Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.mft
File:                     azroDOy1b1swA4g6leJvRB10ny4.mft (raw, json)
Hash identifier:          476a9n0wnwzxMJvNfYSpOfVA09OFzy/KTao3ibyNqm4=
Subject key identifier:   B1:AB:D8:9F:29:E3:6A:64:E3:02:C0:49:33:5F:61:E8:C1:BD:5C:C2
Authority key identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
Certificate issuer:       /CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Certificate serial:       01993794E1466236893E695B5E82E686E4B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.mft
Manifest number:          167D
Signing time:             Thu 11 Sep 2025 07:02:07 +0000
Manifest this update:     Thu 11 Sep 2025 07:02:07 +0000
Manifest next update:     Fri 12 Sep 2025 07:02:07 +0000
Files and hashes:         1: 9trHyRl06XVH8JK4YWuU4XRiRO8.roa (hash: u0LmPm1lp9CiN9GFJa3floA5EH+7KGfe1PA3DxHIjQQ=)
                          2: EBhWHNZ4rCZNn1IWSdwLYfi5op8.roa (hash: Mm23NNUb8U2+h1x60lLk+eDLMp0mNZmTIcfZacPFNUs=)
                          3: azroDOy1b1swA4g6leJvRB10ny4.crl (hash: b1PqL1Cf4lOYuLfYcNfQzzBzqYwmUuWnL4MA+0QjTUk=)
                          4: mPk-UDvntYGJZDrrZisGVvHTcD8.roa (hash: Ld7FEkLyaOdSCxYsdZKOXLiKBEzljs4pb53YDEIGlZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:94:e1:46:62:36:89:3e:69:5b:5e:82:e6:86:e4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
        Validity
            Not Before: Sep 11 07:02:07 2025 GMT
            Not After : Sep 12 07:02:07 2025 GMT
        Subject: CN=b1abd89f29e36a64e302c049335f61e8c1bd5cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:35:b8:b1:49:e2:dc:cc:69:1d:44:bb:d9:ea:
                    f1:85:82:78:ce:cf:53:e0:50:59:69:18:58:30:10:
                    7b:c6:72:09:d7:5c:a3:b4:6d:be:fe:10:9f:47:34:
                    c2:1a:9f:3d:67:d5:5b:e8:1a:2e:6b:80:5b:20:8f:
                    8f:b7:81:19:9d:cf:3e:45:58:02:bf:13:b1:21:75:
                    68:17:1a:ea:75:b3:fc:3d:48:c3:a5:44:60:98:c1:
                    7a:72:d3:10:23:5a:cd:7d:e7:79:9c:28:82:6c:7e:
                    9a:93:04:d2:84:f4:3b:d1:09:10:de:f5:c8:bc:9d:
                    05:8a:c7:3f:c5:f2:94:71:1b:02:a1:e0:a8:ca:c2:
                    a9:cc:4b:2a:ba:dd:f3:35:4a:9f:96:b0:33:43:d8:
                    a0:68:67:f4:78:eb:1c:6f:0d:0c:af:df:ab:fe:25:
                    06:bf:6d:5a:3f:0c:54:f9:b2:36:6d:c6:42:47:90:
                    4e:6d:ee:a7:11:2d:db:45:3b:47:f1:fb:9a:a5:b5:
                    03:fb:c1:ba:b1:1f:2a:a9:77:f3:c3:29:4e:f8:d1:
                    47:59:d0:78:f6:49:e3:0e:ca:5a:e7:cf:74:fd:56:
                    1a:19:dd:ce:9d:ea:17:0f:75:ce:5c:ab:2c:8c:da:
                    96:73:20:d4:95:b2:ba:fe:37:60:8f:7c:cc:ea:4c:
                    98:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AB:D8:9F:29:E3:6A:64:E3:02:C0:49:33:5F:61:E8:C1:BD:5C:C2
            X509v3 Authority Key Identifier:
                keyid:6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:58:ae:ef:bd:49:ad:f4:c8:6b:0b:29:0d:3c:74:6e:11:19:
         65:47:0c:12:b3:98:a2:44:14:a2:b9:fd:d6:95:72:d5:53:aa:
         a0:d8:a5:c0:e4:04:80:88:d3:5d:85:f3:35:a9:01:7d:cd:6d:
         20:b6:e9:59:73:d6:45:e2:b3:d4:8d:88:99:ec:11:41:25:bd:
         df:f6:a2:80:8e:2f:77:fd:50:03:56:ff:a0:7a:75:3f:82:46:
         6c:1d:f4:1a:dd:fa:34:86:58:93:f8:a9:94:37:a8:b2:b4:9b:
         dc:3c:37:5d:15:6e:15:87:8e:b7:b5:67:ef:9b:88:63:d8:ee:
         f6:fe:7a:03:67:29:70:61:b0:8e:ae:97:02:37:5f:ab:1a:23:
         75:d2:f1:4e:95:2d:77:8b:f9:43:9f:67:9e:4c:1b:b7:5a:61:
         f6:54:61:fc:bc:b5:d5:03:50:25:1e:0b:85:a9:48:6a:f7:38:
         af:05:91:f5:67:90:5b:c7:c2:1b:e0:83:52:21:02:6c:3e:0e:
         de:e6:15:fb:0a:33:4f:8b:59:54:04:65:58:41:58:ef:f8:98:
         4b:c3:b8:81:f0:d1:cb:13:d8:bb:f5:a4:df:e4:d9:a1:b3:11:
         a3:bd:cf:27:6c:ea:2b:5e:99:3e:5a:b5:ea:56:7e:c7:0f:34:
         ac:27:44:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:47:03 2025 by rpki-client