Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
File:                     hjT51JOsy2gJAPRHofLJ97KzWKw.mft (raw, json)
Hash identifier:          gCzIjEewuVjFM7cQlDgSnWCbJKw6XYWye5hShbysBpY=
Subject key identifier:   E9:E8:83:FC:ED:E6:FA:2A:FB:8A:BF:5E:42:7F:45:7E:FB:CC:B1:87
Authority key identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
Certificate issuer:       /CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Certificate serial:       0199180AACE201C56F166C8252B2F0B9A3A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
Manifest number:          166A
Signing time:             Fri 05 Sep 2025 04:02:56 +0000
Manifest this update:     Fri 05 Sep 2025 04:02:56 +0000
Manifest next update:     Sat 06 Sep 2025 04:02:56 +0000
Files and hashes:         1: hjT51JOsy2gJAPRHofLJ97KzWKw.crl (hash: c4YlYVvB1d63rmjO8ZAQm0qLhNKGmPadka7a2vkjsbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:0a:ac:e2:01:c5:6f:16:6c:82:52:b2:f0:b9:a3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
        Validity
            Not Before: Sep  5 04:02:56 2025 GMT
            Not After : Sep  6 04:02:56 2025 GMT
        Subject: CN=e9e883fcede6fa2afb8abf5e427f457efbccb187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:c9:51:f4:82:c5:37:6d:e7:8f:ea:22:35:
                    43:c8:4a:f0:69:dd:16:41:fa:74:10:41:4e:e3:e0:
                    35:93:95:6b:40:f6:bb:34:0e:f3:7e:48:06:90:3d:
                    4b:2d:0c:44:ca:cb:80:c6:80:1e:90:0b:cc:76:77:
                    da:0b:2f:ec:49:b7:95:6e:cc:ae:2c:48:c8:8f:c9:
                    e2:c5:9b:fe:c1:87:74:5d:22:98:1e:ab:5a:5d:90:
                    bb:99:c2:71:76:3c:fd:fa:9e:32:4e:12:c6:9a:6b:
                    c3:2c:2a:3e:b1:ec:ed:1b:fb:53:ee:eb:38:be:2e:
                    77:90:d7:26:ab:b7:ab:17:65:35:eb:8c:a5:fd:15:
                    34:c3:2d:6a:8d:a0:41:2a:17:12:7a:fd:16:6b:6d:
                    bf:78:c8:55:98:19:6a:f6:3f:b0:73:b6:22:b7:11:
                    fe:81:9c:e0:6d:1e:ad:26:b3:a5:32:65:72:92:f6:
                    80:84:52:cb:c3:69:dd:f4:c8:54:48:cc:91:18:4c:
                    0b:c7:5d:8f:93:26:e4:c0:87:1f:fb:b5:14:21:f4:
                    e6:61:13:b1:46:b4:3c:cf:fb:86:cd:97:b1:af:cb:
                    dd:24:1c:b2:1e:63:c1:05:de:4b:10:ee:1a:32:3f:
                    c8:82:1a:2e:3a:4e:99:25:4f:7d:01:55:bc:c9:a6:
                    5f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E8:83:FC:ED:E6:FA:2A:FB:8A:BF:5E:42:7F:45:7E:FB:CC:B1:87
            X509v3 Authority Key Identifier:
                keyid:86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9b:a3:50:ad:3b:9b:56:86:5d:08:80:32:4e:a5:55:03:bc:
         ce:99:79:44:78:31:d4:12:8d:87:2b:47:dc:87:b1:78:ed:55:
         a8:6f:44:7f:0e:73:10:09:e1:88:84:95:4d:63:7e:fc:2e:d7:
         d7:b1:17:55:5b:8a:24:92:98:8b:f3:47:ae:f0:a7:ce:c8:6e:
         82:29:bc:42:d0:2e:f5:d0:90:91:1e:5e:52:6b:a1:65:a1:d0:
         b5:65:3e:7d:b5:0e:ac:42:5f:19:28:e7:f6:8b:49:d9:72:1b:
         f3:dd:ed:17:0d:3f:2d:cf:eb:3b:c6:5a:ab:9e:51:eb:33:a6:
         bd:6e:5d:3b:b2:f7:c0:a3:0c:7d:40:a8:20:5f:93:88:ec:24:
         05:1b:2f:47:55:4d:8a:67:b0:63:18:cb:ff:6d:89:42:a9:cd:
         25:a0:02:89:52:b2:0f:2e:fb:5c:4a:72:01:c9:c4:00:1f:d3:
         f8:b3:18:ab:b4:43:11:b1:63:45:d4:9c:24:a1:0f:4c:54:ab:
         03:53:5f:d2:1a:d9:03:5c:3a:ea:03:36:54:92:73:af:88:fa:
         c8:bd:95:6d:37:fc:e2:f8:8a:fa:b6:19:d0:bd:94:4b:ff:fd:
         23:27:f9:32:2e:39:cf:18:68:47:32:fd:3a:27:21:cd:53:49:
         c6:ae:7f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:35:48 2025 by rpki-client