Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File:                     R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier:          j2qolw9qaeSAChS/DaNzp+BqGQnL5Ht+oX6Qb7rs3EA=
Subject key identifier:   09:A5:97:B0:94:B5:1A:D4:7B:6E:AE:27:9F:68:51:F3:8D:E8:65:CF
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer:       /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial:       01987AC019E6F60E0CD959D2163C6E0DC16B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number:          162E
Signing time:             Tue 05 Aug 2025 15:01:06 +0000
Manifest this update:     Tue 05 Aug 2025 15:01:06 +0000
Manifest next update:     Wed 06 Aug 2025 15:01:06 +0000
Files and hashes:         1: 95vGqOrfq-A06Cg8RsHNae6rv14.roa (hash: M+Iqf7FteINIZ68Ce/QsvfRQOwsa3vBIFGqQoKfMdTY=)
                          2: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: 2HspggGIGlh1Nm2JZeBJxRvAIgQnHSmuQwi2wHA1uOk=)
                          3: YI4k3ENYRJqaDSUhSenx1oLWDr4.roa (hash: /gA7fz8Cy1YxK69gPpp37L8R7jjMwoMYWidH5G4YDU4=)
                          4: j5UDDhxpTv4ushx1mWgWUG65pLw.roa (hash: /0/V6H+X8Ix/QnnafguyBKn8HfbnAIhcS2Wv2jx5XnY=)
                          5: j8PaDOqMy9bnUnm61uhmKRQqO40.roa (hash: az4KYeOww26kcXer0MbYBu03FnI/TiStTGp2SRSz2UQ=)
                          6: jT6NkmL7YzecSayVxKLBX2lYFl0.roa (hash: pN4nTNkxgnBnRMvOcO7lpmhLow3FyCajR2fUpr6WK+o=)
                          7: shVxNeuAvqU2EZg6AvUFKFXrrss.roa (hash: swqDkI/VzYd3AR5PZIZqpbPJTNwO2OZsMXyq7SU+z6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:c0:19:e6:f6:0e:0c:d9:59:d2:16:3c:6e:0d:c1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
        Validity
            Not Before: Aug  5 15:01:06 2025 GMT
            Not After : Aug  6 15:01:06 2025 GMT
        Subject: CN=09a597b094b51ad47b6eae279f6851f38de865cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:33:f7:90:82:bb:4f:d4:7b:38:05:46:a1:
                    be:76:45:61:c3:33:9a:a2:af:26:2f:41:c9:c7:04:
                    df:84:d0:24:8a:84:b2:94:f7:98:e9:bd:9a:8d:11:
                    8e:5b:dc:1e:b3:c7:81:3d:08:20:a9:55:5b:48:e0:
                    4e:6b:d8:b4:a8:d9:00:ce:6f:79:a0:87:c4:7f:82:
                    1b:9c:1e:19:1d:c2:57:4a:68:90:65:64:60:61:7e:
                    9b:40:75:47:a1:2c:8c:08:c0:b1:6a:f0:fd:84:b1:
                    32:8d:3d:cd:1c:02:fc:3e:9d:85:c9:af:0d:53:e6:
                    66:97:82:01:a0:ae:6c:20:dd:c5:e3:89:c0:08:0d:
                    09:66:ab:c2:30:6c:cf:67:8d:f9:db:1a:ab:9c:6d:
                    3c:28:a9:f2:37:13:56:1f:9a:a6:63:4d:84:3c:4d:
                    80:0e:ad:6f:42:8d:11:fc:1f:99:e3:1f:9a:a9:bc:
                    f8:9b:2a:8c:8b:1e:af:40:9e:08:c3:62:25:ee:0a:
                    b3:c1:f2:ae:96:9c:10:b1:b1:39:11:6c:98:c7:81:
                    c8:c9:df:02:be:f1:53:74:8a:bb:e7:31:42:e8:18:
                    ab:d4:83:78:ca:d8:10:fc:3c:c0:1b:58:2d:3a:25:
                    e8:95:83:a2:01:f7:ed:b3:e0:26:8d:a1:d3:90:0b:
                    f3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A5:97:B0:94:B5:1A:D4:7B:6E:AE:27:9F:68:51:F3:8D:E8:65:CF
            X509v3 Authority Key Identifier:
                keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:36:18:70:c0:19:94:c2:db:ad:e5:fa:b3:a2:3a:1d:0e:f3:
         e3:0c:51:89:64:4a:6d:55:37:f8:d4:4b:cf:25:08:50:2c:d6:
         3c:82:74:e8:48:ef:71:70:f6:84:bc:21:8f:4b:b7:20:c8:25:
         47:70:a8:f5:75:85:70:f1:29:a5:73:d3:58:d0:66:03:5d:27:
         6a:78:c8:0e:b9:f3:83:dd:01:25:6e:c8:31:25:ce:c4:40:f5:
         26:5d:5d:25:21:2c:71:79:00:4f:62:c2:2e:12:a6:e6:e0:9d:
         62:75:f0:7c:fb:e8:2e:6a:79:a6:90:9e:3c:bd:85:93:47:b2:
         12:40:3d:a1:87:ab:90:43:10:53:2b:79:4d:c5:a8:ab:a0:d7:
         45:d9:05:c5:ed:5a:e9:d0:b0:35:c7:21:99:ab:5d:9f:a5:81:
         b5:00:66:10:a6:d7:fd:87:df:cf:5d:f7:e0:12:c0:91:f7:61:
         6b:be:74:e2:8b:ec:69:26:39:5a:04:5d:03:a9:66:ce:f6:ec:
         01:23:e6:1d:b5:f8:e7:b5:ae:44:d5:22:9e:c7:d2:5e:92:1f:
         11:3b:6d:f8:da:13:46:27:10:e9:50:6f:8c:81:fb:d6:d5:f6:
         25:9c:00:2b:63:da:8f:8c:44:a2:75:e5:8d:af:ce:24:e0:af:
         9b:cb:ec:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:46:09 2025 by rpki-client