Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
File:                     f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json)
Hash identifier:          wqOSN6d9ts8C1cNi5raN/8qWh7gdxJHBQU0u6986QCc=
Subject key identifier:   2C:A4:BD:31:57:86:B2:EB:4E:E6:15:25:FE:91:30:BC:65:A7:26:A1
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Certificate issuer:       /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial:       0198529F8C7EA86E2CB8AA04439ACAC9FF52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
Manifest number:          160C
Signing time:             Mon 28 Jul 2025 20:00:44 +0000
Manifest this update:     Mon 28 Jul 2025 20:00:44 +0000
Manifest next update:     Tue 29 Jul 2025 20:00:44 +0000
Files and hashes:         1: cnPGqCG5nEkNqGWJOAr_TkoWilA.roa (hash: CYypMEm0JHEvZ4au2O1TzsyqDXsSN8doV/iIx579FcY=)
                          2: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: zsWgJe+hD42kbMY/KPwJL6AMCSbbO0qU5PTX2kXLkKk=)
                          3: fhcv9zVEJVXyHJ1eaDiH9RUmSQE.roa (hash: NL+aNAoNbkMGbCukVk9uNzqMGkBi6UK6eYdC2KpDM5s=)
                          4: oPRXnsL5INwqLC1NQuIf4ZAf32c.roa (hash: Q33Xwu3J1rkbAKsrHCB0KfJpoWIRtKaUuoBQYcngjzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:9f:8c:7e:a8:6e:2c:b8:aa:04:43:9a:ca:c9:ff:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
        Validity
            Not Before: Jul 28 20:00:44 2025 GMT
            Not After : Jul 29 20:00:44 2025 GMT
        Subject: CN=2ca4bd315786b2eb4ee61525fe9130bc65a726a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a2:98:07:21:03:90:fe:bb:3a:a3:9e:c8:e4:
                    1b:e3:af:a8:50:b6:03:40:c7:c3:e0:6d:3f:55:e4:
                    f1:7f:f4:90:0e:8a:3d:b3:af:cc:54:f7:b1:07:c3:
                    5c:fa:a6:3b:64:0b:48:f2:b0:dd:6c:1b:f2:55:90:
                    8d:ec:0b:8f:61:fc:1f:27:ab:8a:2d:e8:aa:d1:ef:
                    6e:70:ed:9e:7e:de:00:f6:38:1c:1b:63:c9:ad:15:
                    b6:dd:b2:00:b6:7d:b1:e3:a5:d1:c7:56:fd:15:0c:
                    0f:da:a8:dc:13:09:21:72:a4:dd:f1:86:f0:d2:f2:
                    e7:d6:30:6d:63:e4:ac:b3:57:ef:f7:14:de:10:04:
                    fa:f3:65:59:72:87:2e:1e:c9:8d:f0:1e:c0:c1:77:
                    53:8c:20:df:c9:90:f5:5a:80:28:f2:03:75:2e:9a:
                    f0:96:42:66:0c:10:ce:bb:aa:37:69:d9:5b:54:ed:
                    1a:c4:3f:d4:e6:f6:c4:55:e0:38:35:4e:1f:4d:c5:
                    40:23:53:ae:e8:a5:3b:ff:b5:27:4f:b7:85:6f:66:
                    3e:95:75:73:5e:a3:13:74:8f:a5:9c:3a:60:4c:f1:
                    b1:2c:0a:68:3e:99:8c:4a:3b:c2:c5:97:9b:8f:ac:
                    a1:91:35:96:4f:72:0c:ff:48:22:eb:5f:71:f3:65:
                    ac:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A4:BD:31:57:86:B2:EB:4E:E6:15:25:FE:91:30:BC:65:A7:26:A1
            X509v3 Authority Key Identifier:
                keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:54:06:c9:c3:66:f9:52:36:9a:5f:c4:46:7c:04:61:6b:7a:
         97:e7:bd:52:18:d1:cf:cf:c4:d3:21:46:d3:42:26:45:da:a8:
         4b:da:12:c4:b0:75:cf:f9:65:d2:74:36:9b:3b:6b:4f:e5:47:
         16:56:ab:8c:b4:e8:8e:ee:bf:2b:df:f0:cc:dc:a9:7d:c0:66:
         0c:77:a8:03:40:a3:c3:b7:41:74:01:c7:b5:9c:30:15:59:0f:
         47:ef:09:11:8f:b8:a1:e7:29:87:8e:20:2b:6f:0e:2b:a7:60:
         97:5c:b1:93:f3:02:c8:7a:ca:0d:20:76:94:01:da:ae:bc:4f:
         e4:5e:86:dc:46:8c:0e:1f:0e:2c:7b:2b:09:99:a7:db:90:33:
         ae:1d:88:4e:3a:17:68:97:49:27:93:eb:9c:26:be:0f:3a:ee:
         d8:4f:5a:0c:bc:13:1a:62:99:11:7d:18:fb:ca:c9:74:09:71:
         22:ae:93:57:41:8d:a6:8a:42:c4:08:35:d7:1e:79:e2:8b:f6:
         b8:a9:aa:bb:91:13:19:3f:82:e3:79:46:68:b5:de:00:10:fb:
         bf:24:6b:a7:8a:b6:f2:8a:cb:bf:bf:6c:79:ef:4a:e2:cd:d2:
         19:53:c6:24:70:27:f3:0d:9a:eb:c8:cc:86:1c:c2:48:f5:77:
         fe:2d:7a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:57:08 2025 by rpki-client