Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
File:                     fVaVeG-EUNEEHciK2JLLtXDVlys.mft (raw, json)
Hash identifier:          O5UpkOFzF94j+jZ6MP2VIwGqkYBJmSm9Z6H5G/AZgL0=
Subject key identifier:   37:AB:BA:0E:0B:AC:0B:8C:CA:30:5A:01:79:F2:9A:A5:8D:45:AE:DF
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Certificate issuer:       /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial:       0198665DC9EC29C9B53746A730A063C6B463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
Manifest number:          162B
Signing time:             Fri 01 Aug 2025 16:01:19 +0000
Manifest this update:     Fri 01 Aug 2025 16:01:19 +0000
Manifest next update:     Sat 02 Aug 2025 16:01:19 +0000
Files and hashes:         1: 7F80jFSbPxmTTmjOi6-hGfFW9n4.roa (hash: lyxsHymrKrQFQN+O0COTPx++o5VdqW80Bft0/kvFeDo=)
                          2: ATAXcZqjug_OpJ5XGTmLoPMGEOc.roa (hash: qD5faLkjHPVXEYY6RoVKIKOshkTkJFAi6AIDTmlkjhM=)
                          3: MqcJtj5YrV2deFqbcoVG32bZ2r8.roa (hash: E92Ulmv1M67QKZLv1VXUCMAlXz/Jc5TybOn0dCFrPnk=)
                          4: Snz83wMqCM-SKONtyGtVYyf_564.roa (hash: p8QMBaY7f26L9gcaXCq1Gvj1hb7teO/PHvsMVvNQlYA=)
                          5: fVaVeG-EUNEEHciK2JLLtXDVlys.crl (hash: UKJoKUSHLi2LFt97Gr8FStEbxYUnkct8jmOsPAOfBbA=)
                          6: o1HryCgBbs653veiR5bTMLwPhd0.roa (hash: LtY1DMpIFY18APuJfTlDp+opuoKFNGf5hxmLjfIFwOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 02 Aug 2025 12:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:66:5d:c9:ec:29:c9:b5:37:46:a7:30:a0:63:c6:b4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
        Validity
            Not Before: Aug  1 16:01:19 2025 GMT
            Not After : Aug  2 16:01:19 2025 GMT
        Subject: CN=37abba0e0bac0b8cca305a0179f29aa58d45aedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:9b:50:e3:16:32:ac:63:8a:99:8b:30:ef:
                    88:60:0a:a3:96:fc:8d:56:cf:39:cf:ad:f8:ac:ca:
                    5b:bc:48:2c:9a:cf:c4:34:d8:55:28:21:c9:13:77:
                    14:73:76:6e:57:9a:f9:a1:3b:7c:56:ce:5a:18:d6:
                    f2:5b:c9:96:14:f6:a1:f9:6d:63:75:ee:06:a1:ef:
                    27:74:7f:3c:01:0e:61:08:da:31:dc:dc:f9:cb:08:
                    3d:ce:4d:57:bd:13:fa:42:b9:3a:2c:35:73:b4:1d:
                    0c:1b:72:e2:aa:63:e6:7b:b5:d0:7f:1d:08:e2:ab:
                    77:97:84:11:c2:24:06:b6:70:c0:b0:63:67:8e:98:
                    60:ff:31:6d:56:ec:d9:c7:0b:4a:bd:69:f6:48:97:
                    e9:dc:62:50:9b:5d:6d:f6:8a:a7:5c:e1:d6:86:17:
                    ee:2d:23:a9:d1:0d:0f:6a:df:fc:ab:29:0a:b1:8c:
                    ad:73:f3:f2:dc:ff:01:19:84:90:04:78:4d:0e:91:
                    ac:bc:77:1e:49:4a:8f:88:52:e0:29:d5:a4:52:4f:
                    2f:53:23:cf:8c:97:19:61:f3:80:ab:f9:40:91:f2:
                    e6:ba:d8:0b:66:28:cd:98:fe:b7:60:2d:41:8b:e5:
                    57:3d:6d:12:49:b6:08:d6:20:ca:7f:e1:aa:d4:d2:
                    6c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AB:BA:0E:0B:AC:0B:8C:CA:30:5A:01:79:F2:9A:A5:8D:45:AE:DF
            X509v3 Authority Key Identifier:
                keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ad:1e:a4:74:d8:a0:47:59:04:34:e5:f3:98:be:7f:ea:06:
         78:d6:c7:3d:4b:8e:84:44:19:4a:57:e6:f0:6a:54:34:6b:85:
         0d:e5:c7:9a:81:90:b0:af:55:03:28:69:75:b4:58:5f:39:27:
         58:4b:d3:3b:44:cd:f4:f2:11:19:63:7f:34:d3:70:31:2f:95:
         f9:0f:95:1c:d7:dd:e3:8b:06:c8:78:fb:d1:00:c2:a3:32:0a:
         91:7a:6c:36:ff:fe:3d:a7:af:06:de:25:7c:e2:b7:ce:ff:3a:
         e6:00:b9:e7:12:c2:7d:24:78:58:5a:53:ce:a8:a2:99:8a:ec:
         bc:4d:80:e5:0d:8a:a8:e4:4c:a5:4f:4f:63:91:e7:12:f3:80:
         05:5a:14:03:0f:d6:94:02:3a:83:bf:43:01:84:2b:fb:1a:84:
         62:a2:ad:ee:02:13:f6:76:93:8d:11:c9:47:9e:b8:83:29:d0:
         3d:bd:91:fb:8c:48:59:c6:64:29:7e:c7:b7:c7:c2:a3:3d:64:
         c5:37:b3:0e:e6:c0:38:27:ea:65:88:8e:55:14:d9:5f:06:88:
         21:26:f1:ac:db:65:da:36:65:94:2c:d3:fb:ef:f4:ae:f2:ed:
         8d:25:fe:a9:ea:e1:cf:85:c4:84:99:48:c8:84:1f:40:c3:05:
         5e:da:0d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 19:04:39 2025 by rpki-client