Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
File:                     1yGexzg_oGEEgN36YsP4LEAM1W8.mft (raw, json)
Hash identifier:          7VgTr5FyTU3UX+vjdjet1H05EqKj44nQe+d/nr2YJ/s=
Subject key identifier:   6A:A6:C4:4A:6A:1D:90:C1:33:76:CD:65:43:91:04:FD:8D:BB:D8:15
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Certificate issuer:       /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial:       019950782A40DB0C6F9FA5AAC309BA405E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
Manifest number:          169D
Signing time:             Tue 16 Sep 2025 03:01:16 +0000
Manifest this update:     Tue 16 Sep 2025 03:01:16 +0000
Manifest next update:     Wed 17 Sep 2025 03:01:16 +0000
Files and hashes:         1: 1yGexzg_oGEEgN36YsP4LEAM1W8.crl (hash: Rt+RX6b81cEwXG4IyY1ULLxet1IzpvjC8VJeb/Z87ZA=)
                          2: PqhLYK9y6l-hcls-AteZg7ZowWc.roa (hash: 5kkmCBC611tewDVZOjvNR50HAAbuHCz11F3GzXw+Bh4=)
                          3: U8dIjWtcY2-M_CEVsA6b8bwpFDE.roa (hash: Fkz8GUWY9XL31RlpgAhEjSOpkZkA5/bNbRzb9y7VS9c=)
                          4: rkMUgmhsqbXXRN9oFUiXQpZDv8U.roa (hash: qJePBEGYHTN0gemfII7b2mdoR3N62f9upxA2WFELbiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 03:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:50:78:2a:40:db:0c:6f:9f:a5:aa:c3:09:ba:40:5e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
        Validity
            Not Before: Sep 16 03:01:16 2025 GMT
            Not After : Sep 17 03:01:16 2025 GMT
        Subject: CN=6aa6c44a6a1d90c13376cd65439104fd8dbbd815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:fc:be:4b:36:12:66:c3:66:71:3e:38:3c:
                    da:f1:c7:8c:11:30:2e:3b:40:7e:ea:5a:7f:59:ef:
                    3e:9f:27:c6:49:2b:45:16:ca:2d:6a:be:ae:72:60:
                    9b:33:e7:fc:f2:6e:aa:30:f9:cc:d0:ab:30:10:1f:
                    5e:29:bf:35:83:12:f9:5b:8f:89:31:34:ec:ee:27:
                    96:18:f8:7a:f5:b2:39:a6:ea:4e:f6:1d:f4:8b:74:
                    81:01:26:c7:f3:9a:05:49:c9:80:de:4f:98:6f:d4:
                    f0:c9:ce:d1:16:9a:33:e5:84:d1:69:e8:b9:c7:9d:
                    bb:74:6b:21:3f:46:02:b6:2f:57:65:d6:de:e7:6c:
                    c9:6e:ca:00:1a:64:ac:f7:69:69:be:8e:12:19:3a:
                    32:7c:83:d9:05:b8:3d:1f:76:d8:97:38:d8:af:2d:
                    88:5c:41:ea:9d:4b:b5:51:67:d5:13:e7:5f:a9:59:
                    08:42:20:68:c0:12:b3:44:f6:1d:ce:b8:3a:bc:ee:
                    f9:10:96:e5:bd:e5:2a:35:fd:a7:f9:23:b4:f1:b4:
                    bc:16:05:53:80:6f:1e:2e:ef:63:4d:0e:b0:f6:a0:
                    51:1c:21:f4:65:a4:3b:eb:b9:05:dd:6c:1b:fb:a2:
                    4b:ce:0c:f3:95:38:9a:9b:1f:0e:79:7f:7c:b3:0d:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A6:C4:4A:6A:1D:90:C1:33:76:CD:65:43:91:04:FD:8D:BB:D8:15
            X509v3 Authority Key Identifier:
                keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:98:de:e4:b0:a3:ef:64:46:48:95:82:c7:bc:87:10:db:9a:
         3c:c6:8e:5b:33:39:ff:e8:75:47:85:77:9b:b5:2e:c6:a2:04:
         a0:e9:b3:72:63:0e:0b:15:b6:54:3b:5c:5a:ea:09:5b:f2:58:
         f3:f1:b4:88:cf:2b:ca:26:9f:93:d7:7e:52:b7:19:a2:b2:a1:
         da:5d:67:a7:88:cf:d5:1d:66:8b:4f:8a:89:d8:92:53:d1:75:
         09:4d:f4:22:b0:44:5a:b2:32:3e:ac:18:fd:87:d9:1f:f1:13:
         08:30:9d:4f:e6:47:bd:dd:4a:12:43:4a:0a:84:47:e6:bd:b6:
         c6:da:ec:17:29:0e:2e:ea:a8:e9:9d:b6:89:4c:07:52:bd:8a:
         b0:a6:75:d7:5f:37:95:38:c2:34:57:50:fb:d0:e7:95:55:06:
         1c:73:b8:b1:28:92:82:d1:02:1e:3c:32:12:13:0a:c6:cc:ed:
         fb:fe:cc:7a:0d:4f:3c:dd:c1:85:4f:23:6a:b7:f9:13:7b:cc:
         f3:bb:59:61:73:05:0f:ce:73:89:36:8b:6f:43:7b:45:0f:08:
         db:88:74:61:f8:94:a5:ec:13:31:cd:53:16:59:c7:6e:05:06:
         49:3a:12:cf:89:1c:f6:b5:b8:84:36:e9:c4:7b:8c:86:99:81:
         80:9b:af:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 09:14:07 2025 by rpki-client