Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
File:                     umCk2HTZYByBQsNS-AxWpDJ2zUc.mft (raw, json)
Hash identifier:          4s/EAOCTaQhdpOwmN31m2QYSwLjMPq4N4XWzwv8bHbE=
Subject key identifier:   68:04:1C:91:32:B3:E8:37:0C:C5:30:EC:87:16:29:F7:F0:B9:9E:D5
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Certificate issuer:       /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial:       0198D70615571F93955A8B5EE5A8F70066C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
Manifest number:          165A
Signing time:             Sat 23 Aug 2025 13:02:36 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:36 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:36 +0000
Files and hashes:         1: 5U4MEYVwKErq9FhOsJB89ZvBBuA.roa (hash: NDCcRzRMP/wHXoUUOEq/IXJG3IgwKCj1GS7rUpsjlXY=)
                          2: 60lbisj9EBvEk8CkvIEbp4prM3I.roa (hash: cqYnW2I6KAO2XW2NYFnEXuAIZkVjJlu5WB2aqpTSh88=)
                          3: bHZh-gl2BV9HaE6gMvNJJyeNKUs.roa (hash: sDUjjxYqPfgF3z6qcjo8Ch8x8GHsvhm9yqvWs72G0WI=)
                          4: koXm2_p4F4KWKYlIu0UQERaNMQ8.roa (hash: zXAmEZonvu8xaYLE77bD6JgXELMdseALDrYiTNuQR1E=)
                          5: qerWJ9N0klhuhzcIgvZSrAumV_Y.roa (hash: /vwvzpt6A9BdPc1JxUloTrK4LVtePi7FvbqVFdA3VF8=)
                          6: umCk2HTZYByBQsNS-AxWpDJ2zUc.crl (hash: BgfUgIQMQzpZmL1PzfGHTs3rmowCv6cvKaImWLBQaso=)
                          7: zMnP4SbXXtzO5Qz_HmHXST-lJbc.roa (hash: x/mXpix8fyVF7pfT27hYA7xsa5opQzKkRx7F0dXWqMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:15:57:1f:93:95:5a:8b:5e:e5:a8:f7:00:66:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
        Validity
            Not Before: Aug 23 13:02:36 2025 GMT
            Not After : Aug 24 13:02:36 2025 GMT
        Subject: CN=68041c9132b3e8370cc530ec871629f7f0b99ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b8:2f:64:4e:58:7b:c4:7f:30:37:75:66:ec:
                    0d:e9:b8:85:c6:20:10:0d:8b:08:23:bb:c3:fb:95:
                    bd:b5:0a:99:aa:a4:99:c3:b8:6a:d4:02:90:04:40:
                    ce:2f:45:05:0c:56:21:51:b9:41:f9:f8:c9:87:70:
                    fe:9b:5c:f8:76:d5:be:73:45:2d:4a:d7:88:64:25:
                    f9:5f:32:7e:a2:18:57:b0:2f:2e:c2:99:1c:6c:da:
                    55:3a:bc:a6:c3:7e:41:0b:f3:73:94:f7:3b:d9:be:
                    a8:19:cb:13:5a:ef:3d:b4:39:6e:11:5d:1a:a8:fb:
                    7c:d7:47:3d:ee:d0:5c:8f:e5:08:22:f6:d0:0b:47:
                    cf:a2:45:c7:6d:1c:b5:ae:39:a9:01:c6:07:eb:9d:
                    0e:52:22:f6:51:2d:7b:c9:fb:9c:d1:28:77:12:a9:
                    10:4e:3d:d0:18:25:12:ad:f5:6a:06:e1:3f:6d:f9:
                    e7:de:af:4a:3f:9d:cc:28:d5:60:e7:22:2c:f7:f4:
                    39:cb:37:82:fe:c0:37:12:ec:3c:b0:de:e5:1c:07:
                    35:a5:42:99:a5:56:7a:5b:95:a7:3c:db:f5:bc:cc:
                    8c:3c:47:c5:98:12:36:ce:ca:28:80:e1:6f:05:0f:
                    68:03:4c:dd:5e:1c:82:fb:7a:c4:52:ec:fc:f0:47:
                    2f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:04:1C:91:32:B3:E8:37:0C:C5:30:EC:87:16:29:F7:F0:B9:9E:D5
            X509v3 Authority Key Identifier:
                keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:4b:f4:3f:f8:96:49:0c:68:b3:da:df:04:3e:68:b9:21:79:
         bb:6c:9c:d5:b8:40:e6:58:81:55:a7:9d:7d:19:ee:94:57:83:
         b3:5d:a0:a8:70:f8:55:ff:be:fd:2c:6f:35:c8:35:a4:45:9c:
         f5:b6:b2:77:96:ea:aa:5f:70:d2:be:af:59:3e:4f:08:ee:c9:
         52:70:8e:84:5c:96:c7:33:1e:b2:40:d2:d4:f7:f7:5b:47:b4:
         a3:62:39:23:da:1b:08:28:97:24:3c:6a:be:e4:9c:51:8e:06:
         f2:e7:f2:f4:d0:b8:81:d8:a4:03:bc:0d:11:84:92:bc:72:09:
         fb:2c:32:8e:05:0a:fd:a2:41:77:c2:42:48:c0:bf:20:e9:45:
         c2:ca:fa:8c:a8:d6:6b:8b:db:1a:9b:35:9d:6f:f5:7f:9e:95:
         63:c9:1b:eb:26:a8:ea:b8:03:d1:c5:2f:29:96:06:82:03:b8:
         19:ac:37:8a:72:32:72:92:80:c5:b5:a3:17:5b:7a:6b:2a:8d:
         17:b0:d5:24:f9:bf:78:2a:db:4d:5e:08:82:4f:95:56:d2:4b:
         ef:64:13:d2:b1:ea:a2:57:23:95:68:35:29:34:4e:27:0d:bb:
         d5:c9:37:8c:35:ae:80:d5:a8:c5:3a:e1:1d:ed:f8:c5:db:f8:
         fc:00:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:42 2025 by rpki-client