Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
File:                     _J8k6-8Ri5Fl5S9hypk77kMGTsI.mft (raw, json)
Hash identifier:          hnYbB4+eATxTgfvxI9X2a0W2ZUAIrYOVAQIpCG+O6PA=
Subject key identifier:   43:51:15:70:45:61:9E:AA:34:07:55:9D:48:AF:95:E2:87:1B:4F:C2
Authority key identifier: FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
Certificate issuer:       /CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Certificate serial:       0199356E4C607FD3F487257DD4A5B42711EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
Manifest number:          160E
Signing time:             Wed 10 Sep 2025 21:00:44 +0000
Manifest this update:     Wed 10 Sep 2025 21:00:44 +0000
Manifest next update:     Thu 11 Sep 2025 21:00:44 +0000
Files and hashes:         1: 0Z7zdgD4hEOFjj_4hKMVcy7j-3w.roa (hash: derKa6RxFEVM7g9Xe9HEgRdoNKySPR/cieLuP8cX31E=)
                          2: _J8k6-8Ri5Fl5S9hypk77kMGTsI.crl (hash: 6QbpaNGYHiUee7+wcc9i+5IROqircFpZJKoGkl3uHtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:6e:4c:60:7f:d3:f4:87:25:7d:d4:a5:b4:27:11:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
        Validity
            Not Before: Sep 10 21:00:44 2025 GMT
            Not After : Sep 11 21:00:44 2025 GMT
        Subject: CN=4351157045619eaa3407559d48af95e2871b4fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:6a:69:c3:d1:a0:17:c3:88:0e:a7:a5:2f:
                    23:52:75:fd:34:ea:f6:dc:8c:f1:d8:08:e8:0e:d6:
                    6e:58:57:3b:4b:47:c6:f8:df:c4:9a:e0:0e:c1:55:
                    db:b8:be:2c:f9:a0:cf:72:4a:1a:ce:79:c1:5e:ba:
                    2e:8d:85:3a:43:a6:71:9b:b6:ba:1b:1b:36:94:7f:
                    68:24:36:d7:84:f3:b6:7f:a7:97:25:dc:9f:fe:ab:
                    6f:b6:11:12:0d:a2:e6:63:86:ec:77:b1:23:90:71:
                    db:8a:85:81:58:dc:d6:74:9e:20:22:c4:e7:43:30:
                    01:9a:7b:88:be:43:6f:c4:d4:c5:c1:6c:09:a1:50:
                    27:a3:ca:43:4b:e0:4c:1f:de:7e:e3:43:de:56:72:
                    72:6c:cd:4c:cb:07:47:13:f5:1a:ba:df:ff:70:5d:
                    f7:bf:2a:2c:ab:d3:28:5c:30:df:e3:fa:f0:55:b5:
                    51:c4:8e:f4:60:25:7a:c6:34:61:38:2a:e5:95:36:
                    0c:36:ad:8a:3e:12:dc:47:06:b3:42:ad:da:c3:5a:
                    cf:68:92:49:70:f0:92:dd:62:59:8c:62:83:91:62:
                    d3:b7:7e:96:65:f4:12:f2:a8:2d:c1:3f:08:b1:40:
                    45:a3:86:cf:52:31:cc:cb:ae:32:b6:7b:4d:bf:87:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:51:15:70:45:61:9E:AA:34:07:55:9D:48:AF:95:E2:87:1B:4F:C2
            X509v3 Authority Key Identifier:
                keyid:FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7c:af:9d:d2:79:7b:c1:f8:e5:83:5f:d9:f7:2f:43:af:04:
         5a:4c:dc:67:c3:ab:e4:3f:f5:49:90:25:47:21:17:26:f9:4e:
         18:d3:4c:4c:0a:93:3d:da:ee:96:21:30:93:b0:fb:14:a7:21:
         83:48:4c:0e:ea:df:7e:01:ef:f9:48:41:c2:37:c2:00:8a:9c:
         c6:5b:80:42:6d:fd:12:39:bf:25:93:08:9b:7d:6d:d5:d5:8a:
         e9:10:c3:66:c5:7b:25:d4:e0:97:49:bb:1e:2c:c0:1e:1b:48:
         70:5d:b2:03:7b:22:30:e0:8c:f8:a8:2b:96:39:83:2f:ef:da:
         46:c2:65:04:d1:20:56:fb:3e:83:53:32:4b:e2:ad:99:d0:ef:
         57:ac:1b:4d:1b:f5:51:0e:95:e9:a2:cc:aa:1d:b9:b9:01:fd:
         0b:93:4d:ce:5a:2e:ce:c5:1b:e1:73:b8:93:6d:9d:23:b9:46:
         13:1c:f0:68:fa:fa:c4:32:b2:36:45:6c:4f:18:c1:6c:2d:31:
         fd:4e:50:9d:12:5b:99:24:b7:ff:70:9f:95:2a:3f:48:a6:e1:
         b7:aa:01:1a:dd:37:10:e8:dd:0f:04:2e:86:bb:d2:0c:8d:39:
         e3:8a:f3:57:73:6a:6e:0c:e0:50:79:de:44:8a:5a:88:36:fe:
         bc:55:bf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:15:05 2025 by rpki-client