Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File:                     _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier:          OP5y+GLlScvlRcHLIrvHHmIJXsNFQEk2s9Qihtt/PVI=
Subject key identifier:   F0:4F:B9:75:92:BF:62:51:64:8F:D5:C3:10:66:F6:85:38:8F:2E:CF
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer:       /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial:       019930B5D2AE84EE1882ECEC73068089AFA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number:          160A
Signing time:             Tue 09 Sep 2025 23:00:46 +0000
Manifest this update:     Tue 09 Sep 2025 23:00:46 +0000
Manifest next update:     Wed 10 Sep 2025 23:00:46 +0000
Files and hashes:         1: ZFIfq_Xye8VtZ1sU3ca9G22FxVM.roa (hash: 1343QU7GIEueYXR0jEegPvkq04EIWR5lFSBDfcLfgSA=)
                          2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: Ad90pytwNkDwYjUJ3Bi8Orpg9Fe6N7sXcZRGepZsn9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:b5:d2:ae:84:ee:18:82:ec:ec:73:06:80:89:af:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
        Validity
            Not Before: Sep  9 23:00:46 2025 GMT
            Not After : Sep 10 23:00:46 2025 GMT
        Subject: CN=f04fb97592bf6251648fd5c31066f685388f2ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f8:ba:c6:ac:a8:41:9c:0f:8d:fc:00:8c:6f:
                    3a:6f:69:89:74:cd:34:1c:c5:e3:a8:5c:15:f9:49:
                    d6:47:5c:48:78:c8:83:99:0a:b2:2b:a8:8e:08:4b:
                    6b:da:d1:16:a6:05:c6:e6:b2:48:0f:7a:59:01:3c:
                    ee:47:92:38:64:a9:4c:93:41:f8:52:f2:1c:d1:82:
                    ce:55:57:8f:87:d8:16:98:b5:2c:28:18:69:f7:b1:
                    ca:72:e4:b8:f2:e5:ff:59:e1:e7:3c:73:7e:d8:1b:
                    88:af:6c:c4:07:c6:e9:43:a6:ee:8c:39:db:1f:94:
                    40:1f:f9:90:94:fc:17:85:a2:c5:0d:62:4f:12:ad:
                    f0:cb:91:d9:aa:10:bf:07:44:9c:d8:5e:bf:28:24:
                    c9:7b:8c:7d:35:59:fd:83:5a:ff:55:d8:84:88:47:
                    7e:42:f8:e8:94:45:b8:b7:9e:d9:20:b6:75:b5:72:
                    ea:94:7d:59:4c:71:6d:ba:82:ea:b5:2e:97:ca:f8:
                    6f:20:c9:28:4e:82:77:b8:2d:3d:15:d4:0c:f6:f3:
                    28:9d:17:ae:ef:82:26:db:2e:8f:7e:38:86:2d:b7:
                    33:fc:f9:99:36:76:2d:dd:3b:2a:b2:c5:25:41:2e:
                    7b:de:8d:12:6f:ae:c5:d3:40:64:d4:ee:a4:ce:b0:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4F:B9:75:92:BF:62:51:64:8F:D5:C3:10:66:F6:85:38:8F:2E:CF
            X509v3 Authority Key Identifier:
                keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b5:44:7b:5a:83:40:9f:03:78:99:df:8a:ee:28:c0:6f:87:
         f3:12:20:67:9d:62:12:51:5a:ac:a2:f7:ab:95:31:19:0b:4e:
         96:65:af:13:58:7f:3b:1a:40:af:37:c0:0b:5b:a9:9d:72:36:
         cc:41:06:f2:d0:cf:a1:54:1c:2a:f1:4f:ec:f4:59:60:d3:ec:
         8c:24:84:9a:87:ff:f8:28:b6:f6:d7:17:48:70:c3:3d:cb:c0:
         79:84:6b:56:da:84:2f:43:c8:58:a4:f6:2c:b7:ec:30:c2:6d:
         a5:48:7d:33:81:ae:bc:dc:cd:ef:bb:f5:6e:16:16:1a:ad:3e:
         23:c2:ae:cb:12:42:6e:43:7e:d9:e7:8b:3e:70:d9:f7:06:09:
         b1:18:3e:07:e3:b6:16:23:c3:1e:98:d0:b8:a3:17:52:66:17:
         e4:a5:47:93:ac:be:f6:6d:34:c1:3b:fa:c0:dd:0e:2d:fc:a3:
         d3:17:7b:5d:7c:a5:db:16:e0:85:d0:88:7a:4e:6d:05:9c:7f:
         94:49:bb:80:a3:a5:71:f5:19:44:20:03:e2:70:37:e1:b6:a5:
         81:36:95:d3:a8:d1:73:2f:b9:f9:df:4f:aa:42:53:7d:d1:54:
         f0:e1:15:b3:7f:d5:e8:25:90:ed:bd:04:5b:1b:55:f3:8d:8e:
         10:b5:6d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:47:26 2025 by rpki-client