Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
File:                     IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json)
Hash identifier:          EhU8ukyEa6mmANgbzbpGthV6UFTochFy5k3f9SYYYyA=
Subject key identifier:   CD:EF:B6:B2:59:54:B9:D9:36:90:E8:3F:3B:D5:78:CE:46:E9:88:32
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Certificate issuer:       /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial:       019844ACE712DDB60D26085A6D763703E36A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
Manifest number:          160C
Signing time:             Sat 26 Jul 2025 03:00:38 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:38 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:38 +0000
Files and hashes:         1: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: PGrJrdfFSH8CUmGsjIw6FzftPXtE17Jdtg+YJouOLqI=)
                          2: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=)
                          3: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=)
                          4: NlD60E7lLlgKw-PAVTBiBt31h5g.roa (hash: Be7pkoxW5md2fMzfMMkXfWt3s8AQ9PfjTdxxsGL6hhM=)
                          5: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=)
                          6: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=)
                          7: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=)
                          8: eOgvquigvzDPj-8dhQt95xkui_E.roa (hash: zEpy4lJB9tJ5de8zvRSwkcXfAVk3pin2iihLqa8DHd8=)
                          9: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=)
                          10: s6l73Ozc9G__irpTpPlNucOT8bs.roa (hash: GqBwmeoAuFCGB9Y+I57QWriPb1mo81JmyaYf7vUIrHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:e7:12:dd:b6:0d:26:08:5a:6d:76:37:03:e3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
        Validity
            Not Before: Jul 26 03:00:38 2025 GMT
            Not After : Jul 27 03:00:38 2025 GMT
        Subject: CN=cdefb6b25954b9d93690e83f3bd578ce46e98832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:eb:87:92:44:02:ea:6d:be:a7:51:a6:6c:
                    cc:60:cd:a4:44:2a:2e:26:85:86:59:e3:89:ef:02:
                    0c:f4:4b:7c:1a:16:69:b2:7f:cf:8d:93:c2:96:f4:
                    b2:a3:32:bb:c4:1e:19:03:e3:6c:6c:4a:9c:de:eb:
                    68:8f:6e:8e:46:eb:0a:ed:61:56:3b:8e:6b:63:ba:
                    45:3e:80:bb:44:ed:b1:c1:01:df:95:d9:c8:a9:91:
                    30:cf:e9:6e:79:48:66:dc:90:07:56:b3:21:73:d6:
                    d5:0a:54:c5:1a:f3:08:3e:0f:c4:b4:30:af:51:61:
                    5f:93:93:e7:89:42:79:4b:36:e0:50:23:ce:81:9b:
                    bb:30:6c:fe:24:06:ed:ba:54:13:e1:78:07:20:3f:
                    4f:8d:33:d5:ec:12:f4:21:a3:af:b4:8e:15:3b:0c:
                    95:d4:cd:f5:a9:ba:49:fb:d2:2a:e3:37:4c:08:88:
                    37:d4:d3:d5:be:1d:9f:64:92:d0:09:ab:c4:d2:28:
                    45:7d:4a:8d:e9:5b:8e:d6:44:30:33:3d:30:ee:cf:
                    a7:69:54:01:fd:45:90:5f:a6:6b:cb:70:82:e1:43:
                    94:06:b8:b7:02:08:a5:46:46:df:be:a5:08:eb:b1:
                    7a:a1:af:ab:fd:de:56:38:f5:48:ff:16:53:02:45:
                    ac:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EF:B6:B2:59:54:B9:D9:36:90:E8:3F:3B:D5:78:CE:46:E9:88:32
            X509v3 Authority Key Identifier:
                keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:72:fc:dc:65:2a:fe:cf:d1:6c:98:99:7d:cb:78:af:43:87:
         0b:14:ce:ee:88:df:5e:41:3a:17:c0:11:ce:aa:90:e1:1d:77:
         53:02:4b:73:74:be:6c:1b:33:54:53:a8:e3:f1:40:91:6a:5b:
         be:eb:07:8b:63:66:2b:ce:9e:51:58:07:35:da:68:e4:3b:1c:
         45:9e:f1:29:f9:b6:b7:d7:9d:d3:8a:05:7d:f8:c4:5a:01:74:
         cd:69:eb:ac:d8:c2:42:41:08:cf:08:e0:19:51:73:70:1d:c9:
         1e:fa:8d:d1:37:78:7e:ff:cb:c5:86:ab:c5:f0:c6:d9:56:a8:
         89:2e:57:32:61:56:d9:4d:04:fc:e4:4e:a3:d7:b0:ce:8b:3e:
         b0:86:27:ac:b3:21:22:59:2e:73:38:44:b9:96:d1:36:7e:a3:
         29:27:d9:96:77:2b:ba:ff:eb:c6:d1:79:64:6b:8d:59:5c:f3:
         64:13:37:bc:b8:02:b5:e2:8f:ba:63:60:4d:34:46:0f:48:ab:
         5b:01:eb:91:ad:35:d7:11:1a:da:42:70:39:9c:5b:0c:aa:15:
         fd:5e:34:26:bd:0a:61:49:8e:40:53:a6:84:ff:59:81:05:a4:
         a9:f3:c1:d6:b2:76:d0:db:59:c2:15:c0:f6:5e:ec:d2:c1:6e:
         2f:ae:46:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:27:33 2025 by rpki-client