Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File:                     k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier:          e93kk1BpanKFrqWduYR5ADAoJfafDo/8DdzyKJO2Q+w=
Subject key identifier:   BA:4B:F4:FF:C4:35:18:14:A6:D1:F3:57:0C:C1:AF:FE:B2:AC:35:DB
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer:       /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial:       019836166E1FD8238FE7C2746069415C3390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number:          161A
Signing time:             Wed 23 Jul 2025 07:01:36 +0000
Manifest this update:     Wed 23 Jul 2025 07:01:36 +0000
Manifest next update:     Thu 24 Jul 2025 07:01:36 +0000
Files and hashes:         1: EUR3tjFNTdAQ0PDdSrgVT7YlWf0.roa (hash: RNEi8VUaDrk0De742oO4ThiEi9sdWL6KnRT8EqeTr1E=)
                          2: U7MrjrMFOwWnR4h117sJMVUvits.roa (hash: htjbTluQYwPg60synTRHWeZ9MgvIenRnyRzzuYY2Zr4=)
                          3: YzH9FpM8Eg_tqz_L3y3mlHb7ZbY.roa (hash: KjnbFS24f0U0fBm1mqed6e/EL7zir4AQYBp9zdgcLZI=)
                          4: dESzUpMviwtTKAbBmdcEnSrDmb8.roa (hash: t6YDlmbHdL/fLbmXo8sZDgLUB7U10S0kh8xDcseSIRM=)
                          5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: ppeCNKcIEAvWI27oRiFadYT4/bohAn7qIlGQ6Frouhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:16:6e:1f:d8:23:8f:e7:c2:74:60:69:41:5c:33:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
        Validity
            Not Before: Jul 23 07:01:36 2025 GMT
            Not After : Jul 24 07:01:36 2025 GMT
        Subject: CN=ba4bf4ffc4351814a6d1f3570cc1affeb2ac35db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:89:c7:b9:c2:8f:a1:ea:dd:83:b6:2d:59:a6:
                    a9:8c:70:a1:21:8a:af:95:f6:86:e4:ae:20:41:35:
                    d0:1a:68:3d:8d:da:70:9a:e0:ee:a8:0e:01:77:cc:
                    54:93:cc:48:f6:8a:be:b9:3e:94:4f:28:12:d2:7d:
                    80:66:1e:e5:84:ab:8a:72:61:f6:14:78:29:d7:93:
                    40:47:47:95:0f:41:09:08:ec:15:bc:3b:f6:77:a1:
                    96:ec:d7:52:8a:b2:23:a7:a9:ad:c9:30:02:54:a6:
                    37:93:67:de:16:92:61:aa:04:f7:3a:0e:16:92:95:
                    b6:8a:70:f5:fc:51:97:c1:36:14:57:73:b9:c7:d6:
                    c0:b7:8f:4f:43:6e:6b:66:fd:2b:60:b5:c8:30:b4:
                    0c:32:4e:3d:fc:11:e5:ff:89:af:45:19:ee:f6:bc:
                    02:69:75:fd:21:0d:b9:62:67:9e:a7:d0:00:11:0d:
                    ee:2f:ce:f5:54:5e:ea:d2:df:42:57:b2:8f:3c:58:
                    45:ee:4e:b3:34:0c:95:f2:89:3b:41:ed:ba:bc:83:
                    ce:94:8f:89:b2:2a:75:48:24:cc:be:ce:92:60:03:
                    ea:1b:a6:d4:7b:76:57:ed:0a:87:e8:8f:b2:be:78:
                    d9:a7:51:96:35:a9:33:35:a5:42:8f:c5:5e:62:89:
                    e1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4B:F4:FF:C4:35:18:14:A6:D1:F3:57:0C:C1:AF:FE:B2:AC:35:DB
            X509v3 Authority Key Identifier:
                keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ce:e8:7e:34:dd:3f:19:4e:bd:3e:a8:cd:df:da:f4:f1:21:
         c5:1f:0f:9b:ff:c5:27:c9:a2:5c:66:c4:02:53:8d:e3:ba:0a:
         10:5b:36:f2:30:1a:d1:70:21:e0:ce:03:1a:b9:d4:95:a4:82:
         91:19:6d:45:63:06:82:6c:2b:e8:1c:b0:0d:13:e4:20:be:be:
         4a:a8:90:c2:9c:bf:ca:71:64:57:d8:be:12:1b:ab:25:f5:2d:
         90:91:00:1b:2a:9a:24:d1:04:34:10:94:d2:e1:88:af:e4:0c:
         ff:de:6c:22:ee:8e:a4:de:60:94:cf:70:e5:de:9e:0a:8e:4f:
         5c:a2:09:05:7f:0b:4c:33:c8:0c:62:6c:32:fa:c7:68:20:d0:
         53:66:62:43:d6:76:2b:f8:30:ca:55:a4:0c:00:1a:c5:e5:27:
         bb:fd:ba:b4:5e:5e:47:49:05:a4:0a:c9:b0:a8:7d:24:83:21:
         7c:49:55:c4:b4:c1:48:94:e3:c4:25:e5:de:f5:55:71:af:57:
         b7:60:df:0e:09:3f:9b:82:5b:7c:db:47:f5:f5:95:31:fa:7f:
         71:90:e6:99:da:5f:8f:5c:76:d7:04:4c:90:ab:96:5d:c4:70:
         31:ee:1a:c8:99:ec:25:5c:11:68:71:2e:db:55:1d:62:b2:08:
         1f:fd:7b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:11:03 2025 by rpki-client