Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
File:                     oynU0nVy71pqbb7NeS7vmM6QcW0.mft (raw, json)
Hash identifier:          8ODIBmuR5nBgQiC+WDA0fy5eXQivTywXuDH4AxmDTFU=
Subject key identifier:   F6:00:CA:F8:29:8A:36:32:BB:82:ED:60:C4:1C:6F:2E:D6:24:4D:F1
Authority key identifier: A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
Certificate issuer:       /CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Certificate serial:       019857FCBA36AF05DE3AAF728D195180DA60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
Manifest number:          160A
Signing time:             Tue 29 Jul 2025 21:00:37 +0000
Manifest this update:     Tue 29 Jul 2025 21:00:37 +0000
Manifest next update:     Wed 30 Jul 2025 21:00:37 +0000
Files and hashes:         1: blse6v5EH2fVrElwGZmlrK99XJk.roa (hash: otAVsYT9s6hCs6g9uAr3ovy061yRH8/KdKxwyyD5qvk=)
                          2: oynU0nVy71pqbb7NeS7vmM6QcW0.crl (hash: dO26eq70Vlwl8O0I2fosgAfHoFNFiWU6l8KP4PA0MVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:57:fc:ba:36:af:05:de:3a:af:72:8d:19:51:80:da:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
        Validity
            Not Before: Jul 29 21:00:37 2025 GMT
            Not After : Jul 30 21:00:37 2025 GMT
        Subject: CN=f600caf8298a3632bb82ed60c41c6f2ed6244df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d8:6e:94:bb:c2:5c:d1:b1:aa:a1:4d:8a:d6:
                    d6:b3:ec:c2:81:99:11:ab:5b:91:f1:82:92:62:03:
                    a7:b9:23:ed:83:c0:9a:f3:2e:5b:e6:44:54:01:b8:
                    20:3f:2e:0a:7c:9e:7e:9b:39:b0:87:bb:51:05:0a:
                    8d:f2:93:0f:47:a1:95:72:ae:0c:0d:d7:2e:e4:9d:
                    3b:2e:41:bc:60:7c:e8:3c:95:46:f6:8a:8e:69:4e:
                    85:85:f7:a5:c0:d1:a0:ad:c0:e7:50:90:9e:c0:25:
                    48:db:9e:b0:c0:79:10:f2:93:10:87:c5:41:d1:9d:
                    5f:30:d2:ee:dc:fa:ea:e5:9a:3f:3e:44:d4:5b:39:
                    7b:9b:ee:77:75:3e:fc:b1:4f:91:2f:dc:f7:d5:11:
                    e4:e9:52:79:03:d6:21:53:58:79:0e:aa:3a:97:66:
                    73:e3:44:9d:36:ec:41:28:3d:2d:ad:cf:dd:4c:12:
                    0b:f7:44:11:bd:0a:e3:55:ec:97:d9:f8:06:06:80:
                    1e:6d:22:54:0a:63:07:18:2d:16:c2:f1:5d:d2:37:
                    50:8d:27:4f:66:a2:ac:05:8c:a2:3c:76:a0:df:bb:
                    72:1f:07:a0:fe:bc:4f:e4:fb:c0:36:c2:41:63:c2:
                    c7:b8:17:8d:54:23:5d:8b:b6:e8:a8:00:85:f3:8a:
                    cb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:00:CA:F8:29:8A:36:32:BB:82:ED:60:C4:1C:6F:2E:D6:24:4D:F1
            X509v3 Authority Key Identifier:
                keyid:A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b8:7c:d0:20:f6:f4:bc:f9:58:c7:9f:4f:c2:f9:d1:a3:78:
         ca:f9:99:3c:2b:bb:0b:d5:f3:ee:cd:2e:f3:40:93:cb:da:a4:
         d0:6a:65:2a:4f:02:fc:28:79:96:a2:11:6e:89:10:f2:0c:07:
         e0:71:78:48:3d:3f:11:3d:26:4a:76:d2:74:72:78:1f:b0:82:
         5f:d9:02:a4:1d:7f:ff:28:de:22:2f:5f:fa:e2:d1:4e:b1:cf:
         2b:39:1b:27:c1:f9:f4:5d:eb:d7:cd:04:d0:4d:bf:cf:f9:d9:
         30:3c:c3:1b:dc:e0:40:47:f7:39:17:45:88:51:dc:6a:85:4e:
         a6:32:5d:d9:fb:de:d4:01:cc:5b:23:75:d6:53:54:f7:c0:a0:
         e4:06:07:57:33:1e:d6:25:cf:55:a7:a6:d4:09:96:e5:22:ec:
         c3:96:37:7c:a8:ac:36:bd:32:28:1c:12:6a:8d:14:bb:1d:fe:
         1e:fb:0e:51:c5:67:10:c8:26:3c:3f:35:75:22:5f:93:52:d7:
         52:70:9f:d3:5c:15:af:68:4b:93:ae:07:8c:52:94:d8:dd:6c:
         aa:df:4a:f5:7f:bb:87:f1:4a:fb:bf:6a:a3:2c:af:a2:85:0b:
         ab:f1:c8:13:87:f9:3e:6d:db:d0:43:d6:dc:9c:94:bc:df:d8:
         92:ec:3f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:06:33 2025 by rpki-client