Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
File:                     dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json)
Hash identifier:          XgXhVWqP+YzG5xtMPkgR+ZTEArON1Z+X6fvAX+eNsgI=
Subject key identifier:   AB:37:56:89:F8:D6:5F:78:EF:42:DD:1D:82:85:F0:BD:A4:1A:FC:4F
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Certificate issuer:       /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial:       01991763BD8DBED87BAF752BE9147A96E051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
Manifest number:          166B
Signing time:             Fri 05 Sep 2025 01:00:36 +0000
Manifest this update:     Fri 05 Sep 2025 01:00:36 +0000
Manifest next update:     Sat 06 Sep 2025 01:00:36 +0000
Files and hashes:         1: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: j4YpgnWpq816cAcwl70rm0V/SOAweb1EAjgJhB9KHJ8=)
                          2: hx2ek40oJmiSl7Xgir3mC5VHBV0.roa (hash: cCp67/8pyoc4Gg/vx5QrjhBwzCVOnjb7FAHH3PazwOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:63:bd:8d:be:d8:7b:af:75:2b:e9:14:7a:96:e0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
        Validity
            Not Before: Sep  5 01:00:36 2025 GMT
            Not After : Sep  6 01:00:36 2025 GMT
        Subject: CN=ab375689f8d65f78ef42dd1d8285f0bda41afc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:f6:49:24:e7:5e:7a:2e:ba:77:05:27:e6:
                    2a:b8:98:26:51:50:2b:15:69:1a:b5:cf:80:9c:14:
                    d0:7e:9e:b9:84:21:34:7b:9b:eb:93:5c:93:30:fd:
                    83:df:5e:b0:a4:4f:fa:99:d3:12:e0:f3:45:8f:25:
                    f5:21:bf:b6:f3:a9:fd:a2:0f:ff:fb:b0:56:0d:b2:
                    7f:47:af:e4:0e:a8:80:62:91:9c:54:11:e4:ae:d3:
                    49:60:a4:54:36:dc:8f:e2:a2:c7:69:ee:b5:22:23:
                    3a:8f:1b:56:5b:b7:ad:4d:ea:76:bd:fc:78:3c:18:
                    44:3c:0e:c3:76:db:b8:36:3f:ce:ab:02:e7:4d:98:
                    83:69:b1:52:2f:63:b4:67:d5:7e:48:99:b7:b2:b8:
                    6d:10:51:6c:a5:ac:ae:16:50:30:aa:f0:38:bb:58:
                    40:f8:15:bd:8b:4d:20:1d:b6:62:cf:49:21:fb:ed:
                    1f:f7:23:ef:38:08:7f:27:06:a5:28:ae:62:d4:b4:
                    69:47:bb:6d:45:42:a3:e0:90:af:46:d8:f6:32:af:
                    58:51:1b:7f:31:fd:af:ba:ec:3e:97:a9:2e:48:2e:
                    2d:7a:71:62:43:e1:8b:13:54:fb:30:fe:0d:4e:1a:
                    b0:14:9a:46:43:d2:25:79:8c:94:11:32:ab:69:8a:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:37:56:89:F8:D6:5F:78:EF:42:DD:1D:82:85:F0:BD:A4:1A:FC:4F
            X509v3 Authority Key Identifier:
                keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e1:47:76:38:68:d1:18:eb:d6:8c:66:74:a7:3b:43:81:71:
         df:8c:88:80:11:18:c0:96:0f:a2:1f:8a:72:28:93:a5:7d:c7:
         af:cb:91:66:d9:d8:30:09:8b:17:19:64:ff:64:02:53:a5:bb:
         4b:86:45:62:46:47:e0:e7:40:53:48:9a:79:eb:e0:c3:8e:21:
         31:df:55:af:38:04:c0:05:5b:3f:57:9a:75:6f:f4:08:bc:fa:
         bb:61:4a:70:2c:2d:73:a0:44:48:9e:c3:2f:bb:e2:9e:b8:00:
         ce:9f:db:3c:97:94:1c:5e:a7:8b:56:9f:2e:b9:8c:47:bc:f5:
         52:6f:d4:ed:7a:97:0a:20:ab:98:d1:8e:be:cb:b2:de:d3:7b:
         1c:9a:a8:5b:76:b5:df:e8:94:7e:3f:cf:2a:b3:e0:01:ab:76:
         01:39:de:08:78:b5:82:f2:e7:7a:1e:63:92:36:63:fa:0c:24:
         27:73:5e:12:cb:8e:a2:7d:00:11:6e:50:df:13:28:af:41:42:
         d8:51:dc:3e:75:c5:06:53:a9:72:31:ba:7a:71:a9:ef:f3:e6:
         0f:16:67:c8:3a:a1:25:cc:68:32:f9:07:39:c5:97:60:1d:80:
         ae:0e:8f:88:4d:8f:a1:1d:04:83:a2:7e:62:42:a4:fa:54:67:
         f9:12:56:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:25 2025 by rpki-client