Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
File:                     6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json)
Hash identifier:          9LTHM2MTGBrhSqw1QmN7D7Vnrp2QKIi1UOntvQX+prw=
Subject key identifier:   61:73:D1:B3:C7:EB:DB:7B:B2:D9:D7:DA:A7:BE:92:51:31:0F:AF:BF
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Certificate issuer:       /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial:       0199277C4FE421EF3629E52BC176832E8CF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
Manifest number:          167B
Signing time:             Mon 08 Sep 2025 04:01:22 +0000
Manifest this update:     Mon 08 Sep 2025 04:01:22 +0000
Manifest next update:     Tue 09 Sep 2025 04:01:22 +0000
Files and hashes:         1: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (hash: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=)
                          2: 425pG85CvD-WqD7G4q_XQGIKAqg.roa (hash: A277nuuzcfZvxdezgnYr9eoNlhLje+Mf+PFtPMVmfws=)
                          3: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: M8XFJ68HJVNrUxnPuo9oFY0DITAeHfwF3p58yp3dv4c=)
                          4: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=)
                          5: 7918jeDcIeSJXbD16xxGwzri6_4.roa (hash: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=)
                          6: 7dXC-hkge0H4SOrjlCk1xFHWw8U.roa (hash: Fv3L9KsADEPnVWxrZ7KT3btIpKM9bZT63ylJbPal16k=)
                          7: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=)
                          8: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=)
                          9: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (hash: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=)
                          10: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (hash: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=)
                          11: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=)
                          12: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=)
                          13: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=)
                          14: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=)
                          15: zlkXUyhZ4IG5yixTeX8Zlu2XIc0.roa (hash: cWgGeGhxrJ9rs3dRl4+QpI+uA8NpZSK53ZDqjWD1dvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:27:7c:4f:e4:21:ef:36:29:e5:2b:c1:76:83:2e:8c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
        Validity
            Not Before: Sep  8 04:01:22 2025 GMT
            Not After : Sep  9 04:01:22 2025 GMT
        Subject: CN=6173d1b3c7ebdb7bb2d9d7daa7be9251310fafbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:e9:c6:03:6b:e2:88:02:98:4b:52:e0:7d:
                    af:bf:7e:f3:d8:09:48:00:30:2e:c7:da:75:aa:95:
                    a9:cb:cb:8c:77:13:03:30:ae:7e:20:b1:66:52:f6:
                    dd:07:17:54:ac:55:16:b4:73:cf:b0:bb:0a:63:e4:
                    5c:a6:a2:22:95:d7:88:b0:0f:c0:ee:17:ac:8d:e2:
                    6d:1d:14:66:38:29:ed:8f:c7:98:21:5c:48:5e:0d:
                    db:65:98:9d:2c:c6:56:4f:c8:fc:ab:2c:2e:85:3e:
                    6b:b4:6b:fa:00:3c:27:26:78:a8:10:69:f7:19:c6:
                    28:d5:83:8c:d5:4a:88:36:23:6c:1c:8e:a4:b3:2a:
                    5e:5b:db:da:e2:4d:1e:2e:3c:59:9a:ef:af:99:06:
                    30:1f:74:97:c9:32:39:a9:a7:fd:02:79:e9:a6:16:
                    df:7a:21:52:7d:db:32:47:01:c4:fd:94:07:62:44:
                    a0:36:ef:54:f6:fe:f9:8d:07:a0:36:23:2a:a3:05:
                    a8:2b:68:4e:ad:ec:d9:21:74:62:1d:d7:46:ca:6f:
                    22:29:ce:f0:65:69:22:15:8f:4f:fd:49:07:38:6c:
                    18:6c:1c:96:86:9c:a4:d2:a4:c1:1b:48:e7:9f:3d:
                    e7:3c:82:a9:1f:bf:ff:dd:6a:34:81:cb:ac:11:e3:
                    06:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:73:D1:B3:C7:EB:DB:7B:B2:D9:D7:DA:A7:BE:92:51:31:0F:AF:BF
            X509v3 Authority Key Identifier:
                keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:fc:42:c3:0b:98:ef:0e:cd:f3:5b:5b:56:91:49:e7:a1:70:
         5e:92:45:a9:56:fe:a1:c4:e7:4a:9b:86:e2:58:5a:b7:21:dc:
         77:43:1b:18:98:cf:c2:cc:16:bf:8d:26:7a:64:a5:0c:3c:1a:
         35:78:c7:2f:e8:38:9d:46:30:00:07:96:1f:d5:73:49:0e:ca:
         6b:a6:dd:08:ed:ca:c8:5e:54:f5:59:9c:9d:82:93:ae:1a:5a:
         2b:17:d3:8d:c7:1d:2d:cd:2a:bf:93:f7:1d:93:59:c4:b0:cc:
         96:64:79:dd:7c:e6:f4:74:81:fe:50:91:f2:56:ea:b1:8a:7a:
         2b:6f:34:9e:ee:24:16:07:6a:47:e9:73:8e:ec:7a:d7:32:67:
         97:bf:35:ae:7f:86:2d:c0:1c:4c:96:88:9a:d0:85:ce:6e:7d:
         1d:2f:ee:48:cf:19:c4:7b:0b:8b:ee:97:c2:d2:54:73:36:f1:
         ee:fa:a2:ff:2c:77:91:38:a7:15:41:2d:0e:20:79:bb:f2:3a:
         bb:44:f4:5f:7a:e2:f2:d2:d1:02:8f:d9:5c:9f:10:aa:06:de:
         4e:db:3d:a3:8c:d1:23:bb:00:ad:54:fd:98:2e:89:6d:1e:bb:
         73:97:fe:cc:ea:f7:26:1d:52:82:53:c0:dc:5f:be:70:cf:6a:
         1c:61:df:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:39:55 2025 by rpki-client