Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft
File:                     syj-JYobm_YUimzg6KcS8YhAkEw.mft (raw, json)
Hash identifier:          CVBSUm75XG8c3HzuXdi5nfgGekiXqMOZERPakfvDbvo=
Subject key identifier:   F6:1B:F4:1A:4F:EA:C7:1D:07:18:BF:50:90:F9:45:F5:C8:27:CD:D8
Authority key identifier: B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C
Certificate issuer:       /CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c
Certificate serial:       019855DF2C39FBCAEAD48C6FCA24FBEEBD8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft
Manifest number:          160F
Signing time:             Tue 29 Jul 2025 11:09:05 +0000
Manifest this update:     Tue 29 Jul 2025 11:09:05 +0000
Manifest next update:     Wed 30 Jul 2025 11:09:05 +0000
Files and hashes:         1: csVsVOJyNiX8ZBdrkB1Q1Y3Vh50.roa (hash: WI/e8U0rzHFdNl/a0Rdvy6scdzkHY7t0thSHPZwHq5o=)
                          2: syj-JYobm_YUimzg6KcS8YhAkEw.crl (hash: Yc6zzTCij8xkqOlJv7T+RC5LCSLfCg6/lrUgF/lvEqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:55:df:2c:39:fb:ca:ea:d4:8c:6f:ca:24:fb:ee:bd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c
        Validity
            Not Before: Jul 29 11:09:05 2025 GMT
            Not After : Jul 30 11:09:05 2025 GMT
        Subject: CN=f61bf41a4feac71d0718bf5090f945f5c827cdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:20:30:ab:71:83:46:de:f6:ce:0d:86:b8:
                    2b:b9:9a:95:81:38:a8:20:4c:86:af:69:72:11:5e:
                    74:b7:d1:fe:08:91:37:15:61:20:bb:ff:94:70:33:
                    75:85:1b:5f:53:5b:41:46:98:d4:95:ac:1b:ca:db:
                    39:5c:22:f9:98:96:3f:bc:76:a8:0c:b5:ff:3e:ee:
                    71:c8:b5:c3:1c:7c:de:f9:88:cc:4d:ad:a7:3a:34:
                    bb:39:23:45:91:c4:82:e6:7d:ac:72:7a:b6:b3:9f:
                    d5:a9:d5:82:07:f8:e9:9d:5b:dc:01:25:47:b1:7b:
                    50:36:5e:8b:21:3b:21:49:b4:90:0f:ce:50:8a:59:
                    b2:3c:02:c2:56:35:f2:ca:4c:7f:72:5b:31:11:38:
                    d1:fb:16:7e:29:cf:b5:b9:3a:72:fe:e1:98:7c:06:
                    b9:02:a5:04:fe:c5:22:21:68:ca:8e:ee:b9:46:49:
                    7f:58:ea:2b:30:9c:72:e7:41:0b:43:3a:ba:39:fd:
                    ee:42:eb:93:cc:d2:63:37:09:e9:5e:ad:31:be:68:
                    c1:4e:c8:89:a9:ec:a1:b2:cd:49:37:cb:d7:ec:82:
                    30:67:5d:65:03:1b:52:ab:43:88:b1:5c:d0:d6:f0:
                    de:82:84:75:fa:ed:7b:91:ee:dc:f1:94:4e:eb:6c:
                    71:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1B:F4:1A:4F:EA:C7:1D:07:18:BF:50:90:F9:45:F5:C8:27:CD:D8
            X509v3 Authority Key Identifier:
                keyid:B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:50:c1:db:8f:87:c3:1d:19:5e:5d:0e:13:92:b6:bb:3a:b2:
         a7:f3:9a:ba:75:35:6a:2f:02:43:03:1f:c4:8c:51:ba:af:81:
         f6:a1:4d:08:f8:5b:84:a5:5e:be:c7:6b:f4:ee:59:fb:4c:81:
         9f:23:cf:a1:64:e8:88:d8:b4:fe:22:a7:7b:c9:93:81:5f:eb:
         0d:ce:08:47:b7:30:93:1c:00:19:70:ae:b5:fd:53:e4:cb:1f:
         e5:63:7d:75:3d:d3:fd:dd:e2:29:12:db:57:7c:cf:76:7e:ac:
         ca:d2:f1:40:fb:34:14:fa:d2:82:49:95:9d:de:8b:41:8c:50:
         4c:ea:99:74:84:73:49:06:b7:cc:2b:1a:4d:1b:ed:5c:b4:d6:
         06:e2:1a:91:2b:c3:49:b4:ce:16:b8:ee:18:b0:c3:6c:6d:b3:
         87:27:61:b4:63:ba:df:89:59:7d:c4:65:b7:6a:a1:9c:30:8c:
         b2:88:c9:46:15:d5:7d:f1:89:49:5b:40:41:8e:67:f3:92:78:
         25:9d:22:87:8f:e1:38:87:36:2b:a2:ff:ca:1b:01:d0:a9:d8:
         1a:0a:90:ef:5c:30:f1:e5:bd:c5:cc:9a:d5:59:81:50:b0:5e:
         b7:07:26:48:b9:28:7e:0d:54:e6:ca:00:55:18:03:25:df:2f:
         03:03:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:42:57 2025 by rpki-client