Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
File:                     87WowAlYJeE_Rr2zcLf9ypufilI.mft (raw, json)
Hash identifier:          Fsb3E12q9aIe7c8qiYFVyQUIM9lIdUUza6oWoUtzzFY=
Subject key identifier:   AD:1C:DD:C8:35:C4:73:79:34:E6:9A:8F:84:C7:D1:26:9A:1B:5A:3B
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Certificate issuer:       /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial:       0199161B4F348470F2548BE18C500AF9DECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
Manifest number:          01D6
Signing time:             Thu 04 Sep 2025 19:01:52 +0000
Manifest this update:     Thu 04 Sep 2025 19:01:52 +0000
Manifest next update:     Fri 05 Sep 2025 19:01:52 +0000
Files and hashes:         1: 87WowAlYJeE_Rr2zcLf9ypufilI.crl (hash: w1TrDJNY3JKJGsLFrsm0TztVFMUupS11Mz8RRhlK+ek=)
                          2: Dyuv8Z__vkGHwwVg87zPgkG7J-4.roa (hash: ilCGUeVqOl6irP7EZ7ynRXvcKUKAauHP7YFg6+r0+3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:1b:4f:34:84:70:f2:54:8b:e1:8c:50:0a:f9:de:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
        Validity
            Not Before: Sep  4 19:01:52 2025 GMT
            Not After : Sep  5 19:01:52 2025 GMT
        Subject: CN=ad1cddc835c4737934e69a8f84c7d1269a1b5a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:4e:17:3d:22:71:e5:29:78:be:b4:e5:99:
                    ab:3c:b1:e2:12:20:c4:79:e2:44:ec:ac:1d:bf:2f:
                    76:d8:31:e0:6e:54:20:9d:1c:b1:35:2e:c8:5d:e3:
                    6d:67:e0:14:e6:16:a3:91:35:c4:7f:7a:13:ef:f9:
                    1a:64:fc:37:6d:83:6c:52:8f:a0:09:2c:0c:4f:43:
                    92:ec:be:62:8f:0d:f5:8e:fa:b2:fe:ea:a2:c2:be:
                    7c:09:75:5a:08:07:61:48:ca:24:c6:0e:0d:a2:1b:
                    d8:5e:a3:3e:24:65:ba:30:ed:f5:b8:b8:a5:a3:c5:
                    21:80:e5:a4:b3:bc:ab:42:70:a4:f2:7b:81:62:65:
                    66:28:1b:9e:62:09:a2:e5:0a:f2:f9:92:39:d1:16:
                    3a:7e:be:e3:f0:a5:5d:48:5a:b4:6f:01:9b:79:fc:
                    ef:fb:c5:a5:8f:2d:2d:c9:bd:33:02:c9:16:d3:77:
                    c5:c4:cd:bf:a7:99:8f:6b:4a:02:d5:ce:1e:06:82:
                    54:cb:c4:44:d7:d0:98:6e:c0:e6:69:1b:90:20:9c:
                    e1:f5:d2:0b:01:8c:ca:88:7f:36:99:2c:8e:39:db:
                    27:9a:d2:44:d0:7e:d5:0d:36:70:b1:ac:0a:b3:31:
                    5e:12:cf:49:78:94:e7:1f:06:45:09:bd:ce:66:f3:
                    f0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1C:DD:C8:35:C4:73:79:34:E6:9A:8F:84:C7:D1:26:9A:1B:5A:3B
            X509v3 Authority Key Identifier:
                keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:04:12:5a:40:88:e6:72:09:79:b6:5c:29:2b:14:59:0d:f5:
         87:93:5f:6d:d2:a3:8d:21:03:4a:ae:f9:03:f5:13:14:ef:d1:
         39:83:ee:6b:4e:72:e3:9f:54:ec:46:06:8f:ca:40:64:01:6d:
         48:7a:17:7d:f9:fc:12:f3:73:aa:a3:97:6f:36:f7:74:ed:70:
         72:56:8d:46:42:80:b2:94:28:57:5d:73:fa:73:3a:06:e2:11:
         21:68:3c:49:3f:07:53:10:69:b2:2f:62:66:13:5b:60:86:12:
         28:55:b9:71:99:e4:4b:07:6c:3a:e4:12:93:3c:cc:8e:b7:40:
         4c:2c:a8:1b:e6:bd:e6:e0:c9:2a:d1:28:1d:f8:e2:c3:e8:49:
         7b:bd:59:21:eb:55:e7:e8:e5:43:c0:3d:82:9b:8e:af:7a:3c:
         52:35:b7:bb:f5:25:c5:7a:2f:49:bd:ec:2e:1f:04:55:e6:b3:
         6e:3c:83:1e:1d:57:1e:c1:0a:06:60:01:b7:88:3a:0e:38:60:
         75:91:03:5e:c5:04:6c:e3:ef:50:46:b8:60:18:cf:1f:52:a9:
         50:61:5d:97:30:91:9d:99:dd:a1:9f:7f:b3:a3:b2:8e:44:a1:
         8b:ee:f8:13:6e:95:9f:2d:aa:fc:1a:3a:72:a2:75:ca:d2:be:
         db:40:b4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:09 2025 by rpki-client