Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
File:                     tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json)
Hash identifier:          5Fyn0X5IRwWz2IcyZUlxhZBfpIg0jlDrtwu8zkqwOQs=
Subject key identifier:   07:75:09:D0:43:99:BC:3A:C8:81:0D:99:A2:E3:92:FF:48:14:04:17
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Certificate issuer:       /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial:       0198D5F13D195CB3D13D8176E66FCC23326A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
Manifest number:          165C
Signing time:             Sat 23 Aug 2025 08:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:13 +0000
Files and hashes:         1: 30BxK6_jpie3YrLCVwh_L1trwzk.roa (hash: X9FbkEMlA2QphV+O7rBHZ0meCsmOLXe9r7nPMvJuQcE=)
                          2: 57saHwwtMFtKDHtko2YaGKrGjJo.roa (hash: tuKl3wIrDMzULngL+WH+D2haKacyphB+9VZ5+FTHHpM=)
                          3: Dbj9xuGjig4FQD4z5CtOr-cvTeI.roa (hash: Kh8CzaShn4hw0xJ/eT2H0TnUMB7Vdu0F94Rtfvnict8=)
                          4: EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa (hash: JZi+DlaPt3ZWFPrgsMEzdF/6HYunSwsq7ugQUzVGcAU=)
                          5: F-P_HvBB3WeH7KniyH81o28KKbo.roa (hash: 8sYaDjHEHJUFW2fXpmzCzQDMt9L045SyDdjIlOEUNco=)
                          6: WBOYQCAoKRyLsa6JAYAHwgmZIqI.roa (hash: lyZfLnKwP7kxcM63676+jKHGePevi3n5oMgldGNu5qA=)
                          7: WR7z7m7JZCweB81LV8VsoLwZDDI.roa (hash: n+zNUpOUwgPN3iy+Ul6bCia4Bw0P9Lb0d3EbTWyw+/I=)
                          8: eNRtwGVQ1VdkNKBRZ8o9uf4Ec24.roa (hash: syspd0kan424RvhNNvOMRktLryIova5s5SuLnxOMs4I=)
                          9: inKVgfg6tkDW3-Ko2Fj1q9U9rjM.roa (hash: m3IZ4E9iTFBEvHgMwMmb/F3F5jQFINfkwm1zng7j3wE=)
                          10: jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa (hash: 0w/XwzNScEN/vprJx5SJRgxW5WArgctvQM2YSDSFtog=)
                          11: tLlGubJJap72E2l8gRh9Uuu4S8A.roa (hash: jBh5pu7FnbvAeJHH3DMpIfaMMsMyb9LyPf0qd9sE/90=)
                          12: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: xOeFpdXfz6KpAV0J9+Ea8fvnlj0V+WZZtjUbdbBvy34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:3d:19:5c:b3:d1:3d:81:76:e6:6f:cc:23:32:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
        Validity
            Not Before: Aug 23 08:00:13 2025 GMT
            Not After : Aug 24 08:00:13 2025 GMT
        Subject: CN=077509d04399bc3ac8810d99a2e392ff48140417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:97:0d:ac:f3:b2:28:b7:64:00:8e:9f:71:
                    d7:2a:5b:e5:1d:fb:56:bc:88:63:a1:e8:31:9d:1d:
                    fc:02:3a:8a:a9:12:e4:fb:1a:0d:71:f0:68:24:a3:
                    d7:29:ec:a7:eb:b0:3a:c1:99:fc:f1:1c:a4:81:6f:
                    c1:04:4c:2a:39:b4:4e:b8:f2:63:e5:9a:2e:1c:76:
                    33:1e:6a:94:93:b5:ba:86:7e:b6:f0:e4:be:69:9f:
                    fb:9a:d6:f9:1c:b6:94:cf:de:1e:e1:e0:4e:d2:0e:
                    72:a6:1f:1b:c1:ec:67:af:7e:1f:c8:a4:09:50:d5:
                    b5:98:c8:8b:7e:7a:84:56:a4:e9:b5:d8:78:d0:a1:
                    46:66:3a:0e:87:5b:1a:60:8c:66:b0:a5:9f:39:88:
                    a4:29:0f:2e:9b:4e:dc:3f:65:09:76:37:ee:d2:83:
                    ee:e8:24:19:26:a9:25:a4:fd:f5:40:f7:bd:6d:c4:
                    36:ec:7f:d2:7b:a7:6d:c6:c9:d5:cd:e1:39:42:93:
                    9b:8e:f5:25:7e:46:97:ea:12:60:71:e4:ce:9c:70:
                    5a:f9:5b:fe:e9:6b:c6:c6:28:a7:fc:94:f7:93:76:
                    2e:19:2f:5a:ad:57:e1:56:cf:cf:51:40:87:ff:20:
                    0e:85:1f:0c:3d:27:cd:fd:af:df:f6:30:ad:c2:7c:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:75:09:D0:43:99:BC:3A:C8:81:0D:99:A2:E3:92:FF:48:14:04:17
            X509v3 Authority Key Identifier:
                keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c2:d0:29:84:31:a2:2a:52:67:fb:36:fe:1f:a2:63:84:4a:
         18:12:a0:33:be:ab:47:84:2e:e8:28:13:fb:25:b3:61:8e:c3:
         c6:ed:50:61:68:ab:61:da:a0:e1:4a:4d:c8:c2:fd:23:16:d5:
         f8:f7:41:eb:d8:12:ac:4f:84:86:6e:5a:d2:c3:c1:b9:18:24:
         af:07:2d:e2:48:b9:e9:d0:73:d1:49:9e:48:c8:32:dd:59:b5:
         25:74:bd:7a:a0:0a:62:4c:57:02:77:66:0c:88:cc:a6:b0:29:
         a6:eb:6f:ea:75:19:77:0b:ee:c1:5a:16:fa:2e:24:c4:7c:3b:
         a6:8c:69:35:6a:e1:b1:a8:11:cc:95:08:56:6b:02:53:e2:0c:
         aa:c0:bc:8a:6a:10:38:bc:f5:c6:f7:09:14:c6:d2:ea:37:c9:
         d3:04:d1:1c:43:22:5e:e6:f3:d2:cb:0d:0e:f7:59:0d:25:e1:
         77:70:a0:f4:b1:2b:3a:32:82:b1:06:2d:d2:4c:d9:43:89:2b:
         3e:e6:1b:f7:21:1e:13:1d:64:ed:05:85:b6:34:6e:74:d4:93:
         92:ab:f5:ea:7e:02:36:62:17:24:f1:d6:13:09:8d:e9:43:de:
         d6:47:24:d0:37:eb:2c:de:f0:36:75:51:a3:4c:62:94:14:6c:
         9a:47:f7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:50 2025 by rpki-client