Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
File:                     _ieWxamFRTLp7WONHDmlQcLYlSw.mft (raw, json)
Hash identifier:          zlNyhVOV7Ggkq20N6df7pIKEaPwy4KVeJKSk97OEBpU=
Subject key identifier:   62:BC:F0:C1:44:B7:80:FF:E8:F7:F8:64:B4:2F:93:2D:08:6A:2A:77
Authority key identifier: FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
Certificate issuer:       /CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Certificate serial:       0199221E7818F2147B2CB6C3662E67E0F060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 03:00:45 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:45 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:45 +0000
Files and hashes:         1: _ieWxamFRTLp7WONHDmlQcLYlSw.crl (hash: HnJqNK+wUiKBprzOG6DzP2jkC1ziqm1z10Kj3/4TTYI=)
                          2: lVgaXBqK9ipwWOL2JmWoEWoiLBY.roa (hash: Oh3cZzMySDT+Ikxg+sUYVfiZZ5GP7qV/BWdrXyebTLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:78:18:f2:14:7b:2c:b6:c3:66:2e:67:e0:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
        Validity
            Not Before: Sep  7 03:00:45 2025 GMT
            Not After : Sep  8 03:00:45 2025 GMT
        Subject: CN=62bcf0c144b780ffe8f7f864b42f932d086a2a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:9c:e0:63:12:a7:ea:a8:7d:98:f1:3d:04:
                    2f:04:76:0b:eb:bd:9a:48:2f:52:68:79:9a:c4:bf:
                    2e:48:c1:a8:05:e8:e8:e1:f8:28:75:b2:e6:c5:e2:
                    7e:99:d4:dc:69:00:70:6f:86:ce:3e:8a:09:b0:ab:
                    37:7b:cb:dd:bf:1f:a3:2b:db:51:f2:b7:08:98:59:
                    ea:92:21:c5:c6:1a:10:e0:cc:45:05:c7:e5:27:4d:
                    f5:b0:51:31:e9:20:8b:a1:53:81:3a:c4:7f:28:75:
                    86:3b:0f:9d:3b:15:78:9a:99:02:82:10:ef:ca:bd:
                    12:11:be:d5:52:fa:56:e5:91:40:58:6b:07:2e:ff:
                    5c:16:9f:48:7c:fd:1a:cf:ea:e1:63:91:c6:a3:1b:
                    09:cd:4b:5c:c7:06:98:9b:16:6e:20:f4:78:e8:da:
                    c0:21:37:86:3f:f6:cf:e9:f0:4f:f9:7e:6b:01:f4:
                    56:8f:9d:69:e1:7e:12:06:5f:2f:c1:c9:57:27:04:
                    65:b7:59:69:62:b9:c3:db:2f:d0:ef:82:c0:b3:3c:
                    d0:2b:bb:c7:61:9f:81:c9:46:56:66:f2:10:79:3d:
                    a7:a7:30:ee:48:e3:79:c8:39:47:05:12:56:86:49:
                    cf:65:e9:b7:7f:7c:94:71:a0:28:18:d0:93:54:27:
                    36:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BC:F0:C1:44:B7:80:FF:E8:F7:F8:64:B4:2F:93:2D:08:6A:2A:77
            X509v3 Authority Key Identifier:
                keyid:FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f9:57:38:56:fe:80:1d:86:b0:00:d1:f7:41:d5:16:f1:48:
         a0:ce:b6:f7:bd:e0:07:4f:71:6e:86:75:08:2d:c5:0a:26:68:
         ec:16:75:23:7a:68:33:0f:6f:2d:d7:a5:15:1c:53:03:2e:8d:
         62:09:ea:08:e6:86:21:69:60:dd:51:f4:56:10:f6:44:52:ef:
         9f:c9:be:dd:6f:f8:5a:0c:b1:09:ba:ed:e3:7e:ca:cf:98:44:
         2d:a2:ec:d9:36:d9:b3:65:a1:f5:ac:e4:a0:27:90:45:0a:bd:
         fa:89:8d:3e:e0:c2:f5:35:c2:cb:70:ed:78:6f:a6:8d:eb:13:
         3a:02:75:14:83:57:49:01:dc:c3:74:fb:14:88:22:23:eb:8e:
         bb:7b:62:aa:4e:9a:e0:4d:03:3c:0d:37:d3:0f:c0:47:30:0b:
         83:65:02:75:2d:2d:78:db:e5:8a:98:28:73:4e:78:93:40:16:
         d7:2d:85:02:48:da:19:03:96:b5:df:8d:e7:83:96:a0:0e:51:
         4c:a0:a8:70:75:91:3b:80:f8:aa:88:ca:d1:d5:2d:a7:ba:09:
         7f:08:68:45:6e:fb:78:ff:3e:6c:c9:0d:12:9c:e2:e9:1a:70:
         00:32:ad:97:f4:4d:20:2b:ac:98:ff:c8:f6:04:06:37:e0:a0:
         27:38:d9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:30 2025 by rpki-client