Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File:                     m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier:          +60HFZXyIqhgOkQx2Tt1XJVjgtomTcCwHfErM7LUrxY=
Subject key identifier:   55:F8:14:C3:C6:73:5C:BB:D3:B0:E9:4E:11:BF:23:D2:B6:16:6E:76
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer:       /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial:       01989034CFEBC15ACFBF2845D80FCE850542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number:          162B
Signing time:             Sat 09 Aug 2025 19:00:36 +0000
Manifest this update:     Sat 09 Aug 2025 19:00:36 +0000
Manifest next update:     Sun 10 Aug 2025 19:00:36 +0000
Files and hashes:         1: ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa (hash: tusTXmTZKYrotber9y7JznlEvfOo5SzY2AbmCw6km5s=)
                          2: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: wHCYK5mt9HQacV0Y0LA4SEWD/KZ6j4q/ZHxmYMLta9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:34:cf:eb:c1:5a:cf:bf:28:45:d8:0f:ce:85:05:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
        Validity
            Not Before: Aug  9 19:00:36 2025 GMT
            Not After : Aug 10 19:00:36 2025 GMT
        Subject: CN=55f814c3c6735cbbd3b0e94e11bf23d2b6166e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:ea:dd:c4:47:fa:7b:47:65:f4:e1:ba:4f:
                    5b:97:08:a9:0c:48:59:d6:70:2e:b0:24:c0:f3:93:
                    a2:db:ad:d5:94:01:c0:52:4d:a3:c0:54:9b:a0:93:
                    8e:f8:25:5a:44:fa:bf:28:02:ca:39:b7:81:bd:7d:
                    d5:ab:bd:dd:ed:cb:50:41:f2:1c:e1:d8:22:ec:eb:
                    51:86:ae:1f:2a:a4:f3:d6:47:f7:5a:40:ac:75:88:
                    39:61:e0:70:32:e2:38:c3:d7:ee:61:16:82:82:54:
                    ff:bd:ce:19:69:81:4f:75:0e:55:0a:51:28:97:5a:
                    8a:df:d8:54:d2:59:8f:a3:c7:bd:04:71:43:b5:35:
                    4a:51:fe:88:6e:76:64:73:35:3f:8f:b6:db:bd:89:
                    b4:66:c6:4a:0b:2d:62:c6:70:57:2b:21:6f:97:05:
                    0a:59:6a:8d:db:e9:4c:74:f3:e1:c8:46:c0:8b:68:
                    f5:f2:8a:5e:f4:65:50:b6:86:e9:35:86:53:fe:84:
                    41:bd:2c:e7:24:91:db:dc:16:6a:f9:6d:27:17:a4:
                    60:58:35:58:74:3d:c0:f9:28:a2:7b:1d:8a:93:21:
                    ab:c2:ad:88:b2:35:46:e9:bf:3d:4a:2e:fc:3e:86:
                    04:59:39:ef:aa:2b:5a:48:fa:cd:7d:bc:c8:fb:69:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F8:14:C3:C6:73:5C:BB:D3:B0:E9:4E:11:BF:23:D2:B6:16:6E:76
            X509v3 Authority Key Identifier:
                keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:6b:24:0c:1a:2d:30:6d:bb:db:83:bb:af:5c:0e:49:93:c9:
         3b:8f:bb:92:e7:db:aa:35:4e:bf:27:c7:9c:e0:df:d1:24:56:
         51:c7:71:21:cf:78:1a:76:49:31:24:37:09:ab:cd:a7:70:10:
         26:1f:81:40:c8:72:fd:e3:c3:b4:cd:f3:66:ae:a6:da:3e:c0:
         a5:52:99:15:ff:a3:47:84:db:45:09:be:fd:8f:fe:f1:e5:f0:
         1a:19:25:af:bf:c4:bd:85:44:de:6d:1f:66:2d:74:aa:c4:fa:
         34:47:21:9e:ef:62:f1:52:1c:35:85:dc:7c:7b:eb:30:6c:20:
         c6:70:ae:22:0b:1d:a8:cf:17:78:0f:c9:d1:b6:45:0c:87:2f:
         ab:10:2f:d0:b5:a8:3b:f0:29:a6:00:0b:8e:cf:ec:8a:28:16:
         72:aa:e4:93:5f:fc:84:73:b7:6f:e5:de:48:77:95:52:12:a9:
         7d:24:48:65:9d:60:1b:b1:17:ff:02:5e:7e:1c:87:36:b6:88:
         8e:55:d6:75:90:ea:2f:b1:cc:bc:15:fe:24:0f:a4:cc:02:65:
         38:e5:89:5f:df:4b:1d:f8:0b:ce:63:84:e2:69:27:c5:0a:08:
         c2:5c:da:e0:52:73:32:84:9d:c9:c5:99:8d:68:61:b9:6f:1e:
         e2:b0:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:49 2025 by rpki-client