Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File:                     J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier:          dV8VvlrInxLWN+uzDnXUiDN4BtUOINQJ4Ot0YCEFjHo=
Subject key identifier:   85:4C:F8:01:4F:DE:58:EB:CF:1C:A0:DA:24:36:48:F5:27:54:7F:04
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer:       /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial:       01985457170EB364ADA538DECFE0FD531EBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number:          160A
Signing time:             Tue 29 Jul 2025 04:00:50 +0000
Manifest this update:     Tue 29 Jul 2025 04:00:50 +0000
Manifest next update:     Wed 30 Jul 2025 04:00:50 +0000
Files and hashes:         1: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: c9WM6JeD5DrxNPOp+ePKER4giYbeHhAm8WxanJ1utlE=)
                          2: vQVKTwJT4leI6HjT4PX8aITkP18.roa (hash: SnTX0BqmORDuYska7e4pXGhwX58LZGJ25QrHzIMD1lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 04:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:57:17:0e:b3:64:ad:a5:38:de:cf:e0:fd:53:1e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
        Validity
            Not Before: Jul 29 04:00:50 2025 GMT
            Not After : Jul 30 04:00:50 2025 GMT
        Subject: CN=854cf8014fde58ebcf1ca0da243648f527547f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:c5:93:08:18:37:85:5d:7d:c3:42:e2:4f:
                    d7:dd:f9:11:12:5f:19:9f:48:0f:5f:f0:96:fa:7a:
                    df:12:85:54:39:56:96:93:d9:2f:05:42:2b:ae:d1:
                    b4:c5:79:0b:6b:25:0c:5f:94:51:8e:a1:18:eb:d2:
                    86:b2:42:04:36:6c:04:e4:b9:01:71:6f:40:77:9b:
                    c8:03:cb:74:dc:bd:8e:02:53:3e:ad:25:97:41:eb:
                    a9:78:16:89:55:19:c7:c2:40:4d:83:85:ed:e7:92:
                    bc:73:af:11:42:52:e9:ea:34:42:49:f8:50:d2:a9:
                    dd:33:7a:a5:df:50:ee:83:af:9d:12:be:54:e7:b6:
                    52:59:f0:a2:62:fb:c6:ca:15:e7:73:80:8c:3d:9e:
                    52:a7:8e:0e:11:8a:22:9d:9d:25:be:5f:53:cf:82:
                    3a:c3:b4:e9:5a:b3:eb:77:d3:25:54:c8:9a:aa:08:
                    59:37:5e:b4:01:bf:39:e5:6a:dd:db:1d:d6:15:fa:
                    e3:43:c9:5e:cf:e4:af:e6:d5:3b:f6:e9:d2:5e:bc:
                    54:e7:cc:e7:f4:b4:ea:7e:f7:21:4d:30:14:d4:31:
                    c8:99:2c:7c:bc:6c:98:7f:dc:e3:73:63:a2:1a:b2:
                    4a:dc:c0:3f:15:8e:30:b9:5d:74:93:9f:ef:4a:82:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4C:F8:01:4F:DE:58:EB:CF:1C:A0:DA:24:36:48:F5:27:54:7F:04
            X509v3 Authority Key Identifier:
                keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:bb:f9:fc:7b:14:c2:12:af:13:07:8e:bd:6f:1a:12:b5:
         ba:7c:ae:1c:b0:0d:1a:3a:26:eb:a7:d5:db:00:51:db:fe:85:
         1d:c9:09:fa:af:dc:d8:97:d1:ef:aa:8b:51:52:c3:f3:5b:3f:
         23:b8:06:a9:a3:cc:f9:8a:51:30:76:0c:68:ac:3d:7e:c5:6b:
         fd:1b:10:ed:19:35:80:f8:cf:3a:c4:e7:94:35:78:9e:15:34:
         44:ca:5f:ee:da:9c:72:00:2d:38:cf:6c:50:70:c3:19:f6:d1:
         06:7c:20:14:31:58:68:d2:77:4f:f8:26:83:27:46:59:5f:99:
         48:26:9e:ca:5e:7e:1d:2e:43:56:fe:b1:7d:cd:ed:5b:30:d7:
         fe:0f:6e:41:e0:dc:6e:3d:6c:2a:19:34:40:64:3f:9d:d6:ad:
         fd:13:91:30:80:a2:85:61:cc:ff:90:8a:7f:34:18:d1:27:c3:
         db:23:14:db:ad:d4:e5:b6:6d:0a:56:1d:75:2c:07:0f:d4:a3:
         ec:68:be:f7:60:86:cb:5a:b0:c0:58:ad:77:f2:ea:5f:a7:bc:
         8c:d0:8b:d0:7f:68:24:bf:ef:38:6a:6e:23:20:8b:dd:c2:30:
         7f:f8:d3:ef:5b:7c:0e:01:2d:d5:08:11:c0:c5:7a:92:54:07:
         2b:cc:48:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 09:36:13 2025 by rpki-client