Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File:                     deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier:          v55y7PpGPnqQMyABXYtK4RQ4zGuLZzPusixu/odDDeE=
Subject key identifier:   98:06:17:49:19:2E:EA:38:A7:34:0D:9F:27:2D:01:72:12:28:2E:44
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer:       /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial:       01985043AF781433C75E66702313E58F4742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number:          160B
Signing time:             Mon 28 Jul 2025 09:01:09 +0000
Manifest this update:     Mon 28 Jul 2025 09:01:09 +0000
Manifest next update:     Tue 29 Jul 2025 09:01:09 +0000
Files and hashes:         1: HQ3g25P006ROllKfG3gdhpSNHOg.roa (hash: JkW/Op/fvYeKeMra4WDWooddbprrjz6RgWEE7Fl3VHc=)
                          2: T23Nk-nWZ13uL-vUgHBSmBD0a5Y.roa (hash: /bhq2aMKeWlXXVjqRKG1maK35mjghRj8veSjPURu6WI=)
                          3: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: +jTff7UyVvhoXldLukSxojwuEaZ+rOIkGnXBlAnRkAE=)
                          4: koi0-CGVFzzCbkI5al5_w7LgOj4.roa (hash: Ypeyl95U2AAhobdLkDDvp1F6OHWp8H5ed2csv8B3QLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:50:43:af:78:14:33:c7:5e:66:70:23:13:e5:8f:47:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
        Validity
            Not Before: Jul 28 09:01:09 2025 GMT
            Not After : Jul 29 09:01:09 2025 GMT
        Subject: CN=98061749192eea38a7340d9f272d017212282e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:f4:13:24:25:da:b5:78:5a:33:5b:49:e2:
                    a1:a8:e4:c5:c0:8d:0a:00:03:4a:5d:e2:be:ce:e3:
                    a5:18:da:52:7b:b2:e2:6e:f2:44:ec:34:38:cd:e8:
                    1b:68:c7:55:93:b2:4d:02:e3:b1:f5:d0:59:06:56:
                    fb:eb:99:b1:db:92:50:51:35:35:f9:d8:df:ea:66:
                    32:c3:27:1d:31:ce:dc:17:7d:31:68:0a:87:26:4c:
                    a2:7f:5d:ff:6d:a1:a5:d7:3d:49:e6:94:37:e3:11:
                    9d:cc:cc:e5:49:00:a8:f5:a3:e8:61:00:a0:7a:fc:
                    a2:bc:ab:eb:60:14:29:27:06:0d:5f:98:2d:a4:52:
                    29:4d:4e:a1:2f:04:fa:4f:ee:40:3a:9a:c0:fa:7b:
                    84:b3:a7:0a:cc:ac:a0:19:e2:74:de:f0:97:be:93:
                    47:9f:d6:fa:5a:e7:e6:d6:bd:41:c8:5d:8c:04:ed:
                    19:f7:39:4e:9e:ae:f6:8b:56:df:f7:4f:7b:f1:ee:
                    f3:a7:c4:d1:aa:be:b1:5c:53:6a:73:b2:92:10:15:
                    2a:f1:3f:a0:e8:01:0e:05:82:45:34:fb:1d:4d:fc:
                    62:1d:ea:9d:a6:f0:fa:ea:4c:cf:7e:21:60:2e:27:
                    bf:58:12:0c:8a:ab:ba:d8:81:85:38:19:10:43:fc:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:06:17:49:19:2E:EA:38:A7:34:0D:9F:27:2D:01:72:12:28:2E:44
            X509v3 Authority Key Identifier:
                keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:65:4f:29:49:5b:80:d7:a7:66:19:e2:6a:fb:fd:47:6d:37:
         3e:68:fe:97:48:d6:4f:d0:87:f0:a8:ef:e8:1c:57:b9:89:00:
         88:8f:2e:02:a1:03:0a:88:e4:7a:15:f5:6f:45:ce:d8:53:14:
         99:31:87:0e:ad:23:4e:e7:fb:f1:80:03:29:8f:83:bd:38:c4:
         ae:5e:d9:1d:43:51:40:e3:0f:d8:d2:91:40:e1:bf:65:06:f9:
         ab:93:77:e9:3b:d9:ea:d2:33:c3:e0:fa:2e:a9:6a:1b:2c:00:
         63:83:c8:8a:79:e7:0d:a2:cf:74:6f:24:48:4f:b7:61:5f:cb:
         20:c8:67:be:e0:9e:ce:93:ec:a5:45:2f:b7:ff:c4:96:81:d0:
         ad:23:ce:1e:e7:1f:4d:f1:0e:46:e5:5e:37:e7:c7:95:b6:04:
         10:6f:ce:77:f6:f6:a0:63:81:85:59:b9:3c:68:a5:c9:b5:b5:
         93:59:12:46:4e:9a:bb:9d:9b:8d:d5:05:c0:fd:5e:49:ab:cc:
         a3:11:42:c7:42:04:ce:92:9b:0b:05:1e:78:5f:8b:9e:cc:a1:
         6c:61:54:3b:25:e7:f8:f1:1e:77:75:e3:61:64:fa:72:08:86:
         6a:13:9e:df:63:d4:07:4e:c9:86:37:0f:4c:ed:d0:88:13:30:
         45:e2:a6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 14:53:13 2025 by rpki-client