Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
File:                     yXKq7Icz1F96AANRAYC0ri1Lvo4.mft (raw, json)
Hash identifier:          ZwnFKWQ+ORdBBxI933UvLBltfa/uSE6RMU8azsZatVs=
Subject key identifier:   9F:71:F0:0F:D3:BA:57:62:13:DA:47:3F:45:09:3B:6D:D3:38:81:A9
Authority key identifier: C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
Certificate issuer:       /CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Certificate serial:       0199183FE2FE4612FD2CE22465FE581B5E04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
Manifest number:          166C
Signing time:             Fri 05 Sep 2025 05:01:04 +0000
Manifest this update:     Fri 05 Sep 2025 05:01:04 +0000
Manifest next update:     Sat 06 Sep 2025 05:01:04 +0000
Files and hashes:         1: iEYRoHL_x--Q-PC_QmRkLatna0w.roa (hash: 5s1E+tOqSuT9Il26pYgrASE0LBQS+wYadwRdpb6ASa8=)
                          2: yXKq7Icz1F96AANRAYC0ri1Lvo4.crl (hash: ZUpwZUM+8warOUEHxoA3yQ5uzp8E0CCF2v4Xbqi1Ipw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:3f:e2:fe:46:12:fd:2c:e2:24:65:fe:58:1b:5e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
        Validity
            Not Before: Sep  5 05:01:04 2025 GMT
            Not After : Sep  6 05:01:04 2025 GMT
        Subject: CN=9f71f00fd3ba576213da473f45093b6dd33881a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:62:71:49:9e:b4:36:b5:30:b1:1c:00:37:65:
                    f0:26:0d:81:e1:de:7c:6a:99:45:a6:22:9b:77:04:
                    f5:16:cc:11:7d:8b:d9:ad:28:e5:e2:79:74:48:0a:
                    0a:5b:fd:2b:2a:5b:f6:bb:20:70:d0:2f:3a:10:06:
                    ce:7d:f4:f1:f8:10:d5:f8:25:25:56:56:97:02:0b:
                    47:f6:bd:50:dc:80:e8:23:28:14:47:8f:b6:27:4d:
                    b8:5a:34:21:d9:df:47:95:cd:c2:ff:fd:39:6e:94:
                    7f:b3:b0:5a:2e:2f:51:72:49:9c:62:99:39:61:8f:
                    e6:d8:b1:a5:7d:e3:68:73:34:7a:16:b7:7a:9d:f5:
                    3f:0c:c2:47:83:a5:07:30:b8:01:2a:6c:1b:8e:48:
                    4e:19:61:e5:50:fc:9c:97:d1:51:97:19:22:07:70:
                    07:89:f2:4b:bd:c4:40:a8:2d:cd:35:46:46:37:7e:
                    3a:31:f8:62:2d:e5:62:5b:3d:9e:4d:31:ff:1f:a7:
                    f4:d0:9c:a0:42:bd:d1:73:1d:66:d8:c9:e1:a7:39:
                    82:94:7c:92:6c:34:db:2b:03:cd:21:09:1a:5b:b5:
                    69:9a:82:73:05:08:92:c8:c3:9c:76:ca:ab:fe:8b:
                    96:cf:2b:21:90:f3:9d:30:ef:9f:6e:d9:10:f5:14:
                    8a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:71:F0:0F:D3:BA:57:62:13:DA:47:3F:45:09:3B:6D:D3:38:81:A9
            X509v3 Authority Key Identifier:
                keyid:C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:38:95:c3:f4:a0:7b:a0:7c:5a:3b:af:f2:f8:a4:b0:7b:c9:
         a7:4e:48:2c:76:2d:75:94:d5:f1:cc:1c:c1:ee:70:c8:9f:d3:
         01:04:fe:40:55:29:4a:26:8a:08:ba:77:fb:ac:08:ec:98:32:
         1f:5d:58:47:8c:3b:46:46:da:49:6d:80:7f:09:d9:50:1a:da:
         32:33:d1:64:37:f2:0c:97:5a:9c:f4:e3:ec:b9:2e:68:54:1f:
         c5:fe:3d:61:76:9b:f0:0e:3e:de:a5:72:01:d1:55:8f:f8:30:
         86:c8:7e:b7:96:13:95:47:f9:f5:37:90:1d:ea:99:69:81:cf:
         8a:f6:30:d6:35:df:9b:dd:f7:5a:cc:e8:97:9e:8f:45:75:b3:
         7a:03:09:37:e4:ac:80:17:53:1a:cf:c1:ff:9c:19:d3:a6:c7:
         11:58:97:d0:fe:76:33:e5:88:68:23:80:06:d0:ff:5f:7c:a8:
         59:f9:38:6b:91:03:67:bd:b5:8f:0d:3f:dc:2d:ea:38:29:84:
         c0:a8:f2:11:bb:18:27:d1:3b:d6:fc:d8:a8:c9:19:0e:b3:7a:
         9c:0c:b6:53:e4:8b:31:fa:72:bf:2d:e4:b7:1f:35:dc:5e:c9:
         d8:ef:2e:bd:97:34:18:69:52:cc:1e:c9:66:39:c3:18:99:00:
         75:88:2e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:08 2025 by rpki-client