Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
File:                     RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft (raw, json)
Hash identifier:          9hLf94BHrevuW5jGI3+5qQ9fwiAuAjQGbvEEsiskAII=
Subject key identifier:   4F:11:04:FE:A8:A7:A5:DF:45:D2:7F:57:3F:78:C0:0A:F1:05:38:68
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Certificate issuer:       /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial:       019933B6E837A3DC1927D48EF60B0B61D820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
Manifest number:          167F
Signing time:             Wed 10 Sep 2025 13:00:48 +0000
Manifest this update:     Wed 10 Sep 2025 13:00:48 +0000
Manifest next update:     Thu 11 Sep 2025 13:00:48 +0000
Files and hashes:         1: I6ww8fe_j9f3G8rmW-wt_mZZY2s.roa (hash: Sd8zlV1mabR3WLhdUp899p9IeCSzwEZhzmqxHzFQi+0=)
                          2: PR7h8oep4HkWGcRzvS4-gRfixMM.roa (hash: Ff4Pkc/6nXpndO4Ei0ieXIWUczca12lTRXydMV3acQQ=)
                          3: RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl (hash: 7q3Wl70gVATdmOX008aVeWhJoI+N9M4xH32ueDqVoAM=)
                          4: a4P5Nmq1ldQpFUTXqCcYVJT2FBw.roa (hash: uK/XWq2f7Vj84yIu4J13Mqd4rpKs4ZvyhbUMCrHpfh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:b6:e8:37:a3:dc:19:27:d4:8e:f6:0b:0b:61:d8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
        Validity
            Not Before: Sep 10 13:00:48 2025 GMT
            Not After : Sep 11 13:00:48 2025 GMT
        Subject: CN=4f1104fea8a7a5df45d27f573f78c00af1053868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:56:88:bb:9a:7a:21:69:37:3c:54:27:ff:7a:
                    b9:fa:ad:38:b7:a0:8c:da:00:87:d5:1a:15:24:12:
                    47:a6:5a:a2:78:e9:d4:04:13:1d:32:84:ca:97:98:
                    fa:00:a3:e3:f8:dd:8b:5c:a7:82:34:1b:0c:58:16:
                    9e:1a:6a:f5:fc:96:82:92:68:d9:1d:1c:24:c5:68:
                    ca:3a:cf:81:97:2c:43:bf:26:c7:5b:13:ec:45:55:
                    6b:ac:88:cc:36:94:f0:96:32:e7:78:91:6b:3f:ef:
                    7a:ba:11:ba:cf:7b:b2:94:a3:f8:9d:00:c1:1c:36:
                    66:f9:6e:a0:2b:51:8d:48:55:42:7c:6f:7b:1e:d1:
                    6c:47:d1:4c:cb:6f:90:cf:52:d7:d9:c2:cd:9a:8e:
                    24:77:0b:bc:d7:fa:4e:81:a9:cd:8c:81:39:d3:fc:
                    af:42:d6:9f:8d:75:28:63:5a:75:0c:64:23:62:6f:
                    a5:37:e4:75:21:de:9d:fa:54:c3:6b:ab:22:d1:5f:
                    9f:3e:f9:ad:5d:ce:a5:cf:47:dc:78:a1:ba:4d:ac:
                    6f:31:64:f7:40:d6:64:70:f2:b6:66:df:59:8c:bf:
                    b4:10:e5:06:ed:56:a7:e4:8c:0d:3e:be:be:d0:5f:
                    59:f5:75:33:e7:67:80:1f:c4:78:ca:dd:cf:87:00:
                    73:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:11:04:FE:A8:A7:A5:DF:45:D2:7F:57:3F:78:C0:0A:F1:05:38:68
            X509v3 Authority Key Identifier:
                keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:dc:58:19:40:b4:81:52:c8:7e:c6:f1:45:ba:68:bc:76:8d:
         b7:6d:05:a5:2e:a5:2a:32:ac:28:dd:ff:80:03:b3:78:1d:22:
         8d:24:10:ae:0f:f5:e7:73:9b:f2:bd:62:ca:32:be:be:23:dc:
         80:64:3e:03:cb:43:df:e7:ab:0a:e8:68:5a:02:18:7f:82:ae:
         56:8d:19:5f:8e:1b:ca:a7:3d:c4:66:57:f6:45:8e:b8:a3:25:
         4e:ed:c1:4b:ce:1f:af:1e:be:b6:eb:85:ef:b3:b5:df:7a:d0:
         e8:d8:f9:28:cc:b4:a5:ab:b5:94:02:fc:f9:bc:a5:54:42:22:
         27:ed:bd:dc:99:a8:94:63:cf:65:96:26:8c:ac:8c:60:b5:19:
         8e:78:34:1e:8e:73:6b:46:e4:3b:ae:8a:03:05:d2:8a:67:74:
         78:07:9d:cb:2f:d8:eb:a3:1e:58:b5:32:0e:af:21:47:73:9a:
         c1:4e:9f:f1:d4:f4:47:00:74:04:95:7b:39:74:22:6c:46:e7:
         17:8e:cc:20:2f:27:a0:ba:4f:6f:3d:75:0e:95:d8:d9:fc:70:
         51:4f:bd:3d:a8:c4:36:53:20:c6:de:98:28:6b:fd:92:43:e5:
         b6:f1:24:91:67:08:36:f0:fe:81:ee:a8:15:c1:ce:ce:a5:d3:
         5c:86:6c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:07:07 2025 by rpki-client