Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
File:                     Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft (raw, json)
Hash identifier:          dIgFYHjrbc/c14uJMRDlhg1JfL71ag6sY29HdcZutcY=
Subject key identifier:   32:0A:7F:AD:2F:B3:F3:C4:FD:D3:DD:9A:12:24:13:45:09:02:00:E4
Authority key identifier: 52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04
Certificate issuer:       /CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
Certificate serial:       019922C33869F6A011F4DD6953AB2364062D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 06:00:43 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:43 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:43 +0000
Files and hashes:         1: 9JadLiuorP5WBtAK4ahko9XzHjQ.roa (hash: qnkmqt5DjArPix3ByqvfUIsWSJTvM73SLxqKVoYiGls=)
                          2: Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl (hash: iE5T3lmjz+xyJ4fwsopNC/N0ENE73J+3f2okXXoHl3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:38:69:f6:a0:11:f4:dd:69:53:ab:23:64:06:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
        Validity
            Not Before: Sep  7 06:00:43 2025 GMT
            Not After : Sep  8 06:00:43 2025 GMT
        Subject: CN=320a7fad2fb3f3c4fdd3dd9a12241345090200e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:e4:fe:d8:24:de:86:e9:b9:2e:aa:d1:8b:
                    d0:99:ff:7c:2a:55:5a:3b:16:36:6e:37:39:cd:42:
                    ef:d4:08:e9:95:d2:e8:6d:35:67:72:1f:77:62:ab:
                    08:92:a8:76:e7:c6:75:c3:f1:63:3a:8c:e7:cf:89:
                    3a:ed:96:ba:20:27:f0:4a:56:8b:5d:ec:f0:88:5e:
                    21:57:1f:a4:42:06:3d:c3:15:88:02:ac:0c:99:50:
                    91:fc:88:4c:cf:5b:29:da:79:1d:4f:20:6b:0f:e0:
                    35:26:3f:c9:08:ad:da:2b:15:46:81:39:ae:53:0c:
                    08:7f:14:c5:fc:ef:e1:9b:ed:ad:b7:7c:35:15:29:
                    27:e0:70:f9:ee:7f:91:5a:55:19:bf:12:b3:be:33:
                    bd:c6:23:09:68:77:b2:d3:51:e8:8d:a7:93:0d:44:
                    18:29:68:63:b4:e9:26:f3:fd:d7:b3:0d:4e:74:48:
                    83:65:99:bd:6c:13:29:2d:6e:47:ae:ed:ed:9b:34:
                    26:6a:7f:37:ba:5f:65:ea:13:1e:01:59:8c:d0:73:
                    d9:fc:ae:f3:f9:17:6f:37:dd:17:5e:b9:ca:31:4f:
                    26:42:91:dd:60:8a:6c:23:77:42:13:2b:24:43:8c:
                    03:1c:41:83:d6:b5:b4:e3:3e:3f:88:b6:4e:8f:bd:
                    ac:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0A:7F:AD:2F:B3:F3:C4:FD:D3:DD:9A:12:24:13:45:09:02:00:E4
            X509v3 Authority Key Identifier:
                keyid:52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b8:62:f6:89:c4:c8:3b:e8:5d:7b:9f:95:14:e0:5d:a8:40:
         64:44:b8:a5:31:73:ba:db:1e:34:b9:4b:35:9a:c7:d7:3d:4a:
         e0:40:2d:d5:94:90:fd:9d:07:9c:47:b6:80:06:a3:31:6e:87:
         76:46:a0:7b:48:4e:fe:fb:f0:63:ef:f6:cd:1e:18:c8:0c:0f:
         c6:67:0b:f2:2b:9b:62:10:af:29:73:d3:c7:a2:a7:6d:b6:a2:
         67:75:7c:1b:24:a3:f8:09:a0:fa:b6:cd:a0:29:03:c3:17:b9:
         c0:e1:c0:f9:5f:70:ca:9c:f4:83:00:8c:f0:a6:92:ce:2f:ed:
         ab:38:0f:3e:7c:c9:5b:e1:b0:e3:47:0d:d1:e6:ad:78:e9:94:
         d9:67:f1:ca:29:58:28:6e:4e:4d:8c:26:56:f8:c4:67:bb:33:
         e0:9b:72:ad:f9:67:00:c3:bb:14:9b:bb:2f:52:05:2a:33:9e:
         8b:7f:40:55:ae:8c:9d:c4:14:71:8f:1d:45:d7:40:b2:e1:32:
         f2:dc:68:82:92:05:d1:c3:72:3a:0d:f8:5a:30:a1:01:67:c3:
         46:0a:98:ae:a8:53:3a:6f:13:34:3f:b5:5d:4e:1e:86:a9:91:
         f6:eb:6c:22:49:b3:81:e7:0f:a0:1d:ba:be:40:01:35:97:ff:
         53:be:a2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:40 2025 by rpki-client