Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
File:                     gU7b0ZY0y7kaDS2v11nUyafne3o.mft (raw, json)
Hash identifier:          QvVmxUGct5u08kN6TMfTFE1KHl7soJSXmPrWQ2fRf4Y=
Subject key identifier:   A7:59:F1:0F:20:3C:00:26:89:86:D8:F8:FF:E4:2C:32:5F:28:93:67
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Certificate issuer:       /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial:       01993236C15F56A4E36E3F189A350D1288D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
Manifest number:          167C
Signing time:             Wed 10 Sep 2025 06:01:13 +0000
Manifest this update:     Wed 10 Sep 2025 06:01:13 +0000
Manifest next update:     Thu 11 Sep 2025 06:01:13 +0000
Files and hashes:         1: _ZGs7yyYUfcWFHaeoN_irFYY-Fs.roa (hash: k/ZQQ+Kv/qHUrbi6eDGukQ6+rynVgaxf2EU7N8rlEaQ=)
                          2: gU7b0ZY0y7kaDS2v11nUyafne3o.crl (hash: 2gSpy8qObRHX25LX3YDOiWXIEy5eDI4dGEMyvh/5WjU=)
                          3: xpTRCuHlYWLPipg1pf1wuJHDIPg.roa (hash: 8yVx7sKih/ir7FZHTNGaky/UBkdstIszyQkTRTd/9nQ=)
                          4: ywM-ydmbzESoETxNsRnDQ6bbYxg.roa (hash: GmNC6UbYgSd9tbGR+GgvLCmczbY/RBGea7VtxVomphs=)
                          5: zticNdKOcKpGZ7y9nSwo2z1Ata4.roa (hash: 8+4soy6gmx5EG7p1nRpzUiPyWHyd7/QxOctDatWj2cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:32:36:c1:5f:56:a4:e3:6e:3f:18:9a:35:0d:12:88:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
        Validity
            Not Before: Sep 10 06:01:13 2025 GMT
            Not After : Sep 11 06:01:13 2025 GMT
        Subject: CN=a759f10f203c00268986d8f8ffe42c325f289367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:a4:68:67:8c:17:de:87:77:33:53:7a:af:
                    01:6d:6e:94:6e:30:21:9c:38:6e:87:36:0c:60:08:
                    b2:af:a2:c6:51:70:27:13:1c:ac:fc:44:d9:66:ec:
                    f4:fc:62:45:b1:a9:fb:91:28:36:94:b8:fe:2e:92:
                    14:df:4c:6c:4e:2d:b2:70:f2:f7:15:9a:a5:e1:88:
                    65:7c:89:22:74:6d:a4:5e:18:9c:3e:8d:0e:29:72:
                    bc:99:db:f5:38:40:69:a4:1d:46:70:82:94:72:65:
                    f6:d6:ba:aa:56:2c:db:10:f0:b1:b3:eb:38:f9:5d:
                    40:3c:80:5c:8e:df:78:fb:5d:b5:20:af:a2:d2:98:
                    aa:4b:a0:12:43:44:05:e5:92:30:c6:5b:b5:67:d4:
                    a2:46:66:3a:96:71:c8:5e:fe:4e:98:7d:06:8f:25:
                    e8:6b:86:e1:11:ff:4e:6d:2a:21:d8:a1:9c:f7:97:
                    89:89:67:68:8d:33:4b:de:1b:df:e0:54:6e:ab:34:
                    02:c5:bf:9b:7d:95:f9:d0:30:d9:d6:69:8e:b6:d2:
                    d1:72:b6:97:ca:2a:83:37:b9:9d:7a:48:d4:7e:bf:
                    5f:6f:8d:b6:d2:6e:0e:5e:ae:55:5a:8e:5b:0f:bb:
                    a0:de:aa:77:97:03:63:fd:a2:d6:ed:8d:2b:b1:fb:
                    d3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:59:F1:0F:20:3C:00:26:89:86:D8:F8:FF:E4:2C:32:5F:28:93:67
            X509v3 Authority Key Identifier:
                keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ca:4e:55:6d:b8:d2:8f:3d:a3:c0:55:0f:ed:e3:9b:be:0d:
         8f:3d:f3:23:7d:b0:2a:1e:d4:cf:20:17:db:09:c7:a1:b6:52:
         8d:a0:8f:e0:dd:a2:4e:f1:dd:67:9a:58:d4:d5:56:25:4b:c4:
         a0:42:51:43:2f:a5:ce:c0:aa:0a:01:b5:e9:b4:44:f4:d2:6a:
         f9:21:03:0d:12:56:72:27:01:41:d3:4a:cb:71:75:37:50:31:
         a2:fb:27:86:72:39:3c:9c:77:2a:47:13:84:b5:29:ab:db:9f:
         62:46:ab:15:5b:1c:a8:17:b4:76:b0:0a:ff:91:5b:43:83:15:
         d9:72:9c:bf:d2:db:a4:29:35:14:d4:72:bf:60:fa:bd:11:6c:
         fa:2a:af:4e:e5:68:58:28:9f:f0:27:23:ae:d8:4a:f8:b9:92:
         a7:f7:2a:c7:ab:0d:39:dd:cc:59:e7:a8:19:a5:13:76:e6:9a:
         33:55:91:4e:30:91:56:c7:ac:cf:14:ee:2d:37:6c:68:c0:f8:
         28:4b:b0:a9:6d:06:f6:72:96:0f:eb:39:f4:71:d7:8f:fa:4a:
         d4:74:1e:f7:de:6d:b7:76:e3:d1:d5:54:a4:e3:b5:66:64:47:
         11:69:95:05:ac:39:5f:a3:58:ff:b8:9f:e9:8f:1e:ab:34:77:
         76:69:bf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:20:50 2025 by rpki-client