Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
File:                     Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json)
Hash identifier:          xfmM2cuAVwNx7N0NIVv0xBE1Pa5B8sZBgATkatf7+cY=
Subject key identifier:   F1:34:22:88:51:BB:87:58:DE:B9:42:80:79:AF:43:C6:61:DD:6E:CB
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Certificate issuer:       /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial:       019833B989AA1E915EA1766A410DB927E869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
Manifest number:          160E
Signing time:             Tue 22 Jul 2025 20:00:53 +0000
Manifest this update:     Tue 22 Jul 2025 20:00:53 +0000
Manifest next update:     Wed 23 Jul 2025 20:00:53 +0000
Files and hashes:         1: 5GDtzDxQGf1ytzR86OdYdVfgY10.roa (hash: Y7XPkUc6nkXQ9pggu+D76scK3gfgjCpno0IF9isJJaU=)
                          2: 8_VofHRjLqpbexG_OvMfcAc1YnM.roa (hash: LU1FpEuXnyVe9W4sDVOna2qpuw6a/LcZ+SoooZ+qS1I=)
                          3: FLnErLvOpzZbsRT_gxw1xkGyG-k.roa (hash: hVcpYnUD1s1paKRtMc3s9Fba/ywgfiiofSMSn9fncl4=)
                          4: HIaBGvmxdnBLgd35agLSA4bkubM.roa (hash: i0iDI6axXMfE17qcVLg1zq6ssI2uwAR7lVjpfhI0sp0=)
                          5: IsflCESWPhjRHYjITbBIhqfYpPo.roa (hash: sT5tNZEaEL4o7glcBW9pWPzalexd/M/QWhbl7A9RAP8=)
                          6: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: +2BygrC2g1Ya44cT8iwoKGcKDF4z4uGUPfdPcFxvi1M=)
                          7: TJ_T11Afazhf3X-XRb_MTGkgqHs.roa (hash: OJh2YQWVoUHD+3A+f2ze8IRJ0craejKYG/dno9c7vf8=)
                          8: WY6OCR49xjLWDGDrTxBKtibrV1g.roa (hash: /EmbrZRMYbTXiRc/+8GCsi3J47C1og/mSFwDOqHSu8U=)
                          9: bkHQOuqvDDjiWoZ_FWNlw3OoyWg.roa (hash: 4pB5ThjluE6IXLoMqZ2xaF+3UW/apUpBTyNJgyK3/o0=)
                          10: dpiwVyP36v1YV2afir9h5xUMcuE.roa (hash: YrE4G5icZyg4bgdRocIY+JMcSadk1tZR0cVr4Ds0EB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:33:b9:89:aa:1e:91:5e:a1:76:6a:41:0d:b9:27:e8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
        Validity
            Not Before: Jul 22 20:00:53 2025 GMT
            Not After : Jul 23 20:00:53 2025 GMT
        Subject: CN=f134228851bb8758deb9428079af43c661dd6ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:59:0d:d1:3d:3e:a0:ee:18:c5:82:1d:2a:1e:
                    1e:75:60:ba:d0:d6:07:71:88:f2:2a:13:70:21:a4:
                    2b:b4:ca:96:38:9e:5a:d6:37:c7:c7:df:41:9b:8e:
                    77:ab:29:74:07:e0:a2:57:96:93:af:33:10:45:d9:
                    55:64:f4:9b:0a:d4:72:0c:88:4d:92:18:28:6a:1f:
                    7a:1e:c6:d2:f0:1d:70:fc:7f:9b:b1:b2:f9:54:7d:
                    a8:ef:40:a7:75:a2:8a:c2:9b:b7:a0:28:99:0e:2e:
                    e8:64:63:c2:ed:b2:2b:c1:7a:03:bd:e2:cd:05:f0:
                    7f:8d:36:af:1f:ae:4a:b0:46:5c:56:e4:f1:67:1c:
                    47:c0:25:6c:50:c2:5c:28:a8:23:9a:36:e2:a2:e9:
                    e7:9a:fd:5f:33:2f:28:7d:d0:59:e8:4d:0f:67:2e:
                    55:48:34:fc:68:98:f6:ac:56:f0:32:f4:4f:3a:fd:
                    86:9d:a3:d6:6a:88:79:62:d5:15:4e:8b:e2:35:12:
                    ac:c5:b8:2d:4f:f2:0e:a8:70:91:b0:d4:e8:d5:b1:
                    7f:65:36:13:c0:ed:1f:00:8b:40:e6:62:4e:f4:b4:
                    24:15:7d:89:e0:f2:c4:43:53:de:f8:b5:35:e3:1d:
                    f4:09:86:28:bb:c9:1f:dd:18:69:b4:59:c2:63:5e:
                    5e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:34:22:88:51:BB:87:58:DE:B9:42:80:79:AF:43:C6:61:DD:6E:CB
            X509v3 Authority Key Identifier:
                keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:3d:62:76:ad:ae:ef:5a:0b:d9:38:bb:3d:0a:e7:21:5a:d7:
         ae:35:e0:f2:94:99:9c:62:3c:9e:5b:a7:39:ec:b8:45:b5:d3:
         2e:37:ca:78:d3:0a:a1:23:ba:85:6d:31:0f:25:ae:ef:b3:99:
         10:54:17:2a:00:70:c2:96:0c:60:65:e6:04:d3:95:cd:98:d2:
         f8:76:ee:b5:14:27:29:86:5a:c6:ba:6d:cf:e9:0f:78:49:30:
         0b:e3:f9:2c:f9:5e:74:85:f3:0c:49:76:d7:ef:07:4b:c1:35:
         41:c6:16:cb:db:33:12:69:99:6c:9e:43:33:ba:cb:56:50:ae:
         11:ad:00:1a:d0:2b:1a:f3:27:d0:c6:2a:73:19:dd:8a:32:4e:
         62:34:32:86:0e:20:76:f9:de:7e:a9:f5:b6:1a:7a:25:32:ea:
         77:61:7e:85:e8:5a:18:06:33:bb:e6:01:64:b2:7c:67:2a:64:
         ee:ca:fb:7b:95:4e:7c:45:2e:ac:e5:5e:ff:70:53:b0:a1:2e:
         9d:d7:25:31:68:bf:10:98:c5:db:77:c5:3a:43:8b:c3:24:c2:
         77:9c:9f:2e:6c:c1:74:3d:98:f9:d6:6f:41:0a:df:6e:73:d3:
         74:8f:5e:aa:33:13:9b:d1:f0:0f:d8:e9:37:b4:20:45:f9:67:
         b2:1b:95:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:19:25 2025 by rpki-client