Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File:                     lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier:          8Xc7DLShXGvFPSpSzlgKNY/g546tnGCiK8XQ7o6AmM4=
Subject key identifier:   E3:4A:02:78:99:F1:A3:36:7F:65:59:9C:1B:CD:0F:9C:E9:0C:4A:E1
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer:       /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial:       0199375CFFB099D5DB5945446A3DD5ACDBB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number:          160C
Signing time:             Thu 11 Sep 2025 06:01:05 +0000
Manifest this update:     Thu 11 Sep 2025 06:01:05 +0000
Manifest next update:     Fri 12 Sep 2025 06:01:05 +0000
Files and hashes:         1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=)
                          2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: qDRJ7AG2uTBBCfw8C/UefDcwcWWSCOkDVqK1b+fyPSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:5c:ff:b0:99:d5:db:59:45:44:6a:3d:d5:ac:db:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
        Validity
            Not Before: Sep 11 06:01:05 2025 GMT
            Not After : Sep 12 06:01:05 2025 GMT
        Subject: CN=e34a027899f1a3367f65599c1bcd0f9ce90c4ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:25:8f:4a:93:ee:5b:83:0e:9a:69:c9:a3:07:
                    f4:59:cc:b6:17:89:b5:e8:53:de:23:70:9e:7f:c1:
                    49:90:2c:ce:3c:f5:e7:e1:e1:96:69:ba:1a:43:13:
                    08:84:de:31:45:af:70:7d:39:f4:46:16:8a:48:56:
                    b3:f8:50:c3:30:45:e8:c4:63:16:97:83:fb:42:e1:
                    f1:34:eb:df:b4:de:a7:36:ef:1e:c9:a3:7e:0a:c8:
                    9b:41:e5:fa:b8:d9:f8:24:28:76:fe:f4:13:d5:09:
                    1c:8e:55:35:2d:47:ad:f0:10:68:75:17:31:0f:21:
                    be:2e:12:ce:68:63:a1:65:d8:f4:cd:c8:b0:26:fc:
                    a0:60:46:99:5b:5b:6c:d4:89:73:96:11:2f:35:1b:
                    dd:1b:78:b2:14:e5:a3:d8:5b:37:5b:f1:1d:f5:62:
                    0b:cb:c8:81:67:a6:24:f2:24:e1:ec:18:c9:96:aa:
                    18:b0:1e:08:85:02:49:22:cf:08:a3:a9:ae:f4:a1:
                    db:93:19:5f:3c:cd:30:e3:e1:03:2e:41:f9:e7:75:
                    5c:4f:75:65:01:ef:96:44:fe:74:dc:0c:6a:49:04:
                    da:e1:4c:7c:0f:38:6c:27:11:97:f7:1b:cd:bb:76:
                    8b:7b:de:4e:8e:e2:86:26:06:13:93:c3:01:dd:7f:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4A:02:78:99:F1:A3:36:7F:65:59:9C:1B:CD:0F:9C:E9:0C:4A:E1
            X509v3 Authority Key Identifier:
                keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8f:a8:71:92:85:66:3a:df:4a:3a:46:88:af:3f:c4:77:9e:
         8c:6d:c6:07:82:50:f8:56:03:7a:6e:40:7a:df:b8:28:f9:c9:
         a7:e9:bf:09:c2:44:37:18:21:ad:de:09:12:f5:0f:88:35:ce:
         bf:c6:a7:ad:1f:0f:75:ea:3d:1e:c0:8e:1c:90:30:c7:53:11:
         88:75:98:37:73:b9:4d:5d:99:2b:a3:a6:47:5b:d1:4b:e9:e0:
         51:98:8b:74:46:86:0a:05:99:cb:73:65:bd:9e:27:42:e0:b5:
         d4:96:ac:db:7d:33:0b:0e:6d:39:ff:84:83:a5:01:4a:8f:4e:
         fe:f1:ff:f0:b7:c1:f4:59:3c:f6:49:40:20:f7:5f:de:a5:fb:
         c7:f3:84:fd:56:7b:c9:e0:8f:ff:5e:dd:23:6c:f3:b8:0c:13:
         78:4d:61:50:bb:e1:97:3e:9d:5d:00:2a:f2:95:cf:b8:a7:d0:
         4d:02:80:c0:72:a1:67:86:fd:3b:93:a5:3d:cd:1f:db:b1:64:
         0c:31:0a:92:c5:bc:df:5a:ac:05:7e:d1:de:e6:1d:2c:c9:31:
         6c:f4:db:63:7e:47:2a:4d:0c:1d:3f:bf:b1:ae:28:9c:c4:ef:
         a1:3d:e6:63:ca:fe:6b:30:bd:98:b7:bb:16:d4:7d:df:23:0c:
         8e:dd:c8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:53:11 2025 by rpki-client