Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File:                     rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier:          UThn4RvqmSqLDzCJJGA6HEDqUtv4SOo5qGMk7WwiUnY=
Subject key identifier:   7A:18:6E:6F:56:1E:7D:E0:EF:4D:CD:AD:3D:B8:ED:88:28:E2:45:D9
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer:       /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial:       019936F0753ABD13A055F37E05CA5B77C9D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number:          167E
Signing time:             Thu 11 Sep 2025 04:02:32 +0000
Manifest this update:     Thu 11 Sep 2025 04:02:32 +0000
Manifest next update:     Fri 12 Sep 2025 04:02:32 +0000
Files and hashes:         1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: M3cbzhG8XDbkK8tyLvrVc4RbVThs4yAk7rXIL/1HzTQ=)
                          2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 04:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:36:f0:75:3a:bd:13:a0:55:f3:7e:05:ca:5b:77:c9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
        Validity
            Not Before: Sep 11 04:02:32 2025 GMT
            Not After : Sep 12 04:02:32 2025 GMT
        Subject: CN=7a186e6f561e7de0ef4dcdad3db8ed8828e245d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:07:32:29:20:cb:f4:55:66:2f:2d:f5:e5:19:
                    d4:7a:af:47:69:ff:75:10:b4:db:b6:58:2e:d8:76:
                    1a:3c:a0:68:32:05:3a:fa:a0:46:ea:c8:a9:11:6a:
                    25:44:b9:ed:79:cd:83:04:7a:9e:da:68:78:4b:53:
                    8b:5e:b6:9f:15:ac:bc:d6:ec:9b:bc:a2:a5:d8:df:
                    5c:dc:d5:57:a7:93:25:13:43:89:0f:0c:25:59:39:
                    21:fb:4a:f3:56:d8:eb:e3:27:fc:50:57:4e:9b:87:
                    00:62:cf:b3:90:8a:12:f0:d8:8e:b9:b0:07:c0:85:
                    6a:de:17:05:69:77:97:2d:0a:f9:fc:47:04:ce:b8:
                    75:06:7a:87:ca:1b:b0:e9:4c:fb:ee:87:45:e3:68:
                    55:88:43:7a:9f:e5:9c:0d:d2:8f:f9:81:d7:bc:6a:
                    e3:49:7e:dc:c5:87:64:5b:7f:41:24:75:fa:91:6f:
                    1c:1e:1a:e7:30:af:13:b2:d3:93:b7:cf:d7:fa:97:
                    cd:a8:61:c6:e9:0f:3e:76:7d:dc:33:ed:1d:55:a3:
                    0b:48:ac:84:95:3f:bb:00:43:37:5f:c3:7f:8e:bd:
                    15:92:2d:22:05:67:ea:ec:36:a6:7e:54:fd:2c:1f:
                    8d:5b:34:9b:c2:a7:11:0f:66:a8:54:69:67:43:7f:
                    16:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:18:6E:6F:56:1E:7D:E0:EF:4D:CD:AD:3D:B8:ED:88:28:E2:45:D9
            X509v3 Authority Key Identifier:
                keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:1a:f6:6a:a5:2d:c9:6d:98:f7:a7:5d:cd:2b:1a:1e:19:7e:
         b5:4b:2c:91:19:5c:d0:99:82:d4:f2:a0:61:2a:bd:b3:1b:82:
         7f:cf:63:18:f9:cf:88:c5:22:5f:7a:5a:69:68:ea:aa:4e:a3:
         d4:a7:c3:1a:35:38:c0:71:a6:7d:77:15:61:b1:54:18:4b:7d:
         c4:21:5b:e7:93:c4:e0:c1:70:99:f7:02:e8:b8:5b:98:ae:7a:
         5d:e2:6f:89:2f:24:55:5e:cc:9e:31:d7:87:63:d8:80:9c:08:
         1e:a9:ee:f6:10:8f:6b:93:52:b1:fa:75:47:e5:03:8e:27:ba:
         25:2d:13:10:81:03:1c:bd:c4:31:25:24:c6:64:6f:0c:c3:32:
         61:51:c7:c0:e7:71:cb:3a:66:4d:98:58:82:e2:be:ad:d9:bc:
         66:4c:3a:e4:27:9e:5e:55:57:4f:01:dc:5d:d8:62:c7:ea:96:
         f2:ce:ba:09:6e:a8:d7:65:ab:46:11:56:2c:b3:8c:ba:3d:8e:
         2a:8a:4c:a0:df:d5:eb:7c:de:df:57:61:a7:9c:17:47:f3:65:
         34:f3:c4:f5:bf:8d:a8:3a:98:56:aa:56:47:29:71:47:1d:10:
         5f:0c:f3:c7:19:0f:b8:71:21:7d:ad:21:0a:2f:a9:0c:19:e4:
         c7:d1:e9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:59:13 2025 by rpki-client