Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
File:                     n92vITJX0XbfUKpud2SKDMcqX6E.mft (raw, json)
Hash identifier:          PfS2LARgN6z3JEGx2ZGO4BnLUPAXyCy4IKUkg08OB+Y=
Subject key identifier:   80:A9:E9:F0:2D:EF:C6:0C:A7:F1:D7:51:7E:BC:C3:88:6C:5E:FD:3E
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Certificate issuer:       /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial:       01992F366D5DDAB040AD15171E1E633AA778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
Manifest number:          167C
Signing time:             Tue 09 Sep 2025 16:02:00 +0000
Manifest this update:     Tue 09 Sep 2025 16:02:00 +0000
Manifest next update:     Wed 10 Sep 2025 16:02:00 +0000
Files and hashes:         1: 6WWGMBEJeVUhw0je11LNLXob3Fk.roa (hash: UR2dxpbdtKcSXZI0WPnuoltcK0Rk3PFpyvHQx4QFc88=)
                          2: n92vITJX0XbfUKpud2SKDMcqX6E.crl (hash: T8LlSQqwmJS9Ub9GnYi3x8R/8EXZh3ASD+1lRnv40W8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 16:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2f:36:6d:5d:da:b0:40:ad:15:17:1e:1e:63:3a:a7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
        Validity
            Not Before: Sep  9 16:02:00 2025 GMT
            Not After : Sep 10 16:02:00 2025 GMT
        Subject: CN=80a9e9f02defc60ca7f1d7517ebcc3886c5efd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:0a:1b:fb:07:ca:fc:a6:02:0a:97:bf:e9:dd:
                    1e:09:9c:4d:2d:91:b4:d4:03:a2:31:5a:f7:66:8d:
                    53:d1:5f:96:1f:30:49:96:0b:de:6c:13:c4:cd:20:
                    d5:88:b7:b9:30:a5:c6:14:15:76:5f:32:38:33:c6:
                    69:31:b0:de:79:a4:7f:8d:a4:14:da:92:3d:29:20:
                    81:d4:93:fd:43:fa:98:7c:50:c8:a6:22:58:2f:bd:
                    09:45:92:71:79:d1:1f:d8:fd:c4:f1:4f:16:3c:d3:
                    e7:62:c3:15:d4:41:42:3f:ce:8b:39:39:39:5d:01:
                    88:7f:7e:73:4f:47:88:50:03:b7:d3:b2:49:57:b6:
                    2a:82:ba:e5:70:cd:4f:5a:f9:7f:2f:d3:f4:62:ba:
                    80:b7:40:21:09:ad:21:f5:3f:df:85:3a:d9:48:ac:
                    db:7e:d8:ce:02:5b:30:8a:5e:fb:d8:4e:eb:97:37:
                    91:f7:a8:90:60:77:c1:6b:e8:e8:42:3c:5f:60:65:
                    53:07:7c:46:37:e3:c0:c6:b0:db:42:09:ca:63:b3:
                    a1:24:00:20:62:e8:17:80:44:92:52:13:8c:9f:bc:
                    2c:92:eb:58:dd:cd:57:6b:e3:2b:e7:67:2c:82:27:
                    03:a9:e4:a2:00:a4:db:b3:f9:e1:c5:b1:d3:97:a7:
                    9b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A9:E9:F0:2D:EF:C6:0C:A7:F1:D7:51:7E:BC:C3:88:6C:5E:FD:3E
            X509v3 Authority Key Identifier:
                keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:93:90:ce:81:31:8f:ea:7a:49:7c:1d:fa:27:28:44:88:a2:
         1d:9c:05:c3:7a:3b:a5:4b:21:05:d1:a1:21:5f:c3:f8:f7:e9:
         08:cc:4d:00:08:79:dc:fa:44:f9:5f:5f:10:61:c6:6a:2e:51:
         a8:98:4d:0c:1c:39:93:90:89:6a:58:aa:e8:33:06:f7:78:eb:
         38:e3:d9:08:c1:e2:17:60:92:e8:13:18:b0:cd:97:51:49:6c:
         23:e3:fe:b7:6c:65:6c:68:11:fb:c2:3c:61:e8:5f:e9:21:86:
         99:a8:ca:09:e3:ff:80:53:ea:ca:a0:6a:41:17:b9:b8:83:7e:
         cb:4d:9b:dd:cd:60:f4:36:8b:a5:1a:90:e9:e5:77:45:54:01:
         57:fb:4b:23:df:56:40:6f:d2:ac:81:02:d6:1f:7c:ce:d8:35:
         15:03:fe:cd:4b:ff:22:99:1f:76:ac:0c:e9:55:b9:c3:b6:b4:
         fd:c7:e3:f0:1f:a3:64:11:ab:70:44:52:35:44:7d:6d:e3:ed:
         60:c2:ee:e9:51:b6:b4:84:5d:da:72:77:04:2b:48:16:34:0c:
         ce:34:23:5c:8a:dc:15:9d:de:97:1b:10:1d:dd:1f:13:b1:05:
         c2:3e:8d:f5:65:f3:7a:8c:ae:5c:6e:50:3a:c2:19:ed:8c:25:
         f7:8e:9e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 20:39:31 2025 by rpki-client