Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
File:                     1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json)
Hash identifier:          e9pVqIoZidn+RgSRBBX9X+yEKPse27EzJQr//p/gQ7o=
Subject key identifier:   F7:6B:7C:D8:1A:31:A5:89:7B:7A:7F:8E:B4:26:D1:EA:C9:AB:1F:EF
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Certificate issuer:       /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial:       019746301C4C20D716C5E8789462D5871DE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
Manifest number:          160A
Signing time:             Fri 06 Jun 2025 17:00:47 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:47 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:47 +0000
Files and hashes:         1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: ZZSkhEXkXuy5qPFovvIQqdLCCikrjlzMaKoNfp+dAec=)
                          2: 4SmPOBdpSKZNKtr78EsOFYPAPOE.roa (hash: HzixWgbqoGXlXoQ/Uo+IAJ05tBlvGv7rMPAyb2c7P3o=)
                          3: 97T1FKP4AB1wFygDf_IjY6gh_W0.roa (hash: b+uL1I+CF8JWEeaj5CSinTGLvmB9uwh7dpcntKLQtgU=)
                          4: BGLkzv5zmcmyNePUFl35bYyaZBg.roa (hash: Rxm9thzilr67738h2nk4GCB7hCDrlSDQC9OhJBucGVw=)
                          5: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=)
                          6: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=)
                          7: JS-Bgecde8r4aUvux6oaDYSziLc.roa (hash: pbyh/yA7joTeMLtDmSJlrjqlnHwf7lTPPfN0QpETN4E=)
                          8: WSCQA0Y3pCUJ_5bceNuC3gEIEPE.roa (hash: it6NFAfi4cSW7ITlNEmWjq4Jy+DwQESxb3017kQ8n2o=)
                          9: Wm1N-1k5l17vFFDB1UYexU5pylc.roa (hash: kl5fQQCdbrMoipvYcHYjQFpF2oGH+sJK9hivbDAv45M=)
                          10: XLQiBV_ri1fMksGmND_AktarMBc.roa (hash: 9x4BHRNiA66EHCHdbrUK+jieemen0Xw/2jV5fxKC3uk=)
                          11: aHZiJgVBcp3QEfhpBBlnMevn95c.roa (hash: kY5l/11r78p6CSIOWHTFpBOl7j8UPn6XdN3dmnO0kMg=)
                          12: dMoy1ocOmEzk4dYBdRWtDeFZXh0.roa (hash: VXtb1jeW1jL5ZIe+3y/JZP2SrUZOEss2tqQVUdmb0N4=)
                          13: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=)
                          14: i0EkDiLWxZt-jEsL0cMNpe5XN_g.roa (hash: G7FDEuJ7pS++rTMrLx6g2e+BM36bD3Jhu4w4OIPcRCo=)
                          15: mNJTLNjj6AfeuCVnfV00ORno5GU.roa (hash: NE3MR19bhv1xyo6MpzB3l+rz7Un7WTCoqeufjmUuYPk=)
                          16: nUOPR6SpMwNbQgZbj2csQN4_jAg.roa (hash: yiD/DDDeZdQPBhhEK/dXO9SrNQGZzNALEQWHpy1Moco=)
                          17: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=)
                          18: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=)
                          19: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=)
                          20: ymJp7HISBj0p6-vEi_s9etWAgM4.roa (hash: AY4z2OjO/3eefpDKUZbNSVp/8J59RozeSssJEh5mcj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:30:1c:4c:20:d7:16:c5:e8:78:94:62:d5:87:1d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
        Validity
            Not Before: Jun  6 17:00:47 2025 GMT
            Not After : Jun  7 17:00:47 2025 GMT
        Subject: CN=f76b7cd81a31a5897b7a7f8eb426d1eac9ab1fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:67:e4:dd:8f:c5:b2:07:77:ee:5a:cd:4d:
                    cf:a0:32:5f:ba:1d:66:24:26:79:d0:ba:76:35:1d:
                    b7:f7:d2:c4:ab:50:e8:76:40:b2:b1:52:84:a2:c7:
                    25:6b:8f:06:f4:0e:bb:bf:5c:df:b1:dc:9a:b6:6b:
                    b5:cd:1d:70:f4:b3:0a:54:3f:6b:d0:7c:26:6d:47:
                    c5:fb:f1:ee:2e:49:28:9b:10:2f:df:ed:27:06:09:
                    74:df:e7:ad:84:e6:2f:ff:76:43:b9:28:d3:4d:63:
                    d4:31:9b:ca:f4:75:23:e6:44:b7:56:0a:96:38:1d:
                    47:b2:ed:21:99:4e:06:05:6d:f2:17:6e:21:65:8f:
                    6e:db:9f:7a:a4:6e:24:f9:1e:3d:9b:e1:b1:8a:ec:
                    1c:f4:d7:1f:d4:d4:1b:14:b9:7f:d0:01:82:43:d5:
                    6e:9b:20:9b:dd:e8:89:8f:71:b8:37:f6:56:25:0f:
                    62:d4:3d:80:69:7e:99:c4:47:73:fb:b6:b2:9e:db:
                    84:fb:d2:de:c9:93:5d:23:5f:51:8d:cb:f5:db:05:
                    fe:13:54:d4:77:0f:f7:95:fe:9c:27:5f:94:3f:68:
                    d5:f0:8d:48:16:b7:4d:e7:6c:87:25:80:35:e2:70:
                    51:56:df:1c:6a:6d:84:f3:d6:dc:03:f9:df:6d:19:
                    2e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6B:7C:D8:1A:31:A5:89:7B:7A:7F:8E:B4:26:D1:EA:C9:AB:1F:EF
            X509v3 Authority Key Identifier:
                keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d0:f5:cc:25:55:19:15:ad:5c:b6:3d:80:0e:03:01:6d:d4:
         e5:fb:5d:f0:e6:66:b6:44:d0:b6:ec:02:3d:55:33:cd:72:07:
         f9:53:b9:7c:67:13:24:08:ab:52:6a:d2:cb:97:ef:76:f9:e4:
         a5:26:e8:ae:d4:41:8f:71:f5:09:74:63:94:df:9e:5f:c6:8e:
         48:01:e7:f9:fc:6e:7a:e1:af:40:a0:e2:03:b8:85:38:d8:ae:
         a2:82:e3:7a:4f:01:c2:83:f9:3b:d3:45:7c:40:3e:f1:36:2d:
         4a:13:b6:69:11:82:8f:35:3d:e8:88:54:f1:db:83:c7:98:7b:
         2b:ac:78:42:d4:22:ed:ce:dd:26:61:12:87:a9:46:6c:7e:92:
         24:fb:9d:bc:1c:c1:66:16:05:3a:01:4e:9c:cb:ab:8e:fb:40:
         7e:8d:83:e0:8f:9a:70:0e:66:f2:27:28:d7:ed:bb:42:86:00:
         cb:33:99:87:c2:2d:27:e2:fc:2e:1a:89:59:78:bf:06:96:92:
         92:82:b9:ba:05:37:7a:38:1b:87:04:00:2e:c0:5f:ce:2a:37:
         87:8d:13:6f:f4:76:17:18:d6:06:a3:ef:28:4d:2a:50:00:4e:
         1d:97:f3:15:04:36:7e:61:5a:aa:de:b5:e6:03:aa:7d:e3:dc:
         ca:8c:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:31:11 2025 by rpki-client