Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
File:                     egXqWYBflL4YUoIDm7ri-oqSU_U.mft (raw, json)
Hash identifier:          WPrqlXhC58a7NVonRK9kcIG32vjgzaRp9GOGuMiBZrM=
Subject key identifier:   C5:A9:70:AA:BC:52:07:58:8E:BC:4D:9C:4D:EB:21:85:88:03:2F:6E
Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
Certificate issuer:       /CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Certificate serial:       019848532C7B37DA5AC9BDCAA645FA3A379A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
Manifest number:          160D
Signing time:             Sat 26 Jul 2025 20:01:07 +0000
Manifest this update:     Sat 26 Jul 2025 20:01:07 +0000
Manifest next update:     Sun 27 Jul 2025 20:01:07 +0000
Files and hashes:         1: IfT3mv-srwgc4CQ7fQArEzebBBA.roa (hash: 95gb7vVhebJAmqOzG0YfdjEqberXj+/78wM2EUtK1Cc=)
                          2: M7L8Od19i3zBt1lIltsTIc1xDpY.roa (hash: Kdrd9VSOIQRz2qDd3ciFqvoijJdSk3rHZS6hc9xgTio=)
                          3: egXqWYBflL4YUoIDm7ri-oqSU_U.crl (hash: gN9CLDdIL70CzFTvu99elylRLcZJLUBbHUwj0JazZpY=)
                          4: xlKFZ-V2mwLdduwCkt0hVKuSeMc.roa (hash: ZuaV3q0OgmaLrqgLObSDoZ2eNoEB+XGTiCr0RvXHj+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:53:2c:7b:37:da:5a:c9:bd:ca:a6:45:fa:3a:37:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5
        Validity
            Not Before: Jul 26 20:01:07 2025 GMT
            Not After : Jul 27 20:01:07 2025 GMT
        Subject: CN=c5a970aabc5207588ebc4d9c4deb218588032f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:31:f0:fc:60:cc:d9:06:6e:08:77:ea:2e:
                    a1:78:a3:7a:ed:fa:6f:83:b9:af:1c:2c:cf:6e:cb:
                    88:68:29:d7:1e:38:1f:fc:1d:89:74:1f:80:67:c0:
                    93:a3:b2:06:14:8f:72:ca:db:f4:10:6a:c1:fd:30:
                    34:c7:6e:5c:88:e9:cb:a3:1b:10:75:15:f4:c6:e5:
                    3d:a8:66:68:50:f5:1d:a1:88:98:9e:66:f9:e1:0e:
                    2c:aa:aa:72:1c:6f:1a:69:55:40:95:c3:d8:1f:74:
                    e5:bc:03:f1:a2:0d:21:c0:46:1e:e4:34:d8:d4:bb:
                    f2:2a:ed:8d:38:72:25:9d:4a:84:99:d0:1b:c7:28:
                    fe:d6:af:f4:b2:13:75:4b:35:54:23:85:59:1e:8d:
                    ec:9b:30:34:14:07:db:54:d9:4f:95:d2:b4:10:8d:
                    66:97:a1:af:79:95:a3:a6:d4:4f:0e:7d:42:9f:89:
                    10:3e:55:c3:68:2f:f3:66:b1:03:87:5c:94:0c:4b:
                    bb:7e:fa:b5:91:c9:7b:1c:89:36:8c:66:0d:5a:9c:
                    c6:f5:1d:77:9d:64:61:e6:d0:37:b8:97:1f:51:e8:
                    76:89:1b:ff:2f:c7:88:35:df:84:de:b5:41:be:d4:
                    b1:8a:f3:dc:22:8c:7a:63:4c:56:a7:ec:03:9e:4c:
                    76:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A9:70:AA:BC:52:07:58:8E:BC:4D:9C:4D:EB:21:85:88:03:2F:6E
            X509v3 Authority Key Identifier:
                keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:07:62:60:39:68:09:9f:b8:e3:7c:21:6b:44:30:8c:39:d9:
         38:80:f1:a9:82:18:b9:65:49:a7:d4:bc:e6:98:cb:c8:ea:66:
         bd:9f:a9:1c:69:c7:76:58:25:a8:7b:ae:9d:be:9c:d8:86:ab:
         cc:85:26:85:27:3d:2e:37:84:87:f9:b8:03:e4:94:7c:fd:76:
         e6:b8:4a:65:41:e3:30:05:50:2b:47:4a:3a:de:d5:17:ec:6f:
         26:c9:7a:79:75:6f:53:05:41:85:ae:1a:21:d3:77:6f:2c:df:
         87:8d:e2:05:0d:bb:0e:44:7e:e5:0e:87:76:05:2f:60:46:79:
         cf:88:ff:ad:7c:f6:fd:1d:d5:6b:26:02:76:40:fa:d5:c9:f2:
         21:c3:7f:0f:ff:69:33:5c:dc:95:96:7c:7e:d1:5d:f6:8c:02:
         21:a3:c7:21:a7:ee:3c:2b:98:10:35:54:8b:e4:66:d4:76:de:
         a9:55:36:7d:1d:5b:95:7e:24:5b:7a:1b:ed:44:ac:47:dd:cf:
         3c:23:e3:88:d4:a8:e9:91:46:77:fd:23:fb:25:6a:fe:21:e7:
         ba:63:ca:46:1a:f6:ee:7a:ac:06:e1:ce:b6:c0:66:b5:2c:a1:
         9b:9c:40:00:f0:a7:bc:ad:ca:8d:35:9c:a3:8f:b4:59:d7:c4:
         63:57:1d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:29:29 2025 by rpki-client