Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File:                     kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier:          oymgQR9IIuWEopkGI7Lk/a/kKrHe39PFlJsM9jULlbA=
Subject key identifier:   E5:53:24:24:30:BE:92:67:F1:F4:85:F7:FB:01:AC:97:96:44:2D:14
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer:       /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial:       01982FDCD68B97C2B2E57F7E3F0B8527D47A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number:          161A
Signing time:             Tue 22 Jul 2025 02:00:58 +0000
Manifest this update:     Tue 22 Jul 2025 02:00:58 +0000
Manifest next update:     Wed 23 Jul 2025 02:00:58 +0000
Files and hashes:         1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=)
                          2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=)
                          3: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=)
                          4: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=)
                          5: W0wwe8SBgrorcIdIh1C6dywoblE.roa (hash: o7y7OudSu2OxvsqJQhdu7LZqt6SiNfP9ooVaizbrRo4=)
                          6: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=)
                          7: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: RNRxx5WgXf94m+xfz6adzWBFUKdb6YRZBwPZ+MIaUtU=)
                          8: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=)
                          9: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (hash: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=)
                          10: tB4Gwrhu06E3QsikW_2RR3FHl9c.roa (hash: rpxh3Xft3stAaYfa6mVzKU7ubzyBU16e4wSptWKVCrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 02:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2f:dc:d6:8b:97:c2:b2:e5:7f:7e:3f:0b:85:27:d4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
        Validity
            Not Before: Jul 22 02:00:58 2025 GMT
            Not After : Jul 23 02:00:58 2025 GMT
        Subject: CN=e553242430be9267f1f485f7fb01ac9796442d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:17:a0:f7:87:75:77:c3:0a:4f:cb:81:3f:
                    bf:75:80:8b:9a:b6:01:3f:c2:df:c1:24:ec:d0:86:
                    3a:ee:4c:53:5b:2c:46:25:43:70:e8:1a:6d:01:b9:
                    b4:54:17:b6:be:17:81:91:8d:ae:78:93:ad:5d:57:
                    25:8d:63:da:2e:2d:ed:16:9b:e3:de:3c:36:f7:5c:
                    05:59:99:0c:25:90:25:6d:41:ab:ab:a8:e6:48:2a:
                    f2:4a:ff:08:43:2a:e2:1a:0a:49:0b:95:81:a8:03:
                    27:2d:58:c2:6d:ea:6b:2a:ff:b0:aa:f3:55:d1:94:
                    a6:27:61:3a:93:cc:8b:3d:95:ea:3f:7d:93:c3:d7:
                    fe:63:b4:9a:39:a1:93:40:10:f2:de:6b:80:cd:20:
                    3d:90:06:d3:07:f3:94:fa:62:a0:b0:ce:b1:cb:db:
                    76:6d:4c:85:b5:13:2c:32:a3:e3:ce:be:f8:86:86:
                    fc:13:7f:d2:c7:c6:1c:62:97:ec:ad:64:c3:52:3f:
                    bf:a3:99:96:99:fa:76:59:d3:fc:a1:67:60:34:2d:
                    1c:5c:14:41:1d:c5:cc:31:d8:d7:e2:6a:48:9e:5f:
                    77:96:aa:6f:29:f3:e4:f2:07:f5:62:65:5e:db:52:
                    ba:8b:43:9f:d4:83:92:13:ec:77:4c:eb:06:c5:f8:
                    31:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:53:24:24:30:BE:92:67:F1:F4:85:F7:FB:01:AC:97:96:44:2D:14
            X509v3 Authority Key Identifier:
                keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2f:a6:0c:39:14:35:cc:12:fa:3f:3b:fe:c0:42:ad:85:6b:
         d0:60:48:0e:e3:c7:e9:33:35:23:86:82:6e:bb:d0:af:dd:e4:
         3d:db:6b:71:76:41:74:2b:d1:eb:8d:e0:ea:eb:99:09:a1:61:
         88:1d:fe:6a:8e:9c:06:7c:87:5a:17:60:60:90:cb:3b:de:76:
         2f:f7:11:b9:a3:d7:08:14:cb:e4:c7:b2:eb:d9:11:23:58:3b:
         7c:50:50:f6:77:8a:15:f8:29:69:78:1a:13:e0:01:76:92:34:
         75:1b:60:8d:ee:15:80:a5:e3:97:64:25:05:56:f9:25:39:54:
         86:2e:02:56:93:f1:c1:4e:44:46:67:0b:10:56:dc:cf:c4:e5:
         25:5f:ba:2e:dd:3c:8e:ee:80:b1:d0:e0:38:4d:97:ab:87:df:
         47:46:82:93:13:89:58:23:48:26:45:44:63:6c:10:32:b0:a2:
         b9:4c:2b:7d:75:f6:b4:a2:3f:f8:a9:ad:29:ee:44:d7:27:21:
         8c:51:13:1d:38:21:91:ab:03:68:f2:c3:91:e9:ef:f4:0b:16:
         b7:b1:96:8d:b9:a6:43:21:ff:6a:6f:98:0b:e7:ca:b9:9b:5d:
         ab:21:ff:71:db:82:12:ad:42:de:33:38:13:74:31:00:fd:f8:
         73:5c:de:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:54:07 2025 by rpki-client