culhATf329eKihaH3dX1qNBaaVkLNc=
Subject key identifier:   F2:8C:C1:E9:E6:C1:F1:C3:1B:45:52:99:A1:C2:A0:B1:3A:16:D2:89
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer:       /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial:       01984A0A50C77659FA6490595D87D159589F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number:          160A
Signing time:             Sun 27 Jul 2025 04:00:46 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:46 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:46 +0000
Files and hashes:         1: 9Vc3AbW6vlZ_1l6ygzFXdiG_9DU.roa (hash: XyjyaFRHv8L+Xv8vUnenIR3U/Eb6y+TGYMaeT4tV8mY=)
                          2: F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa (hash: B5PNCVqEZ3htMuoUo9SXwMTUf5kV2N6tfRSmohV4ztI=)
                          3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: MRycTwl1rWnPfE5tbPaWjStZyzhrXlTxxMKtJQb9sOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:50:c7:76:59:fa:64:90:59:5d:87:d1:59:58:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
        Validity
            Not Before: Jul 27 04:00:46 2025 GMT
            Not After : Jul 28 04:00:46 2025 GMT
        Subject: CN=f28cc1e9e6c1f1c31b455299a1c2a0b13a16d289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e4:b7:9b:26:57:aa:bf:6c:0f:fe:bc:ac:8b:
                    f6:72:93:65:fe:c9:93:ab:45:17:32:a3:92:e1:35:
                    c6:80:d2:10:0e:2b:1e:ae:d9:01:98:ff:f2:86:16:
                    00:68:22:83:4a:9e:9e:d3:77:2d:04:59:91:7c:5c:
                    ca:63:6d:ca:e7:db:06:da:94:67:86:90:17:b8:c1:
                    1f:ac:d7:34:67:84:3c:de:a9:a9:14:06:61:eb:f1:
                    0b:01:5e:1a:bf:1c:98:ed:e9:55:17:37:a0:11:6e:
                    ec:ca:9b:01:de:48:81:8e:bc:85:97:0c:a7:e1:e1:
                    1c:d3:9d:c3:aa:a7:f5:19:42:dc:7a:6d:5b:0d:7b:
                    46:45:ab:c9:15:a1:d2:84:1a:15:37:74:2a:64:e6:
                    b9:1d:6a:d6:4a:fb:61:8e:2b:59:7a:7f:6f:12:2e:
                    8e:7f:c8:00:9a:28:15:77:97:80:ad:53:89:c7:eb:
                    8d:e2:d1:34:14:44:41:d7:54:d0:c1:74:77:26:62:
                    1d:05:ba:ba:fc:fa:4f:5f:76:a8:ab:a0:6b:a2:c4:
                    6c:7e:09:0c:d5:3e:71:d7:24:3d:91:ba:71:1f:09:
                    52:5f:6b:1e:81:2f:ef:52:13:0d:e6:b5:cd:e6:d5:
                    6d:f0:eb:bd:60:e4:89:e0:0b:a9:de:30:d6:14:fe:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8C:C1:E9:E6:C1:F1:C3:1B:45:52:99:A1:C2:A0:B1:3A:16:D2:89
            X509v3 Authority Key Identifier:
                keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:4e:99:fe:dc:23:31:f5:70:da:18:4f:55:56:c9:fd:c0:50:
         ce:d6:9c:70:08:81:99:65:25:43:ff:59:ae:9b:5f:9b:13:e6:
         f1:e7:c0:53:cf:c6:71:e3:a4:48:5e:83:b4:44:76:f8:9b:41:
         8e:d5:58:84:f5:cb:09:29:ad:b9:9d:9c:4a:9d:e2:6e:47:ad:
         4e:ef:7b:46:81:9a:b9:59:c8:91:9f:2c:15:aa:d3:db:d5:6f:
         7a:f6:f5:0e:4a:9c:7c:19:e9:7c:54:78:29:ad:e5:2e:6c:e3:
         ff:33:f7:f1:50:49:1e:8d:f4:88:00:c3:f8:86:ae:9e:c7:35:
         d7:ae:31:6f:5a:c7:02:8d:5a:fa:61:f1:ff:93:86:19:d2:c9:
         25:32:be:9a:bf:91:fe:48:c7:45:8d:b2:a9:73:e8:66:f2:90:
         ef:fc:11:ac:a2:5a:1f:7c:0c:24:8b:8a:b7:05:5a:fd:c4:46:
         30:28:fd:e0:57:af:53:93:0f:cb:ac:5d:5b:97:ae:24:e3:d0:
         4f:51:b5:3e:62:8e:8f:c2:84:d2:17:9c:da:00:fe:13:ae:56:
         11:4c:cd:6f:92:0b:98:b7:5d:2d:8e:f9:c1:00:bd:4b:61:c4:
         fa:df:46:78:0e:93:62:2c:ac:46:24:6c:29:a6:b1:71:f0:4d:
         66:02:64:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKClDHdln6ZJBZXYfRWVifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZTE1N2IyOTE4Y2FkY2E4YTVhOWZiYzY2ZTk3NzYwOGE2
ZGY1ZTEwHhcNMjUwNzI3MDQwMDQ2WhcNMjUwNzI4MDQwMDQ2WjAzMTEwLwYDVQQD
EyhmMjhjYzFlOWU2YzFmMWMzMWI0NTUyOTlhMWMyYTBiMTNhMTZkMjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uS3myZXqr9sD/68rIv2cpNl/smT
q0UXMqOS4TXGgNIQDisertkBmP/yhhYAaCKDSp6e03ctBFmRfFzKY23K59sG2pRn
hpAXuMEfrNc0Z4Q83qmpFAZh6/ELAV4avxyY7elVFzegEW7sypsB3kiBjryFlwyn
4eEc053Dqqf1GULcem1bDXtGRavJFaHShBoVN3QqZOa5HWrWSvthjitZen9vEi6O
f8gAmigVd5eArVOJx+uN4tE0FERB11TQwXR3JmIdBbq6/PpPX3aoq6BrosRsfgkM
1T5x1yQ9kbpxHwlSX2segS/vUhMN5rXN5tVt8Ou9YOSJ4Aup3jDWFP4i9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKMwenmwfHDG0VSmaHCoLE6FtKJMB8GA1UdIwQY
MBaAFHPhV7KRjK3KilqfvGbpd2CKbfXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAt
MDBhMTU0YjhlY2IxLzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAtMDBhMTU0YjhlY2Ix
LzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT06Z/twj
MfVw2hhPVVbJ/cBQztaccAiBmWUlQ/9ZrptfmxPm8efAU8/GceOkSF6DtER2+JtB
jtVYhPXLCSmtuZ2cSp3ibketTu97RoGauVnIkZ8sFarT29Vvevb1DkqcfBnpfFR4
Ka3lLmzj/zP38VBJHo30iADD+Iaunsc1164xb1rHAo1a+mHx/5OGGdLJJTK+mr+R
/kjHRY2yqXPoZvKQ7/wRrKJaH3wMJIuKtwVa/cRGMCj94FevU5MPy6xdW5euJOPQ
T1G1PmKOj8KE0hec2gD+E65WEUzNb5ILmLddLY75wQC9S2HE+t9GeA6TYiysRiRs
KaaxcfBNZgJk4g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:03 2025 by rpki-client