Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
File:                     11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft (raw, json)
Hash identifier:          WDfSj7o4KoKtZRNyJchqjXAZ3Wr1jm2ptNvOPtpx2wk=
Subject key identifier:   79:01:77:A9:9E:69:3E:89:C9:0B:2A:CE:E3:D4:B2:13:8E:C5:05:F0
Authority key identifier: D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
Certificate issuer:       /CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Certificate serial:       019923A0DAC49E9790127014E9B57155E166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 10:02:48 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:48 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:48 +0000
Files and hashes:         1: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl (hash: dqX2/Y02gILZBSpmGzPW1nq/zYo1lNcS4Mk5jy+tF7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:da:c4:9e:97:90:12:70:14:e9:b5:71:55:e1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
        Validity
            Not Before: Sep  7 10:02:48 2025 GMT
            Not After : Sep  8 10:02:48 2025 GMT
        Subject: CN=790177a99e693e89c90b2acee3d4b2138ec505f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:17:ec:ca:69:44:9f:1c:1e:3d:62:3a:a9:
                    97:f9:f7:b6:2d:5e:69:9b:4b:63:b8:f1:66:9e:74:
                    e4:05:f6:92:9c:11:79:f1:47:5a:a8:11:af:ce:a2:
                    c9:e7:a0:bf:72:2a:0e:e8:af:82:d8:0e:b4:c9:20:
                    47:13:1a:ac:64:1d:a4:08:72:3c:85:06:4c:38:7e:
                    fe:fd:b3:0d:fe:cc:a6:be:8b:eb:4d:3d:ca:e9:60:
                    a9:64:4d:eb:2f:02:85:72:62:fa:3f:1f:0e:66:8a:
                    2e:8e:f0:7a:6c:58:b4:30:d2:4d:bd:6c:49:5b:ca:
                    97:d8:89:f3:6d:b4:c2:62:d9:cc:7e:68:23:30:69:
                    40:3b:7e:9a:e5:75:79:ff:19:19:18:7c:93:42:ab:
                    3d:19:dc:57:56:a2:12:6b:51:40:94:50:3c:ae:91:
                    47:1e:22:de:b9:49:77:01:33:e8:e2:ed:14:97:04:
                    7d:27:06:c5:9f:c3:eb:aa:26:82:8e:ff:38:d4:13:
                    a6:13:4b:9a:dd:df:7c:18:7f:3f:cb:d5:31:5d:ee:
                    69:af:ac:fa:9d:40:21:ef:ec:a3:b9:3a:ca:09:76:
                    7f:ac:16:22:ff:b2:35:d2:b4:cd:f6:cf:63:bc:f3:
                    f5:cb:5b:4f:6b:be:c2:79:d0:0b:76:10:02:2e:c9:
                    6e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:01:77:A9:9E:69:3E:89:C9:0B:2A:CE:E3:D4:B2:13:8E:C5:05:F0
            X509v3 Authority Key Identifier:
                keyid:D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8f:22:79:48:23:0d:04:b3:78:e7:f2:cd:c6:a6:9b:44:48:
         ef:45:d0:13:4c:dd:ca:47:0c:b8:2f:db:82:76:77:76:5a:e9:
         32:0b:c9:b4:fe:5e:f5:ce:71:08:98:11:63:f7:3b:75:21:e3:
         61:3e:75:1c:ea:b7:ca:87:fc:59:a2:2b:2c:80:65:61:07:77:
         11:34:76:3b:9a:3e:30:7c:a8:35:76:9d:24:d8:41:d2:84:e6:
         29:cb:54:48:4b:ec:2d:25:92:96:ec:02:7e:f5:98:49:e1:b5:
         70:d0:e1:c3:9b:22:48:f4:39:51:5b:36:2d:50:b7:98:ab:19:
         77:e0:dd:d9:48:31:f6:23:15:b7:09:18:bd:98:58:0f:ee:c7:
         86:7d:50:e8:e9:f8:dc:fc:b8:1a:bb:96:78:fa:0d:b5:58:fc:
         ef:51:d3:60:f8:a1:b5:d9:7d:5c:59:13:2c:65:38:8d:98:d6:
         6f:e9:6b:09:2b:1d:45:78:98:0d:e9:be:ce:7d:bc:be:a6:5b:
         7c:da:f3:06:50:a0:7b:c9:12:33:16:d5:42:e2:7c:78:af:ae:
         21:54:fb:80:14:64:46:c0:af:ae:63:d4:e9:3a:ca:50:d1:b4:
         e5:8a:f9:84:f9:b3:29:b0:9e:1c:35:60:93:33:58:93:b4:b2:
         01:74:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:39 2025 by rpki-client