Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
File:                     gmf7Sgtne4N3kHuC-x-4gQov7wg.mft (raw, json)
Hash identifier:          Cx1q2E+FuS+nQSB1q4ugkm+GK42Rx2qfhnDSpbKIbw4=
Subject key identifier:   EA:BE:18:CA:D2:0D:17:80:76:A7:F2:3F:09:B3:F8:B4:59:E8:A5:6B
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Certificate issuer:       /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial:       01984966B6D82AB3F7E4EB54E770AE2C94C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
Manifest number:          160F
Signing time:             Sun 27 Jul 2025 01:02:04 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:04 +0000
Manifest next update:     Mon 28 Jul 2025 01:02:04 +0000
Files and hashes:         1: M06N0gwo3JL6GFlpwhETdttP9PQ.roa (hash: JdKy18XjO1bCDj++PIiRzZGq0fdEiBKbHucnCQRbUms=)
                          2: gmf7Sgtne4N3kHuC-x-4gQov7wg.crl (hash: 66JKADiCW7OoKexeFF5KWTvUu5Qlz+rX1ZJMlN7kqhI=)
                          3: l6IYvh1CKLMSrMEr-TM7q3chK9Y.roa (hash: rnPxXzKtfkYxdX0ghFEuYclewjG7j4/p3CTTLzWXDi4=)
                          4: rJqYPA_Hva-IaBLfUn9RcoY2ojY.roa (hash: o6BNzu4DD6yxBTs+9aSDottFhpX2sbKr1oEfAdwf4NU=)
                          5: wpH7An9OGaqDDHbjqAXOYrzTOjY.roa (hash: 2UBnZqOnnI+7jNrBotsNcwolkfZL1bsPGHesYmJ3hac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 01:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:b6:d8:2a:b3:f7:e4:eb:54:e7:70:ae:2c:94:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
        Validity
            Not Before: Jul 27 01:02:04 2025 GMT
            Not After : Jul 28 01:02:04 2025 GMT
        Subject: CN=eabe18cad20d178076a7f23f09b3f8b459e8a56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:72:e9:ae:86:fb:68:dd:ef:e3:11:f3:32:
                    af:2d:31:5a:34:25:85:68:c0:00:6b:04:43:a8:06:
                    2c:01:79:d1:a0:1a:10:15:ae:6c:ea:af:00:f3:a0:
                    65:ad:6b:fe:cf:e4:c0:da:85:ea:59:83:ee:41:66:
                    25:ed:4d:15:b8:d6:10:b4:8e:4a:db:cf:92:16:ec:
                    4b:76:c5:6c:ee:a0:9f:1d:a0:07:29:67:8c:22:47:
                    47:b8:6a:59:a1:6f:ad:0a:b4:1b:67:60:d0:15:d6:
                    ed:8b:ae:76:9c:a0:40:d2:1e:91:6e:f7:ed:83:5b:
                    fc:1c:9d:bd:5a:e7:01:85:e1:06:e4:c4:82:6c:ee:
                    2d:37:10:bc:20:e9:37:e5:5f:22:5d:0e:a9:91:37:
                    8e:99:59:95:88:70:f4:c9:5b:0b:f0:f8:78:6a:c6:
                    4a:35:4f:18:38:1d:1a:80:b1:f1:c6:ea:35:8e:73:
                    50:82:27:12:de:b2:58:79:f2:7d:d2:1c:cd:53:8d:
                    49:06:01:b0:8f:e2:6d:18:b6:9f:6d:13:59:ca:37:
                    f8:02:ff:86:f4:76:1d:9f:7b:4c:c1:22:b8:25:b0:
                    51:c0:a2:03:da:ce:93:85:09:63:7b:3b:78:2e:65:
                    51:5b:49:d8:4e:78:32:ad:97:31:f6:90:ee:86:03:
                    37:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BE:18:CA:D2:0D:17:80:76:A7:F2:3F:09:B3:F8:B4:59:E8:A5:6B
            X509v3 Authority Key Identifier:
                keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c6:a0:53:37:e8:eb:64:4c:c8:5f:94:44:f6:36:62:59:77:
         1e:16:62:73:4c:fd:fc:ac:8d:52:f3:31:8c:22:d8:32:76:bc:
         f2:67:fc:a5:06:ed:46:89:c1:44:8d:46:2d:71:58:71:70:57:
         0e:53:7e:a5:0a:0c:6f:c2:59:75:48:35:18:6d:a4:99:4d:45:
         49:e8:ce:d3:3d:bd:04:03:55:b3:4d:79:77:16:95:59:12:cc:
         7a:a6:6d:16:c0:2e:b9:c9:e4:28:24:88:38:df:61:30:ed:5e:
         6a:6b:3d:f0:23:5b:c2:b9:85:f0:4c:0b:d9:e6:92:75:9f:05:
         05:a0:26:24:da:c4:25:a6:08:a3:9d:7b:31:a1:31:fc:36:21:
         30:43:0d:f0:2a:bc:df:c1:b5:c9:b7:33:56:89:29:fe:1d:39:
         c3:15:ec:3b:8a:aa:f1:60:f9:3f:98:8b:d7:61:d5:f1:d6:e0:
         22:bc:b5:df:64:b0:ec:23:b5:b6:39:97:9e:12:13:83:28:ce:
         03:ff:25:83:c4:d1:92:f9:6d:8f:c8:fa:b7:dc:bb:bb:2b:64:
         b0:0f:54:48:5c:03:50:1b:d1:56:4d:dd:7c:64:8e:90:9c:fc:
         0b:c7:e5:4f:5b:cc:31:9c:e1:7c:d1:0b:f1:bc:50:c0:98:93:
         9d:9f:2d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:24 2025 by rpki-client