Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
File:                     OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json)
Hash identifier:          2iWOcdg7V/L+NgTq/5dlxjabB5UMDUT71krVR9SvvaU=
Subject key identifier:   33:1C:94:25:97:FE:DA:7B:04:7D:45:70:D0:E4:BC:E9:05:A0:AD:13
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Certificate issuer:       /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial:       01993424C52A43E21D65CDD2F2DED6177C13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
Manifest number:          167C
Signing time:             Wed 10 Sep 2025 15:00:48 +0000
Manifest this update:     Wed 10 Sep 2025 15:00:48 +0000
Manifest next update:     Thu 11 Sep 2025 15:00:48 +0000
Files and hashes:         1: 9S8GYL_yFgy6SNOCWbKCBCKwxZQ.roa (hash: lKTcm+yAWil2FIyk6dqKrToacWvPZRMmQqI4XBQAqo0=)
                          2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: PBga3lRN7dnxUXWFat/usEldNhzvF+xwZdDHUbnUCcg=)
                          3: eTebT2XGsz3TR6P2Y8Fzv_Rs33U.roa (hash: 8CvMQ0zbnR8EYLyVhO1PKSoAxhchZeehbyPRq5i/WLw=)
                          4: vGJfHVLZfMnAGA9tz-k5fjxGNZg.roa (hash: Y+O1z7Za7CP/+yHIIzznuHMKNtcJb361AC63q0+gtog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:24:c5:2a:43:e2:1d:65:cd:d2:f2:de:d6:17:7c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
        Validity
            Not Before: Sep 10 15:00:48 2025 GMT
            Not After : Sep 11 15:00:48 2025 GMT
        Subject: CN=331c942597feda7b047d4570d0e4bce905a0ad13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2f:a0:d8:26:74:11:a6:dc:04:81:50:09:ff:
                    d9:77:5c:08:67:dd:20:83:9d:17:53:03:43:84:5b:
                    1f:83:8e:47:e4:d7:27:54:5c:1d:d2:8d:d2:e0:5b:
                    7a:1c:0b:37:7d:f1:1a:8c:37:5a:46:f1:12:57:db:
                    f6:17:3c:ab:12:60:19:0a:b7:d4:2a:23:dd:4d:22:
                    2f:42:ff:8a:e8:c2:3d:70:16:5b:88:c0:76:c5:cf:
                    a4:e1:da:08:32:ce:31:ff:1d:70:42:3c:f2:a1:51:
                    8b:4d:6a:ac:dd:5d:e7:9e:7e:dd:8d:7e:72:fa:2d:
                    79:f4:26:1e:31:18:24:05:e5:4d:55:c8:66:de:08:
                    35:63:24:5f:0a:e6:39:e8:cb:bc:9a:fc:73:c9:01:
                    c5:3b:df:95:49:34:56:40:86:26:57:97:15:8a:d2:
                    4a:47:0e:1c:4b:d8:7a:ec:e2:e3:4e:85:d7:b9:3b:
                    6d:95:d3:74:aa:2b:de:dc:15:47:94:c3:f8:fb:48:
                    c9:b9:98:76:d7:df:e1:0e:55:68:d0:38:67:e8:85:
                    b8:d5:39:a3:18:64:3c:24:35:23:30:ee:9a:4b:42:
                    50:96:d8:80:0e:e6:e2:6d:94:0b:22:63:7b:fb:75:
                    9b:8a:e4:57:14:96:b9:ff:53:79:ba:07:61:b6:18:
                    18:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1C:94:25:97:FE:DA:7B:04:7D:45:70:D0:E4:BC:E9:05:A0:AD:13
            X509v3 Authority Key Identifier:
                keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:17:e3:ea:39:df:6a:d4:e5:ed:1f:2b:fe:b7:1c:ca:f0:77:
         66:de:3b:fa:cd:c4:c4:b3:76:ee:96:d2:58:25:2e:32:58:2c:
         4c:cc:41:de:71:d3:be:b2:36:e0:51:cc:02:5a:f4:60:e3:e4:
         67:82:21:bb:70:65:a0:b1:20:e3:01:d3:47:84:0c:78:e4:aa:
         3a:27:d5:7c:8f:f1:85:b9:57:13:8c:0e:82:5f:af:7a:4a:72:
         57:18:fc:6b:3b:73:ce:f0:11:ee:1d:55:c1:8d:5e:c3:c7:9f:
         86:01:69:73:15:eb:79:a1:47:74:0a:e3:df:0a:1b:a6:51:bb:
         8a:de:b9:33:d2:f7:94:04:d3:05:90:49:c7:f4:1e:bd:3a:1e:
         38:e0:8d:90:8b:cf:e2:51:4f:f8:19:08:eb:d2:ca:60:00:c5:
         4f:45:43:9a:c8:01:a5:c1:c1:de:af:93:c5:4d:de:52:58:bd:
         c5:57:6b:f0:b9:66:9f:5b:2e:0a:4a:b9:2e:e0:ea:fc:30:69:
         66:a2:44:f8:c7:61:df:28:3d:98:5e:92:32:d0:9a:9d:b3:87:
         97:4b:50:d9:8b:58:ba:b0:52:06:79:ca:4d:f1:d0:27:2e:c4:
         a7:63:b2:05:dc:34:fb:8f:a7:df:fd:71:19:18:33:4e:07:c0:
         6c:9b:b7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:09:59 2025 by rpki-client