Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
File:                     Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json)
Hash identifier:          c2idABUbA2KVPMCCOQmefusdfDZEGR14JGzayy5XemQ=
Subject key identifier:   43:E8:D4:30:C3:5C:D0:1C:61:40:F0:AC:12:62:CA:77:7F:13:87:62
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Certificate issuer:       /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial:       0198421A2662183B9065C893FCC3C89F33A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
Manifest number:          160A
Signing time:             Fri 25 Jul 2025 15:01:06 +0000
Manifest this update:     Fri 25 Jul 2025 15:01:06 +0000
Manifest next update:     Sat 26 Jul 2025 15:01:06 +0000
Files and hashes:         1: 6QBVEiLusjnuHnwecVMK9Kg-WII.roa (hash: OapSvDTUmzDRZu9Q3KlIrLgI0CjCfgxrem8xot5UiSo=)
                          2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: EWK5yJTDwBPz1s0M2s1ty5q5pSMtVTq6yUnA0eOiB9c=)
                          3: GiC40GdnPgHbIqIbDNeP-spJi-M.roa (hash: Xd4LHWf6P2V0nuixtM1f8JXOI9EnPVM3k32pXeFOXiw=)
                          4: JeT3PicL3j6wpeXRT3s8FrJpy3w.roa (hash: tjXOPJYxlFtc8BfVkznJC0Nu37PcV0Dt33rxJApZ9kY=)
                          5: L5lOWtMXwmLYho3Arxcpd76R5sw.roa (hash: XM0Za1PmkukhwAWipMkx42usukTFibdWlbabSAWWgH4=)
                          6: Lwic0o2gw3k82wpfSkPa-wUg5Aw.roa (hash: pZ1a8TMxYqDEEa657nYARi2g7u3tXGj01SXvh3eUl1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 15:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:1a:26:62:18:3b:90:65:c8:93:fc:c3:c8:9f:33:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
        Validity
            Not Before: Jul 25 15:01:06 2025 GMT
            Not After : Jul 26 15:01:06 2025 GMT
        Subject: CN=43e8d430c35cd01c6140f0ac1262ca777f138762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:48:0d:86:0b:a0:5a:dc:7d:e3:3e:3b:bc:
                    9d:49:a2:8e:b4:20:6f:9b:3e:9a:0c:41:fc:87:77:
                    95:36:3c:22:d1:7d:b4:4a:a1:43:47:65:d3:73:f8:
                    fd:82:99:49:c2:df:3d:be:a4:25:7c:63:92:94:bf:
                    26:c7:e8:af:21:c1:d4:61:ed:22:68:89:01:da:c4:
                    54:b2:6d:b3:64:27:6b:a4:24:44:00:e2:59:b0:39:
                    1e:15:de:d8:91:2a:0a:2e:28:46:44:16:45:5a:b1:
                    41:b9:1f:84:2d:94:e6:b6:59:70:33:b1:3c:30:a6:
                    98:33:e5:3e:a8:af:fc:6d:44:9b:31:1a:47:86:89:
                    27:4a:52:ef:f1:b6:be:46:68:38:3b:f3:5d:d6:12:
                    b1:7b:84:dd:84:ba:9e:12:5c:70:d5:97:f5:8f:e5:
                    57:24:e6:35:31:03:6a:07:ef:45:a7:1b:c9:88:5c:
                    f9:29:67:89:3f:6b:d6:b4:0f:a0:eb:01:44:5a:9b:
                    49:a7:ba:e8:5a:8c:ed:a2:4f:03:4b:5f:fe:c3:19:
                    5d:79:21:95:07:0e:e0:bf:d6:15:f6:2b:7a:e4:27:
                    63:a0:d7:f5:c7:24:d0:90:f7:6d:b1:aa:3f:4b:55:
                    71:6a:f1:e6:82:dc:82:1c:38:9c:09:b2:4a:7a:90:
                    9c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E8:D4:30:C3:5C:D0:1C:61:40:F0:AC:12:62:CA:77:7F:13:87:62
            X509v3 Authority Key Identifier:
                keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:8a:80:81:ae:1a:2a:33:dc:1e:a9:d1:c9:d1:42:c6:02:52:
         82:b5:8c:9f:80:2a:31:91:74:b0:0b:b8:96:b5:9f:ae:c2:45:
         78:98:21:c7:38:18:71:c9:d8:bf:6d:eb:24:c3:00:e4:d3:68:
         78:bc:b8:a7:fa:01:0c:c4:f1:3f:61:8b:42:77:ee:37:c8:2e:
         34:d2:18:3c:58:40:41:c3:e0:77:9f:be:75:b5:1b:40:b3:01:
         10:6a:77:5b:70:02:4e:80:45:1c:4c:69:2a:c6:78:3a:cc:de:
         b7:20:3d:d3:cf:0b:c6:be:e6:81:a0:18:e6:88:4e:15:d3:65:
         30:3e:bd:9c:b7:74:b9:77:73:d4:59:10:f1:b9:ce:4c:69:fe:
         e6:e1:c3:ea:69:47:1b:17:78:53:7d:6a:4d:25:1c:8f:99:fc:
         58:c7:d6:91:08:cd:a6:06:2c:c1:d0:93:31:f0:37:d9:5a:f6:
         f6:43:25:1a:1f:ff:60:6a:cc:e1:60:9f:ee:2a:bd:8f:bc:65:
         dc:6e:1a:98:2f:3b:5a:0b:dd:e3:39:97:f4:2d:4b:79:f7:33:
         3c:a3:bb:bc:fb:49:52:18:90:f6:a0:ab:cf:2d:78:a8:96:2e:
         29:67:63:f6:93:b4:49:95:8d:ae:1e:05:02:c5:c2:81:21:87:
         8f:70:a5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:28:41 2025 by rpki-client