Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
File:                     wDleyIIdj4GJQTOSvYdte9eVwWw.mft (raw, json)
Hash identifier:          YofTvM1uk+Iubhe56sCoNkm2By8wvzKqJ5ORbVnMkA4=
Subject key identifier:   A2:0E:3F:1B:4D:AC:E2:2E:09:D1:6F:BA:37:23:32:C5:49:64:57:41
Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
Certificate issuer:       /CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Certificate serial:       019939EFAB4BCBBF371672509FC6B3027D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
Manifest number:          167F
Signing time:             Thu 11 Sep 2025 18:00:31 +0000
Manifest this update:     Thu 11 Sep 2025 18:00:31 +0000
Manifest next update:     Fri 12 Sep 2025 18:00:31 +0000
Files and hashes:         1: P3YoBo67vazrugYfMD3lybaWtAo.roa (hash: /AdjcQW3/wvGSZ4+BEuR5TlveAfDafAH3hNdQ89CSF4=)
                          2: wDleyIIdj4GJQTOSvYdte9eVwWw.crl (hash: N8BgvmSSpokRWBKBTrVzC5z07DYYH5jDpL+e13Eqm34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 18:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:39:ef:ab:4b:cb:bf:37:16:72:50:9f:c6:b3:02:7d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c
        Validity
            Not Before: Sep 11 18:00:31 2025 GMT
            Not After : Sep 12 18:00:31 2025 GMT
        Subject: CN=a20e3f1b4dace22e09d16fba372332c549645741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:44:08:36:f2:c2:1e:03:32:57:68:0e:d8:
                    68:89:4f:0f:40:c8:bb:21:09:f0:39:6b:69:b3:c5:
                    b5:ad:17:f1:23:b3:4e:1b:c3:51:b1:0e:6e:cf:38:
                    7d:d9:60:aa:aa:65:4c:8f:97:1e:ef:ec:d8:4d:16:
                    4a:84:aa:3b:74:51:35:32:b0:41:ed:0a:8e:c4:3f:
                    80:04:5b:82:fb:35:51:20:ed:f3:51:de:c6:e7:96:
                    20:48:9c:5a:5f:cc:90:05:37:9e:fb:ef:65:b5:77:
                    92:e1:66:70:75:ce:84:bd:ca:6e:b9:98:85:4c:b6:
                    c4:ae:fe:d2:47:3f:09:71:e7:4f:ea:ef:22:69:82:
                    3f:d1:9e:e9:e5:0d:72:12:bf:88:ea:8b:af:41:43:
                    f5:c5:7c:6e:65:84:fd:7c:62:60:50:c1:05:1b:42:
                    48:50:1c:8e:dd:f7:ff:1e:4d:d0:4f:94:84:c9:d1:
                    7e:5f:f4:48:ec:70:af:19:ab:1c:4e:58:5c:ec:35:
                    95:f4:99:5a:2b:8a:d9:6c:d2:f7:ca:83:4f:f5:90:
                    f3:c6:33:c4:6e:64:d2:47:48:ac:7f:c8:a0:a1:d6:
                    12:60:ed:38:d4:be:4a:79:6f:6e:bf:54:d8:b5:01:
                    9b:66:1b:83:66:37:d1:1d:0d:72:b1:5d:d5:66:3d:
                    61:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0E:3F:1B:4D:AC:E2:2E:09:D1:6F:BA:37:23:32:C5:49:64:57:41
            X509v3 Authority Key Identifier:
                keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e7:24:6e:8c:82:1f:aa:ee:25:b2:8e:58:fd:d9:5a:39:96:
         78:1d:db:52:c8:4f:3a:24:11:b9:02:29:b7:22:85:f0:52:7a:
         e5:f5:39:63:23:1b:72:a4:39:13:8e:c7:75:d4:7c:1c:69:08:
         15:6e:2a:17:7c:a3:41:62:04:69:43:9b:1f:79:bc:62:fb:8d:
         fd:f7:a7:4e:79:71:4d:8c:cf:6f:6d:bb:f3:27:77:3b:db:0a:
         59:2f:18:70:3f:25:73:60:35:51:b8:0f:db:73:41:45:a3:de:
         c8:3b:12:e7:b1:7b:e4:94:83:5a:31:81:0c:40:02:ac:a9:a1:
         a8:75:86:78:b0:66:87:21:14:f9:0b:d9:3e:7e:36:8a:b5:9f:
         ae:07:3f:03:b8:f1:de:8d:b0:a7:be:11:c4:cb:0e:e5:f2:3c:
         60:66:e6:98:a8:de:7c:0f:52:1e:52:df:c1:dd:40:0b:ee:ad:
         f8:7d:4e:69:12:63:f0:bd:c4:83:b2:42:c7:2a:f9:37:01:35:
         d1:36:ad:da:59:de:ab:f2:84:f1:22:8b:d0:d4:ea:33:94:fa:
         6f:e2:a9:cf:3b:60:e0:69:4e:4a:90:fa:7e:d6:c1:7a:21:89:
         da:43:21:58:30:3b:52:86:62:88:65:fd:27:7e:1e:1c:3b:f2:
         36:89:e2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 03:33:01 2025 by rpki-client