Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
File:                     67wNYL06kL1eMVCd6t9EcHaweNg.mft (raw, json)
Hash identifier:          Pd39rd9kkFm534K0u9G0qMENUGjQ8spPosGCVpac3KI=
Subject key identifier:   7E:69:52:5E:0C:4F:F3:87:85:93:EA:8E:C9:1A:A7:F5:81:B6:30:25
Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
Certificate issuer:       /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Certificate serial:       01993314097C5C39A5F190EE29D1E0683187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
Manifest number:          167B
Signing time:             Wed 10 Sep 2025 10:02:55 +0000
Manifest this update:     Wed 10 Sep 2025 10:02:55 +0000
Manifest next update:     Thu 11 Sep 2025 10:02:55 +0000
Files and hashes:         1: 5zUKmRm-wVqTunF2tT-7Cqs_OWs.roa (hash: 9aHvAui4+yZdhtJErGw75MAtLb8+QGjtqwMfMZbFd3M=)
                          2: 67wNYL06kL1eMVCd6t9EcHaweNg.crl (hash: bcrgDfujfrMl47f8HcwZgS/Xh4y+aY0gWsAjxxD8z/0=)
                          3: QvxWT4xY-nx_D6ZNWO2yetZnnpQ.roa (hash: 5hYT1EwCoWhfN9hDbCeHVlJcTh6HqFEGgKcOBfv7338=)
                          4: lzphi4MxBp9BaUcphSOwLVmwZEE.roa (hash: P65ZeDMhywEETdGJgUa5vU1aMaDLOyoDprfHHXlTBBM=)
                          5: v3SWv1n837zLkNGdleDKsMBQDv0.roa (hash: O8MJh8aunH8A9IiDr50FU3GzSB/FL6Wl7jBlBla6VVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 10:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:14:09:7c:5c:39:a5:f1:90:ee:29:d1:e0:68:31:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
        Validity
            Not Before: Sep 10 10:02:55 2025 GMT
            Not After : Sep 11 10:02:55 2025 GMT
        Subject: CN=7e69525e0c4ff3878593ea8ec91aa7f581b63025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:78:b8:f8:e7:6b:c1:aa:6c:2d:8a:9d:35:
                    1a:f4:eb:88:f1:f1:97:06:42:94:a0:9d:70:e8:57:
                    ed:7f:5e:7b:ac:01:e8:4b:89:d4:a6:a1:81:a9:96:
                    56:84:9c:3b:d8:8d:51:13:5d:8c:8c:02:44:db:e5:
                    4b:cc:a2:61:32:d5:57:f7:76:73:a4:89:e1:63:44:
                    4a:0e:d4:18:51:5a:61:65:fb:2a:3a:1e:00:8f:f4:
                    f4:ac:85:50:3a:49:e2:34:18:fa:69:fa:c4:17:f8:
                    9e:72:1f:f6:71:0e:17:62:26:63:e7:49:ce:7c:e8:
                    13:ef:04:f3:ce:0b:a0:86:ae:57:1d:d5:8b:4c:48:
                    d2:5a:65:0a:94:bb:e7:ec:e5:f3:c1:92:75:b6:35:
                    d0:fd:7c:a7:00:9a:0e:97:87:64:74:f0:d1:19:2c:
                    79:c6:e3:d1:00:8f:a6:60:39:55:58:0f:9d:97:a6:
                    2b:36:3a:5d:14:ad:23:2a:7a:86:0a:06:f2:2b:18:
                    0a:a2:5f:cd:89:a5:a6:5d:78:92:8e:2f:b8:18:f6:
                    5a:17:2b:21:fb:7a:9a:3e:a2:e7:ee:4e:99:3d:f7:
                    d7:86:41:87:c2:e7:2d:61:2f:dd:de:d7:0e:32:13:
                    51:b2:71:9a:21:57:e0:2b:0e:18:03:31:c4:3b:6a:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:69:52:5E:0C:4F:F3:87:85:93:EA:8E:C9:1A:A7:F5:81:B6:30:25
            X509v3 Authority Key Identifier:
                keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:63:5d:40:81:b1:e4:3c:09:0c:cb:e8:3b:76:45:8d:44:15:
         66:ea:ae:ff:48:e2:29:54:2a:cd:b6:ca:57:50:04:ba:59:4a:
         0b:89:93:a7:5d:f1:f2:db:a7:d5:a2:69:35:1e:f5:f6:f5:e1:
         53:cb:91:ed:01:c9:6d:4f:94:31:84:01:91:07:18:5e:61:1c:
         e8:93:cb:d8:4b:7b:0b:c1:48:89:6c:71:bb:ab:be:b1:20:ec:
         53:45:90:9e:42:72:27:32:90:b0:c8:0a:cb:17:14:00:2f:69:
         07:18:dc:ea:30:04:8b:cb:8d:60:c9:69:03:24:62:fe:8e:ac:
         94:54:58:46:57:ea:7c:e8:78:21:64:b5:bc:c4:c6:60:38:b5:
         f6:bc:3e:01:77:2f:32:0d:05:ed:76:6d:56:33:30:13:5a:da:
         91:d7:38:aa:b9:88:8f:80:21:3d:b6:2b:f6:4f:ee:69:66:ec:
         43:5e:45:d2:e6:54:61:3c:46:a0:1c:0e:af:cc:e4:87:7b:d6:
         8f:7d:fc:4f:f8:89:2d:67:95:b1:60:f4:ef:2f:f7:63:ef:34:
         43:00:c1:73:e0:a4:76:b5:ac:fc:ab:08:07:ca:ed:44:da:81:
         00:0c:2f:db:18:9e:1c:3f:5e:aa:a1:88:63:b0:a0:a0:d1:22:
         bd:fc:7d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:35:15 2025 by rpki-client