Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
File:                     s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft (raw, json)
Hash identifier:          7AX10qw+xrvgre6S2yvGSGPdhP3c+JEhI+Ppg3e8aTs=
Subject key identifier:   64:BE:82:09:73:82:EE:B1:E9:45:C1:9F:45:AC:DC:D7:D2:B0:8E:44
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Certificate issuer:       /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial:       01984B1C8CD20040FE54C0BB09ECE978FFE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
Manifest number:          160B
Signing time:             Sun 27 Jul 2025 09:00:18 +0000
Manifest this update:     Sun 27 Jul 2025 09:00:18 +0000
Manifest next update:     Mon 28 Jul 2025 09:00:18 +0000
Files and hashes:         1: CWFEcKSRZBYlT2vWWkV5nYcBlHI.roa (hash: nc++n41sb/ngoYKjInAuk6Rbh3YfF9Q+XH3kpi1+H74=)
                          2: VPHKfI9Bl4Taeo5pgVvlMLcjFd8.roa (hash: zTYK8qWpp/Dt9m/Mxb0HNtRwtTGNwLiKpPx5D1urBUM=)
                          3: VTXHl8dG32EYcH_6gVGECNfv4HE.roa (hash: OwAzqU5P4MPrWon+q2zEE3RG5tOGAUYcg7C82SZ1F18=)
                          4: jkuyH9eYx7BIa6XQvCRl1c9y2DE.roa (hash: bCnQRe/M9g8OGQc10kTJFBFUEjTi119eOmfCQtq2nOU=)
                          5: s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl (hash: b40tmfEQ3NLSb98Q5J3Fi9S1QUXstB30zcMZ/NWSDws=)
                          6: z66BxiEQL0BxufLoLDXOhArJEGw.roa (hash: OuXUQRv18RqUvhnxvSqnbR495dW95DdgeGXdgneZzqQ=)
                          7: zys3X2MKT9uf7eO5GWpW3s91BZg.roa (hash: OL6iQHPHj+cEOBdNlLg9T9lcRKeNhXgwtS9FbcNT6yQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:1c:8c:d2:00:40:fe:54:c0:bb:09:ec:e9:78:ff:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
        Validity
            Not Before: Jul 27 09:00:18 2025 GMT
            Not After : Jul 28 09:00:18 2025 GMT
        Subject: CN=64be82097382eeb1e945c19f45acdcd7d2b08e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c5:8f:36:e9:ab:67:1c:6d:6a:f3:d8:2f:8c:
                    40:1f:65:1d:79:96:b4:f7:fa:fb:65:f5:5a:0a:ad:
                    a9:c3:4a:f1:90:9d:96:28:bf:15:91:3e:83:1d:26:
                    0d:70:e6:f9:0b:1b:2c:c3:57:eb:2c:1c:02:78:41:
                    78:80:98:87:5e:a0:00:d8:a0:b6:c2:21:f5:54:f3:
                    70:09:98:4e:6d:49:5f:31:a3:bf:8d:b3:90:86:85:
                    81:56:53:48:7e:de:82:81:1e:dd:0e:c2:81:ee:59:
                    58:99:83:de:d5:2e:29:72:20:9c:9b:f3:13:1d:11:
                    77:fb:60:4c:3a:08:c1:20:66:d7:62:e6:61:88:ee:
                    1b:4d:e1:a0:51:7f:d7:88:05:7a:4e:ec:2f:0b:67:
                    49:ff:60:96:64:93:dc:86:4d:f2:11:df:c4:5f:39:
                    f0:02:63:91:35:24:98:75:04:3c:46:21:4d:26:c7:
                    d0:c4:1d:29:31:6a:0d:63:36:44:da:9e:f3:db:61:
                    9e:a5:ac:09:e8:fc:db:0c:17:dc:f9:6b:e1:50:ce:
                    91:37:be:1b:5a:6f:28:60:c7:95:fd:74:5b:b7:5a:
                    54:19:b0:dc:c8:a3:45:92:75:5c:6f:a2:a9:e2:4e:
                    f8:e6:ed:ea:5c:a3:2c:e3:0e:b9:5e:13:28:06:96:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BE:82:09:73:82:EE:B1:E9:45:C1:9F:45:AC:DC:D7:D2:B0:8E:44
            X509v3 Authority Key Identifier:
                keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9e:74:88:3e:55:34:c3:dc:46:a3:ae:6e:d4:82:7b:ca:1d:
         ec:b1:b7:0f:ae:b5:06:f7:f1:58:0b:97:a7:08:dd:8e:e9:db:
         25:6a:6b:93:0f:65:90:bb:b2:bf:1f:69:bb:b5:dc:62:44:6f:
         ea:28:79:60:10:43:1f:ab:13:26:35:7f:d0:3d:21:6c:22:82:
         57:3e:4c:8a:01:2d:06:57:bd:4d:1e:a6:f7:08:69:89:c2:74:
         d8:02:57:85:f9:e6:03:13:34:8a:38:29:70:20:42:e0:12:1d:
         2d:be:4f:61:fd:ac:c5:9a:26:e5:7b:8c:df:07:4e:dd:64:49:
         33:0b:fb:43:ff:30:2f:a1:28:9f:02:e6:39:53:0b:ac:85:42:
         e2:09:3d:e7:1e:e0:d5:fe:e3:1f:8e:8a:e4:e9:de:e8:54:ff:
         95:a9:03:6f:9f:09:32:fe:92:dc:73:3c:8e:27:08:8f:54:2a:
         17:4f:c6:d3:c8:08:d3:bd:90:ee:b8:b2:20:2b:08:14:97:6e:
         51:f3:66:30:0e:9b:c5:6b:e6:b2:07:78:97:f8:2a:77:72:b2:
         45:f0:39:6d:94:1a:0e:2d:18:0c:42:fe:79:19:ed:0b:e5:b3:
         b2:46:ea:43:19:c9:d4:06:e2:b4:f4:b3:b0:ce:62:85:7c:92:
         c6:97:3a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:47 2025 by rpki-client