Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
File:                     oBZYi9HMst0iHG-Hg4VnR11-8ps.mft (raw, json)
Hash identifier:          7P8dnB1mSbu6RAqI+GhJopjhqk4cmjjWGmGWFxQgBpk=
Subject key identifier:   5A:56:BC:14:40:BA:8E:1F:0C:3B:89:25:09:DC:B8:3E:08:B1:E8:88
Authority key identifier: A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
Certificate issuer:       /CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Certificate serial:       019933EEAC876910BD4C62FE28D0CA1764A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
Manifest number:          167C
Signing time:             Wed 10 Sep 2025 14:01:43 +0000
Manifest this update:     Wed 10 Sep 2025 14:01:43 +0000
Manifest next update:     Thu 11 Sep 2025 14:01:43 +0000
Files and hashes:         1: 7uBhUg1U8OiL4mgssHYwPwkKJrs.roa (hash: qe2rw9SjAhTjzWJWyO7/LvmX898Pe709+tHdC1jP6UA=)
                          2: P--cyCsEXWTpmdtjtbooGfKZW34.roa (hash: NViLGPpX2PnuVnmOA56Cf2Dp8n102H0opZdujn8vzcs=)
                          3: aUv0oKe6R2btvCdtOSYfT8WFAF0.roa (hash: lEgJxjlP6AlXHpqLTYKzkLDQsVq+Pi3xpQibZH/Rsds=)
                          4: gAUG9nMSNjQsq1tequutH3immt8.roa (hash: LCBTiYiGcwL+NIVJ6V4OXpEoNBb3bNUukyOlGZ8oVgM=)
                          5: kx7UofzIMm_m_XlnrQs2X_ZwrTs.roa (hash: FMY4CRQkCPFhXww6V/ELCA3IQUBWPklogLha1wHTo1w=)
                          6: oBZYi9HMst0iHG-Hg4VnR11-8ps.crl (hash: yCQtWBvP/p9Ad9moS6dMp90LwpI/+BXPQ5oCHqO68PU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:ee:ac:87:69:10:bd:4c:62:fe:28:d0:ca:17:64:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
        Validity
            Not Before: Sep 10 14:01:43 2025 GMT
            Not After : Sep 11 14:01:43 2025 GMT
        Subject: CN=5a56bc1440ba8e1f0c3b892509dcb83e08b1e888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:39:3f:57:ad:ee:2f:4f:62:8c:80:d5:1d:
                    dc:40:34:57:33:39:01:fa:b8:d7:74:41:08:15:99:
                    86:a4:41:fd:64:fa:f5:e0:41:7d:8a:d3:81:08:ca:
                    42:62:fe:61:7b:e6:3c:2d:0f:b1:a2:d0:1c:a7:c2:
                    e4:1e:c5:f1:b0:2d:dc:5b:21:1d:49:6c:a2:d4:f7:
                    16:e7:10:c8:bb:df:a7:ed:36:43:eb:4b:fe:72:9b:
                    6c:72:5e:4d:1b:ec:56:76:8f:05:53:40:f9:de:5d:
                    d6:b4:7e:6d:b4:cc:83:da:65:b8:66:5f:21:65:18:
                    c6:ec:dc:29:a9:5a:c6:af:a7:b0:84:24:eb:6b:0c:
                    f7:bc:20:5d:68:37:aa:a9:c4:24:cf:aa:b1:4e:96:
                    8f:fc:bb:6f:b1:92:ac:7f:a4:04:a1:2c:2d:76:72:
                    86:6d:c6:20:e6:34:a7:f4:e4:a9:4e:6b:25:58:f9:
                    c9:da:3e:ef:57:a2:5d:3a:6f:96:6c:17:72:d7:3d:
                    a5:de:65:e1:c5:5d:16:b9:83:c3:f0:72:5d:93:a4:
                    03:71:fd:e2:13:67:ad:c1:4d:db:54:3d:56:2a:e9:
                    f3:5a:45:fa:64:a1:e1:a3:2c:36:71:de:98:43:9b:
                    d6:e2:f1:cf:72:e8:bf:23:fb:cf:21:9c:aa:a4:d6:
                    87:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:56:BC:14:40:BA:8E:1F:0C:3B:89:25:09:DC:B8:3E:08:B1:E8:88
            X509v3 Authority Key Identifier:
                keyid:A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:86:85:4d:36:10:9d:33:55:fb:b9:f5:ac:a1:c4:47:6e:9d:
         5f:87:60:fb:67:6d:e7:28:75:1c:49:eb:9f:00:02:29:99:f5:
         3b:3d:db:12:f0:46:22:dc:02:e0:7b:84:83:25:7f:5a:77:ea:
         20:12:bf:ec:28:3f:f7:ae:44:c4:2f:fb:37:00:d2:e3:ec:33:
         f7:b7:a1:fa:92:69:cb:60:f2:95:76:41:a3:d4:71:c2:4f:7a:
         f8:48:75:d0:34:d6:1e:1f:2c:05:7a:51:bd:c4:a7:6c:b1:ba:
         75:44:ae:1e:93:b0:f8:27:64:c5:57:f3:5a:7f:4c:02:6c:cb:
         1d:e9:7e:61:c5:4f:88:83:91:79:6e:4e:19:95:65:c8:d1:8a:
         22:f9:fa:9a:b6:45:ad:d9:74:ea:ed:4e:4d:4a:85:d3:1b:8c:
         af:51:bb:88:92:9e:8c:0d:81:b8:68:64:d2:1f:51:d2:58:8d:
         a7:c9:a7:a9:20:bf:6f:e1:e2:bd:21:1f:0e:cb:c0:27:80:74:
         00:b2:c4:2b:3b:76:fc:c8:66:13:1c:d7:c8:fc:54:1a:3f:38:
         e8:dc:51:b0:6b:39:e3:85:97:7f:0c:e5:0e:eb:d2:cf:00:76:
         88:ea:54:07:ca:35:7f:95:b0:9f:df:e1:48:98:10:48:4f:83:
         a7:9f:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:48:02 2025 by rpki-client