Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
File:                     rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft (raw, json)
Hash identifier:          q1Xcwgnrei8PNoB7lNMBiFD6j1n52YTVi/gWT5fpcpE=
Subject key identifier:   47:52:A9:AB:65:D9:20:A8:B1:C7:9E:F7:18:FA:67:18:73:CF:59:54
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Certificate issuer:       /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial:       019872CFC674A71D58C47F9F930B861C14F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
Manifest number:          162F
Signing time:             Mon 04 Aug 2025 02:01:16 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:16 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:16 +0000
Files and hashes:         1: 1xef8JB14kgVdYbFNM-Oq6W7NWA.roa (hash: 2TgMpFsN8snCYIhnDbb3K1R/JLwOpv09B4vLRv33njY=)
                          2: 30aIeplMe8B5nuWPNxNW6K-OtBY.roa (hash: 3pRxuzSCfGIU8i4yLQxNrHj04RZktWd0aRH2mX3pOUo=)
                          3: 5R2_zC5O_WNYOAGlu7by2_fhzYo.roa (hash: Eq+hBI8YGdr0edeJFDWardc1U5Cf7U1rPC+h2snaoOY=)
                          4: mG-NGr5UJw8Bdsm31xr0LARp3LM.roa (hash: Ez+x2KZ41CLnIqO9c7EUA1U/u9pzX46TWaq6peZ65/4=)
                          5: nqdZW8VS3cJABsENIPnwko2Hihc.roa (hash: IhzETIut1wHzF58gkob1Irj0rHur1kgwouWb5+riuAI=)
                          6: nrBcJclJWWQmSFgHdkkN2rl4iMo.roa (hash: LHzeWYsmA5iX5RkIBuodpJrYuHeqFeRrX4/36Bp1azQ=)
                          7: rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl (hash: FSZ5tI1RaRSFnNJkX20Gr5SYovHha/9vM4Wy9hRG7MM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:c6:74:a7:1d:58:c4:7f:9f:93:0b:86:1c:14:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
        Validity
            Not Before: Aug  4 02:01:16 2025 GMT
            Not After : Aug  5 02:01:16 2025 GMT
        Subject: CN=4752a9ab65d920a8b1c79ef718fa671873cf5954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:20:aa:d2:14:bd:37:36:1e:6c:85:6c:5c:
                    70:9e:b3:23:30:dc:02:da:e1:57:32:bc:8f:d9:f8:
                    8c:1e:46:00:b0:c9:e6:bb:99:b0:a1:ce:8e:4d:76:
                    e5:ee:78:2c:e1:3e:c5:5c:ab:1a:d5:53:bd:3c:28:
                    b7:1c:0a:f9:b4:8a:2c:2e:df:92:ba:dd:06:42:3c:
                    12:f5:ea:da:4f:ff:74:ca:22:98:d9:3d:30:1f:4f:
                    8f:5a:c6:61:42:13:2c:f1:b6:10:61:f8:c6:32:ab:
                    bf:93:b2:a1:57:dc:b5:30:b4:e0:5c:93:fd:c3:94:
                    41:fd:01:89:53:56:0b:90:b5:15:71:8e:c3:6f:ff:
                    2c:eb:49:6d:1d:71:d9:17:eb:95:36:76:5e:73:1a:
                    e8:79:47:4b:af:68:28:e9:a8:b6:9c:4a:58:a7:7f:
                    50:95:e1:94:1d:fe:cf:63:f7:21:a1:bb:8b:30:f1:
                    82:00:2d:14:62:7d:a2:c5:0c:17:1a:9f:63:82:1e:
                    28:93:f0:1f:ba:a1:e0:ba:15:bc:fd:33:f7:76:f2:
                    73:17:01:a1:58:3f:96:3f:d3:53:6b:28:5c:58:71:
                    9e:13:bf:9b:04:89:4c:5f:9a:74:cd:41:b9:c5:9b:
                    f4:52:0a:3e:b6:1e:b7:b1:4c:53:78:2e:af:c6:b3:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:52:A9:AB:65:D9:20:A8:B1:C7:9E:F7:18:FA:67:18:73:CF:59:54
            X509v3 Authority Key Identifier:
                keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:97:d8:7e:8c:db:ed:93:f4:02:a5:d5:aa:60:a6:8f:c9:d3:
         0d:1e:ca:09:19:ac:6e:4c:1d:aa:d4:ae:46:28:fd:8d:b0:4c:
         e6:bd:7f:c8:a4:c3:94:a1:ce:9a:51:a5:0e:3d:5f:d4:96:44:
         99:5a:7f:c0:72:62:02:ab:a0:46:d9:b2:b7:18:41:be:7f:12:
         a5:4f:76:b5:ea:e7:05:8c:b5:99:e4:b8:44:45:58:8a:d7:2c:
         32:ee:e9:8a:17:af:63:de:53:c1:78:a6:6c:67:16:17:f9:9c:
         76:5c:a0:23:fb:44:79:b1:96:41:a1:b8:cc:6a:ff:08:5e:65:
         49:d6:da:de:d9:90:b7:fe:39:06:d3:5b:37:57:b4:2c:2f:6f:
         3c:08:bd:3b:fe:cf:d0:62:2d:c5:58:e3:7c:3d:89:19:bf:5b:
         d5:31:f0:ad:61:16:a1:27:73:de:da:89:92:57:9a:9d:88:65:
         73:57:fe:49:b2:ff:96:37:f0:6a:62:7a:76:08:f2:f6:ed:d7:
         af:f0:45:c2:96:a5:d4:50:0d:29:fa:5f:85:73:c7:b3:8d:bd:
         6b:6a:99:41:83:a4:1e:fa:ee:ac:75:02:31:d3:ec:12:67:44:
         23:c3:68:10:35:eb:c4:a2:56:3c:bd:1f:b9:9e:db:da:18:9f:
         1d:d0:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:16 2025 by rpki-client