Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
File:                     eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json)
Hash identifier:          YtV7d9NFEu3qTqjau8Ps9XgscNh7pJl28NNLpVBAK2M=
Subject key identifier:   15:F0:C1:96:28:96:4D:07:F8:3A:33:B1:7E:E5:F2:2D:58:3A:06:28
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       0198D5F164101BA9898ABEDA3040E83EFEEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
Manifest number:          166B
Signing time:             Sat 23 Aug 2025 08:00:23 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:23 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:23 +0000
Files and hashes:         1: 2cSeSi_Xs9nxENINXXMmVW1DasQ.roa (hash: NILYBWHjcUi2YMu0b6KQQ7GSdlhIfBjAKlI5QryWGe8=)
                          2: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=)
                          3: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=)
                          4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=)
                          5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=)
                          6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=)
                          7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=)
                          8: cPIFj4emJFvwe8Upx_l04Smq82M.roa (hash: vDJnCBY3/Xu6IQlzRF0lLRZwveQcZyy7umYRTs07PBM=)
                          9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: lgqDPL1Qz8AI50gsMXZ5H7uWGtDfkccHz6ly6lxdtPQ=)
                          10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=)
                          11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=)
                          12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:64:10:1b:a9:89:8a:be:da:30:40:e8:3e:fe:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Aug 23 08:00:23 2025 GMT
            Not After : Aug 24 08:00:23 2025 GMT
        Subject: CN=15f0c19628964d07f83a33b17ee5f22d583a0628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a4:fb:a6:bb:ec:ce:47:00:3a:a7:5f:a5:e7:
                    38:db:4d:bc:eb:51:19:d4:1f:42:57:09:90:67:6b:
                    36:3f:a9:0a:c6:63:53:f3:de:89:77:be:3c:32:9a:
                    7e:89:a6:97:6c:11:d9:6d:fa:a1:88:86:c3:88:05:
                    af:72:76:01:ac:85:5c:d9:a2:f1:46:7c:6f:19:1c:
                    a5:9b:1e:ac:4e:07:44:0c:08:b4:fc:3d:bf:1e:0f:
                    ed:14:ea:ca:90:16:f8:a1:1e:9f:ba:5f:6a:07:1b:
                    38:cd:c0:a6:64:dd:fc:b9:be:21:df:2b:07:3d:86:
                    f6:04:98:66:9e:d7:11:13:42:3a:41:28:f7:58:5a:
                    36:b9:79:d3:8c:be:76:5f:7d:5e:4a:11:9b:65:8a:
                    1d:aa:b6:47:d1:36:b5:06:9b:a8:be:d5:dd:d4:a1:
                    9d:15:b6:35:1f:fc:5d:c0:ef:f7:b4:1f:b4:27:ea:
                    be:89:f0:85:9e:7e:1d:bd:31:89:66:a6:4a:fd:43:
                    d6:c3:ef:ad:fe:42:41:d3:ad:68:9a:fc:30:d6:eb:
                    b8:4b:eb:db:c5:23:0b:53:40:69:46:e5:8e:a6:2c:
                    b9:9b:1e:b6:7e:14:27:5d:02:66:96:b3:1e:21:5a:
                    b1:7c:fe:49:1b:17:41:07:15:d7:e6:ec:d3:8b:0c:
                    fe:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F0:C1:96:28:96:4D:07:F8:3A:33:B1:7E:E5:F2:2D:58:3A:06:28
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:33:67:8a:da:12:36:6a:f8:f7:b0:c9:7a:c5:28:b5:ee:9c:
         3d:07:07:da:9f:d1:49:f1:b0:6d:43:ce:11:67:89:12:5d:d0:
         91:d6:dc:0e:9c:84:d5:73:6d:d0:20:96:de:fa:67:c3:39:5b:
         a8:ae:59:89:70:88:7c:79:7e:f0:6c:00:32:dc:9a:1e:0b:b3:
         c6:41:61:69:01:05:31:a5:d6:40:03:3b:6e:d1:78:39:ee:c8:
         2b:a8:2e:b0:09:00:9b:c9:81:0a:91:ee:f3:43:16:61:3e:f8:
         76:97:c0:96:44:30:e0:60:d5:b6:aa:91:f4:fe:48:77:87:ac:
         61:bd:d5:fc:60:fd:00:8a:f2:6e:f7:e9:bc:aa:77:57:b0:b6:
         b4:9b:ea:fc:a2:fe:d3:8b:4b:ef:c8:b5:9a:da:c9:d9:aa:1b:
         7d:3b:f5:80:6a:79:4b:b3:19:d2:a2:fb:8b:74:b4:83:43:c1:
         3e:91:99:35:f7:ee:2e:5c:a2:8b:f3:30:3c:64:2a:63:ab:34:
         9e:fe:a9:05:58:52:0d:35:d9:5a:a7:b1:a1:2d:87:f2:df:00:
         41:27:72:fb:89:b9:e4:8c:e6:92:4f:03:f4:12:34:fd:7e:49:
         f3:45:ec:09:d7:a0:d4:d7:83:84:03:b8:9c:bb:e3:a2:96:15:
         a1:e3:cc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:57 2025 by rpki-client