Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
File:                     Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft (raw, json)
Hash identifier:          WMDe1JPEw5BQyjLF9v879x8ggrTOfxcapEIpc43xJjU=
Subject key identifier:   BF:B2:FC:06:60:46:DD:E1:AB:FA:42:2B:41:86:4A:23:82:3A:71:DA
Authority key identifier: 63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C
Certificate issuer:       /CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
Certificate serial:       0199375D2DFFAA37E39ABBF0C80BD1EA8E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
Manifest number:          160E
Signing time:             Thu 11 Sep 2025 06:01:17 +0000
Manifest this update:     Thu 11 Sep 2025 06:01:17 +0000
Manifest next update:     Fri 12 Sep 2025 06:01:17 +0000
Files and hashes:         1: Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl (hash: uk5i9Dw6eCCbtpAYKgh73LZiWYFZYCQExer9j5GBQdA=)
                          2: lk2DKx6tMZ4QVeIQ4n9LUxby2mQ.roa (hash: g/j+F0OdRQ6yoH4DQlzMOgxK5K/3yYMtnzs95xrt8uU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:5d:2d:ff:aa:37:e3:9a:bb:f0:c8:0b:d1:ea:8e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
        Validity
            Not Before: Sep 11 06:01:17 2025 GMT
            Not After : Sep 12 06:01:17 2025 GMT
        Subject: CN=bfb2fc066046dde1abfa422b41864a23823a71da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:2a:7c:97:b9:af:10:c4:61:b9:fd:be:c0:
                    44:af:bd:ae:57:44:e1:ff:91:01:4e:1c:8e:c4:82:
                    52:fb:65:35:a4:98:27:df:e5:48:56:b5:56:bf:0f:
                    d1:92:9c:8a:da:f4:ed:95:7f:75:c4:fd:f2:85:95:
                    23:55:c9:14:06:9c:e9:32:6c:27:d4:c2:e7:b1:48:
                    fb:e6:ec:e0:c3:ba:12:29:b9:af:af:a2:f4:b7:3a:
                    fa:94:22:f3:d4:12:bd:10:bf:6f:37:7d:c7:35:b2:
                    57:4d:99:b0:9d:9e:59:9e:f8:5e:80:24:fa:f5:5e:
                    34:9f:a3:ed:51:9e:da:dd:c2:c2:46:f4:ab:c7:39:
                    81:30:df:ac:f2:6b:ba:65:8b:c1:ba:96:91:e4:12:
                    5f:53:c3:4c:06:ee:85:0c:17:e9:e3:35:3a:e5:64:
                    bd:53:da:e5:6b:5d:45:8f:a6:22:04:fe:41:92:62:
                    bb:00:9a:fb:f4:b3:7d:4f:3d:a7:09:84:0f:40:2d:
                    ad:ba:73:b3:a8:22:f9:5a:f3:8b:19:ed:16:95:0e:
                    8e:a2:9d:fd:7f:4d:50:0d:d4:0a:fb:1b:8c:5a:e3:
                    8e:ad:d9:22:fd:83:55:82:30:94:3b:0c:65:66:c6:
                    0f:e6:6c:ce:cc:76:3b:30:72:ff:ea:ab:1d:7d:e4:
                    dd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B2:FC:06:60:46:DD:E1:AB:FA:42:2B:41:86:4A:23:82:3A:71:DA
            X509v3 Authority Key Identifier:
                keyid:63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a2:1a:76:e2:e3:38:ea:46:60:07:c8:2c:3d:b3:77:11:52:
         10:91:53:67:05:d6:7c:6d:08:3d:2f:9f:ad:3d:f6:e9:d5:7c:
         39:76:73:5a:5a:f3:92:ca:78:d6:34:1d:28:6e:fa:71:73:65:
         11:35:a0:54:46:3a:7e:d3:25:ba:02:9d:90:78:bb:bd:ca:cb:
         3a:c1:8b:f7:ab:29:eb:16:c9:cc:08:15:b0:c0:db:79:ff:72:
         f9:2f:b6:16:72:a6:e2:9c:eb:7c:62:18:ba:0a:37:da:e1:af:
         e8:a8:2f:5d:9e:ad:0c:6b:40:74:f0:66:e9:03:b2:a4:0f:22:
         03:9d:0f:9d:5c:2d:ad:3e:cd:84:47:e9:82:8f:4e:11:ee:4a:
         79:d6:50:e6:96:ea:08:87:24:49:93:b7:f2:31:28:cf:32:b8:
         c4:d5:5b:a9:b1:ff:dd:13:0a:de:da:a2:b4:78:e3:01:7a:62:
         71:7e:8f:a0:83:35:98:1d:8a:7a:41:ed:24:6b:7a:70:2b:38:
         01:89:48:6a:3f:75:64:ec:5d:40:b5:e0:e7:00:9f:ef:7d:44:
         92:4e:90:db:36:d0:fc:8a:76:da:1f:59:56:bb:3d:d9:30:90:
         c0:a6:95:0b:b0:4a:81:d7:3c:8c:70:16:34:bc:e6:49:81:3c:
         2d:65:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:37:54 2025 by rpki-client