Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
File:                     dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft (raw, json)
Hash identifier:          GgNmcSX9jZiS2zqSAsPuCuDNOLpTuPno1sePmK3PdUc=
Subject key identifier:   67:1C:16:D3:09:EF:57:B6:C4:45:AD:24:42:56:9E:5E:0B:77:24:C8
Authority key identifier: 77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
Certificate issuer:       /CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Certificate serial:       019916BF7F74B4FD6716E57826CA7A2AF404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
Manifest number:          166B
Signing time:             Thu 04 Sep 2025 22:01:12 +0000
Manifest this update:     Thu 04 Sep 2025 22:01:12 +0000
Manifest next update:     Fri 05 Sep 2025 22:01:12 +0000
Files and hashes:         1: WpMT8suijybaT-axFHyfyzyaTBs.roa (hash: I0+iXOVNpy84NiUe0arMh2Z225OGAdH9+ziecARxFHA=)
                          2: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl (hash: WNhT5CxSdzoLhC4MuRrGyyVZoDoh6/TB2VkHhfW3Ows=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 22:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:bf:7f:74:b4:fd:67:16:e5:78:26:ca:7a:2a:f4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
        Validity
            Not Before: Sep  4 22:01:12 2025 GMT
            Not After : Sep  5 22:01:12 2025 GMT
        Subject: CN=671c16d309ef57b6c445ad2442569e5e0b7724c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:ea:3b:d8:14:e8:c3:31:34:fd:11:96:d5:
                    6d:10:24:92:8a:07:1e:14:1f:d8:c3:91:57:1f:b0:
                    83:36:7d:95:b4:b7:b1:d0:20:b2:36:b3:fc:05:a2:
                    e4:0f:17:ba:0c:07:3f:16:2a:1e:85:65:7b:aa:86:
                    c8:17:a6:fd:8d:47:f2:c8:04:65:4c:f2:64:b8:c3:
                    ec:04:af:e5:20:31:1a:c0:c2:87:fa:6f:2f:78:dc:
                    2a:fa:61:20:82:02:0d:c7:40:43:00:7e:f9:77:01:
                    cf:11:d4:c9:2a:0d:13:6a:f5:86:85:87:8b:58:72:
                    d9:94:51:54:99:6e:70:24:44:f2:aa:86:e4:a5:2f:
                    a8:6f:98:51:a9:77:c7:3f:90:f1:8b:97:0f:db:88:
                    da:99:40:4c:fd:f6:c6:2e:8d:5c:ed:8d:b1:c2:3f:
                    73:be:2c:60:fb:85:b2:79:35:65:bf:32:4e:ad:0e:
                    83:eb:73:45:62:b7:4a:a6:00:17:b4:40:ea:87:04:
                    fd:a7:e0:3f:9f:c7:67:ac:e0:f7:d0:62:b2:fe:82:
                    39:ce:66:42:9c:dc:fa:64:43:6c:af:5e:30:8c:05:
                    bd:a8:54:8d:0f:1e:42:e3:01:c9:25:b1:05:ad:0f:
                    67:1a:9f:4a:b5:82:cd:6e:b5:38:4c:82:7e:cc:6a:
                    84:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1C:16:D3:09:EF:57:B6:C4:45:AD:24:42:56:9E:5E:0B:77:24:C8
            X509v3 Authority Key Identifier:
                keyid:77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:af:fa:73:6a:f2:02:a3:19:6b:1f:70:4a:5a:b0:08:59:b3:
         e8:bd:0e:80:dd:24:88:50:25:a8:fa:ad:e2:8d:19:97:da:29:
         fa:15:39:d2:c2:26:91:bb:32:8c:11:19:9c:80:2d:fc:1e:57:
         72:39:e5:55:8f:82:d3:21:54:80:6f:c6:c4:4d:8a:e5:61:f6:
         c1:68:10:51:57:55:a0:b0:0f:83:a0:ab:12:4e:eb:03:38:db:
         93:ca:e3:65:eb:14:5e:fb:40:ef:d7:9e:ff:5d:4a:39:95:ad:
         b7:70:6a:37:a8:a9:42:96:52:f3:58:ea:cf:9e:86:98:91:6f:
         06:dd:92:0c:42:ed:48:4a:43:34:8d:60:8e:f0:78:34:b9:63:
         b8:bf:82:dd:ff:d7:ba:db:bd:df:15:55:40:b2:0a:cd:8f:c1:
         82:18:cb:84:03:aa:d3:25:af:98:ac:67:e7:43:58:39:40:2c:
         0a:81:4e:ae:ec:cb:10:7b:44:ef:32:2f:de:51:93:b7:c9:a0:
         fd:8b:5f:2e:17:f4:3b:fa:b5:c6:7b:9d:31:b4:4c:10:05:9a:
         4c:e9:8e:42:48:14:27:f5:e6:1f:69:06:73:6b:f4:c7:77:dc:
         43:41:89:9c:66:33:12:01:40:81:66:77:1f:cf:9a:6c:74:0f:
         4f:a7:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:04 2025 by rpki-client