Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
File:                     1z6DFGpDhp9ldFHnbQowXxWnruk.mft (raw, json)
Hash identifier:          CkTP6h8dOe9L/nCOzz+TMjYlWxyjJfYvvGg651cywHs=
Subject key identifier:   8F:52:1D:46:18:21:F0:09:0B:62:A6:50:41:85:90:6F:10:C4:F1:EB
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Certificate issuer:       /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial:       0199379489AF4EFADAA701975187BAC74587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
Manifest number:          167E
Signing time:             Thu 11 Sep 2025 07:01:45 +0000
Manifest this update:     Thu 11 Sep 2025 07:01:45 +0000
Manifest next update:     Fri 12 Sep 2025 07:01:45 +0000
Files and hashes:         1: 1z6DFGpDhp9ldFHnbQowXxWnruk.crl (hash: s8wD7bpngy4AgV3CKDz3JSsVgrzRbxFpEgcCCoBOslc=)
                          2: GjRTUlniyanmn4Afv90LXdtB2CM.roa (hash: H05QDr/ZorYcXmze9XYmHh1Yk5vgO9UM/lypXH5003s=)
                          3: fpuO1KgXHawIqKkMRIDlnRPTQ7U.roa (hash: ue6Kig6bA97Pget/ASgsuFmh3TVF1nlHcCgCcC+PS30=)
                          4: iDcx17jqSt5evXMH3ZR7hspxCwo.roa (hash: HtASD4funhOSBzbbYi7dYm93HfUK3vhLncjZn0KAr1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:94:89:af:4e:fa:da:a7:01:97:51:87:ba:c7:45:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
        Validity
            Not Before: Sep 11 07:01:45 2025 GMT
            Not After : Sep 12 07:01:45 2025 GMT
        Subject: CN=8f521d461821f0090b62a6504185906f10c4f1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:b8:63:69:77:38:3e:b7:54:ea:3a:e7:89:
                    8c:d7:14:8c:e5:d5:a9:90:5c:22:93:d5:4e:c1:56:
                    13:0e:4b:e5:a3:5e:0b:87:c2:4e:2c:cb:7e:eb:8a:
                    7d:89:5c:83:b3:7e:7c:d2:a0:33:98:94:56:c1:e8:
                    da:fd:9a:86:2a:a1:a4:42:44:96:79:cb:d9:f4:6a:
                    a9:6d:68:8e:c8:b4:22:5b:a7:dd:7a:70:0a:db:25:
                    30:09:a2:09:3f:64:12:60:d2:92:5f:91:37:09:5c:
                    65:d4:5e:c2:0c:51:16:b3:67:69:40:99:40:42:ec:
                    05:1e:aa:a1:22:2a:c9:98:8e:7f:6c:3b:09:e8:f7:
                    33:34:a8:89:24:31:9d:9f:37:00:ad:51:c2:0e:56:
                    21:39:83:0a:99:90:63:92:f1:9e:98:63:a7:87:d6:
                    69:4b:f8:64:d9:18:a8:d3:eb:db:8b:f1:7f:c2:9d:
                    c1:62:c9:40:c4:c8:f2:18:df:bf:e8:37:c5:ab:3d:
                    bc:1f:86:b5:b6:55:a8:a9:ea:50:d5:51:4d:2d:69:
                    8a:56:78:51:44:e0:53:85:43:91:b8:0e:07:67:2b:
                    7a:0f:1b:2d:17:eb:ea:68:85:da:9e:8b:28:51:b2:
                    9e:51:12:9f:2f:6f:18:a5:53:c3:d4:2a:0c:df:ee:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:52:1D:46:18:21:F0:09:0B:62:A6:50:41:85:90:6F:10:C4:F1:EB
            X509v3 Authority Key Identifier:
                keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:da:43:fa:bb:33:f0:03:7c:38:bb:60:4d:31:4e:23:f9:15:
         0c:f4:f1:5b:2e:11:79:e9:04:64:09:2c:be:be:97:fb:a0:21:
         b4:ef:3b:70:e6:9f:ee:11:25:b5:5c:29:4b:78:88:29:93:99:
         31:ee:31:4a:2f:3a:be:93:63:61:67:e1:f6:06:c9:ab:46:12:
         6b:db:fd:70:c3:8b:f3:58:d0:0d:75:a9:72:4e:74:ce:43:3e:
         f5:4b:98:01:ce:3d:55:23:1b:4a:16:50:8a:88:8d:c8:98:08:
         7b:6d:57:b7:a2:c1:56:be:44:bc:a4:58:39:24:8c:17:5d:37:
         24:c4:59:6e:bd:5f:68:fd:46:fd:0c:2f:2c:b7:43:8d:b8:59:
         5b:50:59:e3:4b:af:92:24:25:e7:2f:87:e5:7a:85:3e:9d:d8:
         4f:6b:2c:ac:b9:b8:d3:78:3d:b0:52:79:13:03:2a:13:b2:22:
         82:1f:c0:91:ba:a4:e1:3c:ba:a0:21:dd:cc:35:ae:16:cf:31:
         95:b8:5e:1d:0c:c8:44:c3:86:2b:06:e4:3c:bb:3b:64:19:74:
         d4:1f:53:5a:a5:f2:e3:78:2c:8c:ac:b7:3b:7f:5c:ea:98:cf:
         18:80:75:66:8a:df:b0:e6:86:f3:f9:f2:26:f1:2c:ff:c1:d7:
         eb:4a:6a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:50:34 2025 by rpki-client