Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          M+1w2zX/nT+vM2fUBG8qt+tRz8lAk23IyhmBCUlvMog=
Subject key identifier:   2C:4B:8D:0C:0B:19:2E:FC:51:8D:E3:1C:30:38:23:F2:21:DD:3D:69
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       0198334B9A1530EBF2F266ADF159CAD77EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          169E
Signing time:             Tue 22 Jul 2025 18:00:49 +0000
Manifest this update:     Tue 22 Jul 2025 18:00:49 +0000
Manifest next update:     Wed 23 Jul 2025 18:00:49 +0000
Files and hashes:         1: 0Ku6hM-uBGPbIB_elC1-63mAMPQ.roa (hash: COta24brNXG7Hg0yqxT50IIeRD/EU1T0z8f77M/W0Yo=)
                          2: 0r24pIQSTUD5N5L07GOWGFKPpV8.roa (hash: trXkO9svjCxRC078/qaWkwZVcRw/r/RbNzaK05elAEs=)
                          3: 1-W34Y2-6ZjemXz3iWQp8JT5r4fo.roa (hash: jNjeNOA7d8RyKrYy4kXSP0ufCj18S8yCDg4Nofw0dAY=)
                          4: EkFoJFaGBhEamXzDueIrcP26LBc.roa (hash: PQO2ZDlIaJ7jCYwx8vtlK6hg74IbDpuCQQjGUuzjVhU=)
                          5: KQ1oNR09mKgd5ku7SR1U_e9V9fQ.roa (hash: cs83TD53Tvlf/W2SbQnH3f+S/haNzyXJayHuIXfao20=)
                          6: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=)
                          7: R4JA4ZrzZRT6P7L7s0XA8tBlvow.roa (hash: UZWxFLVEGSwKY6r7vPrE+HW6Om5TTOD3+yQvi0X4C9A=)
                          8: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: pw/BR7gp7d8ixyFSLciUWP5aCDbksATMcXga8rfE4hE=)
                          9: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=)
                          10: V5zbutGfbh5lgD5tOB55BSZL6mM.roa (hash: 8dfbuUOKEzC/ptg0//A1zNKfTmzKWKS3nTLCemG3GRo=)
                          11: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=)
                          12: WclbZXzoRolOPnP1txTGa2N2wfw.roa (hash: bkUop8nfZL+I8FoNjqYPn2viT45YyNvKLtfeDigIXyI=)
                          13: Zj4JwFMN6H5YeHt4cvNXltyCdE4.roa (hash: CWOsIZG4hIEMhn5XzXUXZbhFt0Yejg6in7qKXYgJegA=)
                          14: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (hash: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=)
                          15: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=)
                          16: bZniM2QlgkpTXR-OwANLXtwZtPE.roa (hash: 1uGphNb2cimTL54FLmsjWSi2OJxcMRM81uY8UPnrcpo=)
                          17: iPxdZuzxvDtlhje1pBxfz_ffoSI.roa (hash: 5nZeFKjMPEJbsRI/uBt0UR440fY87EaeHxRz6CkKzyc=)
                          18: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=)
                          19: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=)
                          20: yF60MXomOPXicQ4dVy_gu3Jce0c.roa (hash: 5FKE6qFccFKdKUpBcGBwVGHo07CqDvWyXp8ktMwwG+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:33:4b:9a:15:30:eb:f2:f2:66:ad:f1:59:ca:d7:7e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Jul 22 18:00:49 2025 GMT
            Not After : Jul 23 18:00:49 2025 GMT
        Subject: CN=2c4b8d0c0b192efc518de31c303823f221dd3d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:62:f9:81:1f:0f:8e:28:69:b9:19:bd:e9:77:
                    d9:df:14:5f:12:fd:9e:05:e8:d4:cf:ac:40:9f:dc:
                    b6:21:cd:71:38:76:54:c8:b0:0e:c5:2f:1b:25:36:
                    57:26:9c:93:c8:4b:8d:71:9f:d7:74:b5:0a:a1:d2:
                    a7:6c:81:53:5a:c5:c2:90:09:03:c4:ba:78:bc:1a:
                    34:b9:34:21:6f:46:d8:85:21:96:b0:c4:5b:a1:b2:
                    c8:2e:44:de:7c:29:3b:a6:a4:e4:85:5a:fc:50:83:
                    fb:9f:68:ca:0c:8b:81:18:c0:87:15:0b:d4:68:ef:
                    53:59:dd:7f:04:1e:d4:3c:4d:3b:e0:5e:94:d5:ff:
                    13:0c:43:39:cc:c9:9f:9c:ac:55:ee:57:7d:8c:a7:
                    bb:a6:b3:2a:e3:9b:1e:c7:64:9b:4f:91:59:d2:a5:
                    c3:9c:09:2f:bf:fe:4c:9b:29:9b:c9:2e:b9:bc:28:
                    de:59:8f:cb:1a:40:84:55:2e:cd:20:86:a3:f0:63:
                    13:5c:29:1c:2b:b2:61:6e:49:d8:ed:12:2f:93:92:
                    02:6b:82:9c:e4:87:b8:da:c2:eb:11:6a:49:36:ab:
                    6c:d7:ac:78:3e:f0:bf:93:93:4e:3b:19:fa:bb:cf:
                    d1:3a:a9:ce:1c:10:a7:01:c0:c7:fc:ff:8b:1e:f2:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4B:8D:0C:0B:19:2E:FC:51:8D:E3:1C:30:38:23:F2:21:DD:3D:69
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:32:b8:b4:86:55:8b:c6:63:22:0d:96:7d:02:1c:27:41:ca:
         ed:24:a5:ba:a6:ba:d3:2e:88:58:37:47:83:fb:c1:84:0a:90:
         21:16:b6:72:c7:02:78:20:67:ba:d2:b2:b4:6a:d4:ec:bc:cd:
         9d:1e:4d:eb:08:3c:f4:b0:8d:58:c9:42:77:88:9c:cc:25:9a:
         3f:4c:2d:81:8b:40:5a:63:5a:1a:2f:6f:a6:ca:50:f0:54:0f:
         0a:43:db:b9:a7:d1:6d:f3:02:cf:c2:15:e8:bc:8e:ea:1f:bc:
         a2:41:cc:5a:03:f9:35:33:27:30:0a:94:e2:ac:97:b9:a4:5e:
         2e:31:fa:63:b2:90:b3:2b:42:a9:0a:1c:5a:d4:91:17:12:13:
         6e:52:24:e6:c7:21:89:7b:51:cb:c1:69:1f:35:01:3c:64:2a:
         c4:c8:45:4c:68:f3:82:f7:d6:80:e5:69:59:ba:b2:72:6a:8e:
         1e:63:71:f7:f6:02:13:59:22:3b:9f:96:3f:90:a2:de:08:7f:
         ad:55:58:1e:c8:65:99:c2:89:8e:53:9c:b2:d5:c9:0b:e7:76:
         f5:12:fe:ce:9c:a1:17:1c:b7:88:c0:cd:22:53:6d:43:54:f3:
         cf:f6:d6:7e:a4:90:e4:14:9f:75:9b:bb:9e:81:7c:88:fb:91:
         84:8e:54:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:01:37 2025 by rpki-client