Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
File:                     RwwsmDticWkhhXHGuClHru6l984.mft (raw, json)
Hash identifier:          jl2VxHw0Qkw5PQBP9nTkNmHbQFqYCMWKC3TJdkx68Rc=
Subject key identifier:   EA:E1:05:7E:E5:7F:FE:9B:64:76:96:06:E0:0E:BD:BB:B3:9B:0C:0A
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Certificate issuer:       /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial:       019853B1E46264A247818DA678CD50F09D1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
Manifest number:          160A
Signing time:             Tue 29 Jul 2025 01:00:23 +0000
Manifest this update:     Tue 29 Jul 2025 01:00:23 +0000
Manifest next update:     Wed 30 Jul 2025 01:00:23 +0000
Files and hashes:         1: B3HRVDq17dmYEd_4fHtjlcnZx1I.roa (hash: bT7FTTeSzclYhdeU0fsaRQxAGT8mqDYR/4kWlCp4d8o=)
                          2: RwwsmDticWkhhXHGuClHru6l984.crl (hash: 3uuNfSCbJX1QCXdkPiksEteRsXwzEFF3pRpjQz+yFTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:b1:e4:62:64:a2:47:81:8d:a6:78:cd:50:f0:9d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
        Validity
            Not Before: Jul 29 01:00:23 2025 GMT
            Not After : Jul 30 01:00:23 2025 GMT
        Subject: CN=eae1057ee57ffe9b64769606e00ebdbbb39b0c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fa:ed:62:a5:e2:54:c4:01:3b:59:a5:a0:52:
                    42:f0:5d:45:39:75:0f:2e:e3:51:da:15:99:c3:46:
                    7b:97:8e:1a:14:62:d0:d6:70:3d:c4:d4:0a:01:43:
                    57:45:ec:d0:49:23:97:0f:54:e1:75:f2:de:d7:33:
                    97:34:dd:87:03:e9:1c:6f:93:bd:1f:c8:bf:41:68:
                    97:d0:8d:b4:9c:69:6e:08:64:19:40:ae:95:37:7e:
                    b5:7e:a3:58:c1:0f:60:e2:87:c7:c5:89:72:f4:24:
                    4e:e6:37:d0:43:b8:99:b3:cb:72:6f:99:f1:a9:24:
                    10:7d:d3:f6:53:7f:6e:0c:1b:7d:9d:a2:d7:53:22:
                    fa:53:be:78:cf:31:a2:ff:fa:a4:9e:07:75:56:97:
                    c8:ed:61:55:d7:55:2f:67:70:26:2d:5d:04:33:e1:
                    b0:a5:51:9f:f0:b3:60:b9:0f:93:4b:18:13:a7:0d:
                    47:81:1b:8c:7f:d5:17:a9:fc:54:79:11:87:d4:d0:
                    7e:45:03:1b:00:2b:cd:6e:94:76:59:df:0b:a9:89:
                    d2:32:6b:07:2e:b1:83:ed:ad:75:88:d5:5c:a7:12:
                    ea:7d:72:5a:a7:ec:7e:cc:31:33:2a:5c:42:ae:16:
                    75:65:c7:a3:63:20:26:b6:bd:4f:28:ff:cd:34:3b:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E1:05:7E:E5:7F:FE:9B:64:76:96:06:E0:0E:BD:BB:B3:9B:0C:0A
            X509v3 Authority Key Identifier:
                keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c1:68:2a:ce:bb:56:bf:27:59:b1:9a:af:6e:1c:53:7f:b6:
         5e:b3:59:62:18:09:ee:38:c7:12:35:bc:cd:c8:37:57:0c:f7:
         c6:af:9d:ec:62:47:37:96:8d:0b:91:c3:a4:10:27:2f:aa:9d:
         7e:7f:10:ab:db:be:88:6a:67:b1:bb:bc:1f:4a:80:6f:30:63:
         f6:9f:f2:5e:9f:0b:68:05:08:73:06:7d:90:b4:a9:ea:0c:10:
         92:dc:d0:26:fe:58:06:54:03:52:eb:4d:05:67:6d:dc:aa:d7:
         a4:02:a7:5b:60:e4:9d:b7:fa:24:e1:cf:5f:73:7d:47:0c:08:
         ec:b4:dd:ac:68:d2:43:94:01:88:18:c5:8f:75:a5:d8:3f:58:
         8e:e6:f9:08:54:09:50:fb:61:4d:33:d9:5a:d4:1f:db:b3:f0:
         3d:96:38:54:99:1b:85:68:0b:34:f2:29:01:ac:e6:a9:8e:95:
         ff:c5:69:c2:8d:fe:c9:77:6a:71:4d:36:cf:10:b9:ad:c8:43:
         20:4a:ad:b1:dd:ad:b8:7e:07:87:2e:0d:94:cf:07:51:24:e0:
         c5:e1:6d:2f:42:1c:20:63:d3:8e:25:94:f1:54:81:5d:1e:8a:
         dd:f3:47:ce:a2:89:48:3f:bc:c1:93:39:6d:c6:dd:15:d4:d1:
         62:26:77:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:44:49 2025 by rpki-client