Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
File:                     5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft (raw, json)
Hash identifier:          3CUUQ5CblsLRDfudlYTrIqELnHleghuU5VMBrHboH7c=
Subject key identifier:   B2:0F:BF:DB:80:BF:2B:BD:6C:44:A4:4B:A3:CA:CD:9D:58:D9:9F:94
Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
Certificate issuer:       /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Certificate serial:       0199161ABD80291341A0CF85C05C78668EAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
Manifest number:          166D
Signing time:             Thu 04 Sep 2025 19:01:15 +0000
Manifest this update:     Thu 04 Sep 2025 19:01:15 +0000
Manifest next update:     Fri 05 Sep 2025 19:01:15 +0000
Files and hashes:         1: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl (hash: S9WZE2ATo6o9/b5KjGihdpbFTsuatqkjsWoXetPTU3k=)
                          2: xw1wxyD1fMrJTbgYiyQiF0uQJK0.roa (hash: TVVXOUY13A6nRw+KZkyghJdyM7alOs0fCSWauNlbS0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:1a:bd:80:29:13:41:a0:cf:85:c0:5c:78:66:8e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
        Validity
            Not Before: Sep  4 19:01:15 2025 GMT
            Not After : Sep  5 19:01:15 2025 GMT
        Subject: CN=b20fbfdb80bf2bbd6c44a44ba3cacd9d58d99f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:36:ff:37:f7:37:97:89:71:88:9b:1f:8e:b9:
                    fc:9f:15:74:14:00:06:09:bf:25:59:be:bd:39:c9:
                    72:65:44:3a:c8:b6:48:e8:3d:58:bc:9d:c8:c0:56:
                    4d:ce:d5:33:af:3b:42:b9:62:88:97:3e:25:ad:34:
                    31:c7:ba:b1:f7:9e:f9:a3:fb:4b:38:c3:62:72:26:
                    88:8b:de:4e:ec:a5:67:c7:78:35:e0:58:7f:1c:c2:
                    f8:e1:3e:90:9d:5c:8c:d9:0f:4b:c3:8c:66:cb:f4:
                    cd:ae:72:9c:cf:58:dd:7b:f9:cf:67:20:7a:04:2d:
                    69:f0:45:05:4c:51:12:81:2c:f9:a2:a1:a0:57:26:
                    0d:47:2f:f3:37:52:7a:fb:11:aa:f6:e5:91:08:1c:
                    ef:fe:ab:32:63:98:65:56:33:7a:ab:99:f3:33:f7:
                    58:88:54:fc:84:8a:ce:53:07:a6:e7:2b:d7:fb:ed:
                    99:bf:6c:cb:16:ff:40:50:8e:63:0b:89:e6:42:50:
                    35:c1:de:d6:17:b8:c0:7f:41:ea:08:af:2a:b4:b4:
                    79:1b:b8:df:50:5e:b3:99:96:ec:70:0b:d8:84:5c:
                    24:5f:66:5c:3c:62:3f:89:bf:69:38:ab:fe:8a:99:
                    b9:a4:bd:de:84:39:31:17:23:c1:86:6a:40:b2:c4:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0F:BF:DB:80:BF:2B:BD:6C:44:A4:4B:A3:CA:CD:9D:58:D9:9F:94
            X509v3 Authority Key Identifier:
                keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:53:5a:1f:08:8c:84:cd:be:c2:8c:9f:23:2f:e3:e8:42:1d:
         0a:5d:9b:fa:04:8a:c0:9c:0d:ef:33:97:9b:25:cd:aa:e6:43:
         b5:74:20:55:29:02:cd:67:0c:46:8e:01:1c:94:63:4a:91:82:
         24:27:67:90:43:d1:3b:61:5c:79:fa:75:a9:f8:80:01:df:ef:
         de:17:7e:4a:26:4d:0c:3b:71:d6:5d:b6:9e:b6:4b:31:d4:54:
         2f:5b:a1:ab:7e:69:06:8c:22:76:ab:99:99:8f:6a:99:ad:6c:
         27:82:32:ef:16:61:07:7b:f5:47:d3:bd:99:42:41:a6:5a:2e:
         25:67:11:5f:65:7c:29:b8:fc:32:6c:6b:57:e8:9a:61:19:95:
         59:11:0c:91:bc:fc:63:7a:9a:25:e9:77:49:fa:d2:e3:25:cb:
         a7:6e:48:a4:13:b6:36:35:45:76:7a:af:6a:53:ce:b4:61:c3:
         2a:6b:dc:2a:08:d1:d8:9e:e3:98:85:72:c8:04:7d:79:63:31:
         b7:5a:31:09:47:bd:67:33:07:5d:cd:be:63:d3:01:fd:ad:20:
         47:52:32:06:77:49:80:e7:a5:49:94:12:c1:a3:f6:36:7e:70:
         45:db:b3:d1:1c:6d:b5:33:d8:3c:b0:2f:bd:9d:e4:ce:59:0e:
         66:31:36:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:22 2025 by rpki-client