Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
File:                     q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json)
Hash identifier:          eIpp3GwU0aJDiegYpiQT00ZPsEifd+hg1TokQXI4jKE=
Subject key identifier:   12:68:45:FC:D3:B1:7B:B9:E4:4B:00:9B:F9:BE:CD:CD:F0:5B:73:0C
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Certificate issuer:       /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial:       01984AAEA8B997880A0D3679807B6EEB74EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
Manifest number:          160B
Signing time:             Sun 27 Jul 2025 07:00:16 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:16 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:16 +0000
Files and hashes:         1: EV5m5XkVlwJiCAVuE-Ap-f7iyzE.roa (hash: 5PDn99juoAn/xETBDuvN6m9sq91U6NavWyjHbCXKOeQ=)
                          2: FAhtWfmDEr62tA8-MdL4s1_WH2Q.roa (hash: GtQmguJ7Q5PK416zswB+RN8W/nrjymWunr8cc+Q6G9I=)
                          3: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: c++J20IKzlXuwPlZ7aJn6MZ4aqC2ONM4fSKS630FtjM=)
                          4: q_qPSgEpylFC-voOECXeWUWdHJM.roa (hash: jFOGBq/GXOLKGj5Jj8L6FPHFg+Kwe4gyyf67qENLLPY=)
                          5: tS4qFuiX3ntHvDjVyJpnqQIgubM.roa (hash: N7idUn1lSpqbvStbcsN5u6MjxI9pbc7GDDAuvP2mI1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:a8:b9:97:88:0a:0d:36:79:80:7b:6e:eb:74:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
        Validity
            Not Before: Jul 27 07:00:16 2025 GMT
            Not After : Jul 28 07:00:16 2025 GMT
        Subject: CN=126845fcd3b17bb9e44b009bf9becdcdf05b730c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:62:ee:0b:54:07:6c:03:7a:c1:06:f2:dd:6e:
                    42:70:a3:7b:e7:de:f7:fa:0c:18:b6:65:40:4d:d3:
                    ea:28:bd:ba:61:33:10:c8:da:1f:4c:52:81:34:bc:
                    31:fe:98:3b:4b:29:04:3b:db:4c:73:5e:aa:77:93:
                    6b:71:fd:2b:69:ba:16:6e:3d:c2:b5:03:ec:bc:4e:
                    ce:a5:16:51:f1:f3:c9:23:80:be:30:02:dd:19:fc:
                    a1:ef:fd:02:8d:11:04:d7:0b:6e:e5:ab:a8:dc:67:
                    c8:68:d8:ec:af:4f:08:91:83:1d:13:28:90:65:de:
                    1e:f9:53:53:dd:1f:cd:9c:22:fb:ff:ab:b8:4a:d1:
                    b7:df:b6:ca:75:ae:08:61:71:8f:d1:98:a2:41:1d:
                    a2:ad:10:0c:09:5b:cf:c0:15:b3:00:53:72:d2:ee:
                    35:93:4a:5c:c3:c9:4c:d3:b3:b2:8e:6c:e1:5f:00:
                    78:b4:df:d2:ab:e5:9d:68:ca:f8:73:ed:65:71:9e:
                    74:ca:0e:70:78:80:cd:3d:de:98:83:29:87:e8:29:
                    4b:78:90:d5:cd:4e:ea:be:4d:59:fd:1a:27:95:f0:
                    44:f9:5f:1b:c8:ed:00:b3:d9:f9:0a:a0:98:bb:09:
                    12:14:76:f1:2d:3f:1a:46:80:5c:cd:51:e4:d6:a0:
                    7d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:68:45:FC:D3:B1:7B:B9:E4:4B:00:9B:F9:BE:CD:CD:F0:5B:73:0C
            X509v3 Authority Key Identifier:
                keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:23:fc:5e:ab:cc:1d:4e:5b:b4:58:ad:b2:e4:a6:cb:1d:c4:
         26:04:21:d9:22:a4:2f:2b:1b:eb:07:1f:50:d2:35:ed:6f:5e:
         1c:0c:2d:e4:e6:34:bb:5d:31:d6:c6:8f:07:8a:41:e6:e7:dc:
         e4:a7:ee:04:59:23:e8:23:79:01:f8:04:79:2c:d1:73:d4:fb:
         be:77:52:b3:52:41:45:02:80:20:f3:6d:32:57:13:30:e8:99:
         04:3f:52:fe:c3:c2:a5:05:24:5f:f4:c9:45:77:d0:69:de:17:
         27:87:24:f3:96:f8:38:2e:56:9a:6e:9a:ac:97:cc:b8:39:7b:
         d5:ff:6a:dc:a4:77:f2:3c:9c:39:e0:1e:96:c4:05:f4:8f:06:
         2c:ac:84:1e:15:ee:79:e1:50:44:a9:9a:62:6f:df:f5:85:b0:
         79:e5:15:34:5d:aa:50:46:ea:21:2e:d5:bf:56:08:d2:2a:ba:
         ce:95:1e:f8:64:c4:28:31:af:2b:da:20:96:a0:b0:ad:36:8e:
         a9:3d:0f:ec:d3:1f:1f:db:d0:9e:32:56:da:24:ea:98:58:f1:
         f3:1d:b2:1d:e3:67:01:c0:25:8a:52:aa:83:8f:dc:6f:59:a1:
         2d:3c:07:a8:9c:3d:6f:22:e0:95:1e:04:e8:4f:9f:cc:63:e6:
         4f:35:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:28:04 2025 by rpki-client