Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File:                     K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier:          nE2xjhbvmsKOzDCwkHGn9yPAsM7aJkcEa0xro4JZiy8=
Subject key identifier:   77:59:AD:60:A6:81:9C:F1:67:1B:4B:59:67:B0:07:16:43:7F:C3:6F
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer:       /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial:       01984B543232D634AE7D355328B8DD9747C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number:          160C
Signing time:             Sun 27 Jul 2025 10:01:05 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:05 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:05 +0000
Files and hashes:         1: AmmERHoFL94GmD-TNoEsdCRoLA0.roa (hash: biK301TWdWY9asw86ndZF9AzE6I4gnsLDy1ooUih+WA=)
                          2: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: OOhGBphdSiYgrT9G67OMzQHzFyyX5yid95htoNMRglw=)
                          3: Yir1wFnAK-DFdW1gJQQBqKeL_rg.roa (hash: /+asFMl4xLs7yAsL3JI4lb0AzpjlX5T5v9MFr+IdWAw=)
                          4: uUIHLpHOzvZGAd44SZTSJe8l41g.roa (hash: fYWeKpFER5K7DmZGk625fBtbp6QjScVAI5NXZ5fqiWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:32:32:d6:34:ae:7d:35:53:28:b8:dd:97:47:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
        Validity
            Not Before: Jul 27 10:01:05 2025 GMT
            Not After : Jul 28 10:01:05 2025 GMT
        Subject: CN=7759ad60a6819cf1671b4b5967b00716437fc36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:18:5c:6d:75:c8:55:cc:53:af:40:27:cb:
                    7a:7c:0e:a9:f7:21:ad:06:87:53:68:91:ae:49:4b:
                    15:a6:8c:f7:de:e9:ad:b8:3d:7d:c8:c2:34:f4:d8:
                    75:8f:e4:a9:02:4e:27:89:64:21:b7:aa:1f:25:24:
                    8e:f0:f2:b7:c5:d9:15:5a:36:37:c7:f7:58:41:30:
                    f9:ef:65:71:57:d2:9e:a5:c6:7a:1f:01:06:05:7c:
                    9f:be:56:fe:e1:eb:5b:18:e5:ff:e9:79:dd:db:ef:
                    85:eb:0f:b2:c3:28:e9:7b:c3:3c:34:f5:c2:a3:c5:
                    c9:2c:76:51:ab:5f:63:25:93:ed:ed:f4:ad:1f:7f:
                    51:b4:86:66:1d:fa:35:84:8e:00:78:3b:11:86:85:
                    a0:52:8c:a5:24:99:16:d1:d8:b1:62:8b:42:c8:d3:
                    54:6f:80:2c:f0:bf:a0:42:3b:ed:96:53:4d:db:04:
                    5c:ce:32:ff:13:79:64:2e:28:5b:60:b4:a4:e4:06:
                    47:d7:da:29:60:e5:de:66:32:96:4d:57:fa:57:19:
                    aa:48:99:72:ab:6b:d7:3e:4f:5d:55:a5:ce:25:78:
                    27:51:1b:bb:44:ff:f8:cc:35:e9:88:ae:b7:0b:74:
                    4a:e8:78:f8:89:3f:a2:64:da:3f:1f:c7:96:55:83:
                    f4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:59:AD:60:A6:81:9C:F1:67:1B:4B:59:67:B0:07:16:43:7F:C3:6F
            X509v3 Authority Key Identifier:
                keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:30:b5:f3:04:5a:29:63:52:1c:6c:10:ac:dd:95:f9:c9:51:
         94:75:62:4f:2f:bd:3f:9a:c3:f0:31:ab:ae:80:71:29:6d:37:
         00:6b:6e:9c:78:86:fb:85:ff:4c:3f:ed:ac:6c:14:84:cc:50:
         34:2d:b3:38:79:41:3b:11:7c:07:0b:2c:47:35:42:9c:c8:b0:
         39:3c:d3:55:dd:e8:37:98:90:6a:30:fa:70:36:de:8b:db:f3:
         6b:a5:2f:1b:e9:f1:9e:78:bd:16:fa:c0:01:06:9a:a6:62:a3:
         b0:c7:06:60:02:a2:6f:22:bc:45:a6:62:0c:7c:ad:49:a0:5d:
         a7:a7:79:d1:c0:fc:87:c0:8f:c0:78:c7:75:28:05:b1:70:84:
         de:89:2d:a5:1d:85:03:9b:b1:ae:31:4a:a2:6a:79:e4:74:18:
         1a:7d:ff:2c:56:68:76:41:9a:aa:95:8b:46:31:58:1a:c3:4b:
         a7:94:f6:0a:84:40:0e:aa:a6:e5:1b:75:1f:3b:7f:e2:07:0d:
         d3:1f:5a:09:2d:cf:64:85:74:e1:4d:cf:75:4d:b7:d2:f4:b8:
         a0:19:f7:4c:6c:f4:de:68:50:4b:73:ff:c1:d9:f8:65:55:35:
         6b:d4:05:cf:33:e0:2c:f4:85:d0:4f:ab:e3:e6:49:af:47:72:
         b7:60:aa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:09:51 2025 by rpki-client