Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
File:                     msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json)
Hash identifier:          rsdAdphjJb8wo6wcQh+NNDa5dP4nSd834Zrvctosfic=
Subject key identifier:   9E:4F:ED:DD:91:CB:03:7C:86:B2:F4:26:A1:44:DC:10:A6:E4:88:36
Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
Certificate issuer:       /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Certificate serial:       019921B0F7F7B897492ECF41A38A708CB196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
Manifest number:          166D
Signing time:             Sun 07 Sep 2025 01:01:09 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:09 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:09 +0000
Files and hashes:         1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: gMtYHC3jzt/bOHR8kE2XMDBMFpHoQsi3IZssXLV7Jhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:f7:f7:b8:97:49:2e:cf:41:a3:8a:70:8c:b1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
        Validity
            Not Before: Sep  7 01:01:09 2025 GMT
            Not After : Sep  8 01:01:09 2025 GMT
        Subject: CN=9e4feddd91cb037c86b2f426a144dc10a6e48836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:68:ad:8b:e5:69:a6:00:4a:43:73:ac:c3:
                    51:fb:4e:60:67:a4:96:60:a5:2f:9b:19:c1:ab:29:
                    d2:78:74:9d:93:74:db:8c:d7:a6:24:a0:5a:66:cc:
                    d4:22:ee:be:db:77:5c:5b:1b:ad:bc:e9:e1:ba:27:
                    1f:d7:0e:a2:7d:5e:a2:a5:e6:53:b7:30:99:09:e2:
                    dd:a0:e8:9d:b6:75:23:ed:31:76:96:80:3f:18:60:
                    95:70:e6:6e:fe:81:3a:c0:f8:28:ef:0c:2e:ed:06:
                    df:16:4e:fa:11:f7:87:3c:df:5e:ab:16:4f:c8:9b:
                    f2:c1:5e:19:05:f7:ac:7c:72:33:03:c4:12:12:19:
                    a6:5c:22:bd:ed:72:a5:b6:e2:3d:44:3e:e2:1e:d7:
                    eb:a2:2c:39:ce:8e:15:7a:0b:0a:a9:07:12:ed:4e:
                    1e:c7:9b:07:b8:62:e9:8f:16:25:cd:fc:bc:19:d9:
                    ed:1e:f8:eb:d6:a5:bb:38:e7:25:4b:9e:9c:30:40:
                    96:d2:6e:98:37:31:25:25:2f:70:33:57:c9:36:c0:
                    70:46:7f:da:22:fe:4c:ef:9f:2b:c5:82:6e:97:e6:
                    ec:49:b4:f8:d1:6a:e7:08:e9:a8:ed:00:59:6b:cd:
                    ab:c9:93:d4:14:8e:5e:ea:20:fa:08:7e:20:a6:bf:
                    d2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4F:ED:DD:91:CB:03:7C:86:B2:F4:26:A1:44:DC:10:A6:E4:88:36
            X509v3 Authority Key Identifier:
                keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:eb:6e:8e:15:b7:16:30:98:d4:13:b9:18:59:52:93:87:a3:
         85:27:92:f6:ed:93:b5:fc:2c:3b:f6:7b:05:05:66:6a:33:09:
         ef:e9:b5:d8:51:c8:8f:9a:05:87:d4:82:dc:89:be:04:04:c3:
         6e:67:82:7d:d2:b0:40:97:59:2a:c7:dd:b6:2b:fe:eb:cf:e1:
         86:d4:7d:75:df:24:8e:9c:b1:53:92:ac:7a:40:35:ba:1e:53:
         15:5f:d9:92:2d:da:ab:12:40:73:d3:aa:0c:4a:cf:65:67:df:
         1f:34:4c:0e:11:84:cc:3c:8b:55:e5:74:d1:22:26:1d:a7:ba:
         04:5f:3d:63:94:d2:0b:ff:e1:4e:54:24:1d:8e:ba:3a:01:33:
         f2:80:f4:79:c0:bf:e9:87:6a:6f:e6:84:bd:04:e7:e3:15:f9:
         e5:60:c6:8d:a9:1a:53:d2:30:e9:1c:61:2c:90:dd:96:14:f0:
         7a:d3:c5:fb:e8:db:9d:e2:c9:a7:4c:91:10:de:e0:1d:c0:57:
         e4:6f:9f:25:d8:34:36:21:d8:1b:43:5d:d0:fe:07:aa:03:13:
         81:68:da:ba:31:a0:3f:79:dd:b2:44:8d:a0:10:6d:54:74:3c:
         ae:d1:16:b4:72:da:18:6e:b0:73:28:c4:52:03:8b:e4:25:0a:
         e8:2a:e4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:39 2025 by rpki-client