Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
File:                     rF6twAMoUCNv7nVutY-_BeExa14.mft (raw, json)
Hash identifier:          /ZW800ww/bc2TN9l6w7Dm7KhqIaThfldAM635KUGrOE=
Subject key identifier:   2D:E1:FC:3B:B7:4B:18:5F:E9:D0:FF:CF:4F:25:3C:AA:D2:69:5C:64
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Certificate issuer:       /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial:       019855DFBE5B25A70FC62031EEF95030F392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
Manifest number:          160B
Signing time:             Tue 29 Jul 2025 11:09:43 +0000
Manifest this update:     Tue 29 Jul 2025 11:09:43 +0000
Manifest next update:     Wed 30 Jul 2025 11:09:43 +0000
Files and hashes:         1: 6DiQrdbcJOqBfsf9QDEXeVd2izY.roa (hash: 31oYv9nrHSwIdd+Bdi1r8AvslvZ9845lRIm+bAJz/OQ=)
                          2: rF6twAMoUCNv7nVutY-_BeExa14.crl (hash: 2yCWP13htvBHKB/lYf9zq8i6lBjgUC59T7iLVyTcBsM=)
                          3: vgAzovenVoSsD0vS8yfVFQ_iX5s.roa (hash: aSEm6wkVsveq0EzZjvN/ovL0lIBGsYGZzYlJEOjMlhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 11:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:55:df:be:5b:25:a7:0f:c6:20:31:ee:f9:50:30:f3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
        Validity
            Not Before: Jul 29 11:09:43 2025 GMT
            Not After : Jul 30 11:09:43 2025 GMT
        Subject: CN=2de1fc3bb74b185fe9d0ffcf4f253caad2695c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:79:c3:b2:3f:3f:38:18:b4:43:bd:15:85:17:
                    35:11:9d:d6:b3:99:a1:19:bd:d1:04:d3:ba:1e:67:
                    f6:7a:b7:49:a3:0d:a2:ae:63:b3:52:5b:a0:39:12:
                    09:4e:62:f8:ba:fe:3c:b4:7c:1b:78:50:86:dd:97:
                    4f:d6:08:30:18:91:3a:b0:d6:82:99:cc:72:2d:07:
                    eb:43:4e:41:a6:25:e1:f7:53:16:bf:af:61:a7:24:
                    e6:14:00:de:5f:9a:13:68:cb:3c:f9:48:7d:a8:6d:
                    d2:80:e6:6c:ea:68:6b:56:db:36:d4:2f:92:4a:3a:
                    f6:ba:e1:f2:d2:c0:a5:93:c5:fe:93:d1:14:06:cf:
                    3c:b8:75:5a:d6:0c:92:2d:ee:bf:a9:3a:7f:ec:4d:
                    80:36:a2:c4:d3:12:36:ec:ae:d0:19:92:d8:74:26:
                    e2:d2:66:5f:37:93:cc:a7:2b:c2:35:20:a5:18:34:
                    89:18:c3:05:c2:b4:66:8d:a5:a3:67:77:af:93:73:
                    4e:e6:e7:0b:d6:1f:2d:98:89:3f:f5:67:09:2c:49:
                    15:1c:17:e8:bc:be:c4:d5:72:f8:47:8d:46:38:87:
                    aa:4b:37:3d:72:f2:ac:45:4a:0e:ff:b7:94:4e:0e:
                    26:74:86:2e:5e:b1:18:d4:5c:0c:f5:c0:1a:64:37:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E1:FC:3B:B7:4B:18:5F:E9:D0:FF:CF:4F:25:3C:AA:D2:69:5C:64
            X509v3 Authority Key Identifier:
                keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:1c:e3:25:72:a5:2c:b8:34:e7:4c:51:f5:c3:fd:1a:ee:a3:
         2f:77:d6:c9:d7:b9:97:3a:a4:3b:03:f2:1c:d4:83:21:eb:1e:
         ea:96:bf:8b:82:49:59:24:05:60:3f:7b:44:4c:38:de:df:53:
         96:cc:d7:21:7c:8c:2e:3f:96:49:89:26:5b:5f:94:52:33:33:
         cc:19:bf:a5:24:28:be:9c:8e:b8:38:ce:2d:b0:38:81:6d:7b:
         e7:14:ff:cc:89:ac:3b:2b:68:f9:e1:24:f3:1d:5d:4f:61:d9:
         e2:c8:03:e9:67:6b:29:24:89:be:7e:fb:63:22:fb:c5:d2:8b:
         cd:62:f3:27:67:dc:1a:63:1a:68:af:8a:9f:cb:7d:0b:7b:89:
         5c:90:08:bd:d7:ff:be:46:c2:d7:37:ce:88:3a:df:cb:95:8f:
         6e:0b:49:4f:a2:5f:90:7b:c9:c2:85:60:59:6a:bb:ef:ea:d7:
         47:13:7d:59:b5:da:da:5d:15:ba:74:06:c1:17:7a:60:71:bf:
         73:16:31:06:eb:74:e6:fd:fc:e5:a6:30:03:a7:92:af:69:87:
         65:52:f7:08:88:09:47:ab:41:e2:7f:e4:59:fb:17:98:a9:44:
         6b:7c:ad:2f:9a:24:c6:30:d1:8d:de:87:54:c6:b9:b9:b4:4b:
         8d:ae:82:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:56:57 2025 by rpki-client