Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
File:                     EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft (raw, json)
Hash identifier:          eFmtZYuSdvgiqC7tETrXQauMgIhuPgerEfcSn4Y7O5s=
Subject key identifier:   A9:C6:17:2E:48:DE:F2:39:2C:ED:42:E3:07:8D:D7:A2:C6:63:88:02
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Certificate issuer:       /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial:       0199315AAB7AD91A384CFE2BEA4988D544FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
Manifest number:          167A
Signing time:             Wed 10 Sep 2025 02:00:49 +0000
Manifest this update:     Wed 10 Sep 2025 02:00:49 +0000
Manifest next update:     Thu 11 Sep 2025 02:00:49 +0000
Files and hashes:         1: EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl (hash: r301K+3wb9dnrzOq23TW5hs4ZA3aaKrpsNa/0mg1cW0=)
                          2: KxHo3PH5XqAW_e-4RbCvU_gAQWc.roa (hash: dw0fO1xhc9eufYQ0WpteBCztc0/BFVhz2enclISvMos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:5a:ab:7a:d9:1a:38:4c:fe:2b:ea:49:88:d5:44:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
        Validity
            Not Before: Sep 10 02:00:49 2025 GMT
            Not After : Sep 11 02:00:49 2025 GMT
        Subject: CN=a9c6172e48def2392ced42e3078dd7a2c6638802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c6:00:8f:16:0a:10:fd:7b:a5:7d:9a:c4:d7:
                    06:81:fc:a5:c7:08:9f:75:1b:ba:aa:f3:c1:66:73:
                    04:93:67:65:79:11:4c:a7:98:54:da:e3:97:b7:35:
                    f9:b7:f7:44:64:89:82:30:8a:65:2e:4b:03:a7:3d:
                    04:d2:68:5c:eb:5f:59:30:00:11:17:40:00:08:fe:
                    2a:b1:18:23:20:b6:79:98:6f:69:29:41:dd:95:b5:
                    51:24:46:f9:7f:b6:cb:c5:62:d5:af:2d:53:e4:ad:
                    95:fa:e4:fd:d1:9d:9e:0e:a9:bf:b1:ee:d9:f3:37:
                    0b:53:f2:56:bb:e4:0d:0f:aa:2a:45:9b:f9:d0:04:
                    27:d6:75:71:6c:51:71:27:db:68:a5:ae:88:c5:a4:
                    d2:21:18:da:5c:9b:b8:eb:ca:54:6f:19:66:7e:56:
                    2b:4f:45:b4:46:ab:80:cd:2e:e5:b4:86:7a:12:77:
                    9e:87:8a:55:81:7d:23:f2:2e:c6:da:ff:a3:ef:a7:
                    a3:bb:2a:b8:93:f2:c9:a7:d2:8b:92:9b:31:0c:f1:
                    28:80:c4:4f:00:75:e0:ac:39:e7:52:f3:fc:34:a3:
                    6a:07:f1:e0:bd:f2:dc:af:9d:6f:51:cb:65:7d:2a:
                    17:8a:b5:40:0b:9e:1d:14:3a:e8:b9:13:c7:9a:5e:
                    0e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C6:17:2E:48:DE:F2:39:2C:ED:42:E3:07:8D:D7:A2:C6:63:88:02
            X509v3 Authority Key Identifier:
                keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:59:3d:a2:84:14:dc:d6:cd:c6:e9:73:5a:88:7a:ad:2d:2f:
         67:26:87:cc:f6:bb:b9:f5:d3:1d:9a:f1:cc:88:82:55:e7:92:
         e0:ab:11:9c:80:ca:38:9c:b2:ee:0b:6a:8d:2d:df:b8:72:51:
         89:37:be:9b:4f:a7:fd:76:47:e1:8f:2d:98:75:b5:07:88:d3:
         46:50:7a:fb:c4:92:37:94:b8:03:82:85:98:e8:fc:03:67:c7:
         ac:24:e7:d4:3f:91:3b:5a:4f:87:02:17:3d:a8:9f:c7:5c:43:
         58:65:54:b8:60:ad:35:ea:db:4c:82:2e:0b:a5:06:b4:fe:10:
         3e:a1:f0:eb:95:b2:55:4e:0f:4a:43:f1:98:14:87:2d:02:fe:
         91:8d:e4:b8:80:77:aa:3f:60:49:7d:3f:74:c6:61:0c:da:31:
         60:68:9e:9f:f9:00:fc:be:95:dd:a0:b4:16:68:79:85:f8:76:
         f2:6a:2b:d4:b6:49:61:bf:b1:de:e5:f5:73:eb:ef:8f:1b:89:
         e2:31:d1:20:a7:f4:73:67:39:56:72:fc:91:4a:e2:86:6a:35:
         be:a9:75:33:9b:43:e9:aa:1c:1e:25:d4:0d:37:87:86:d6:d6:
         cf:74:1a:4c:0f:fc:48:17:e1:72:9b:a5:ee:a2:da:b4:70:06:
         d1:8a:6a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 06:43:31 2025 by rpki-client