Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File:                     b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier:          ypU/fM2zDOPgdufVGZUPDGj7etl6J4hb6BlGZCuNRI4=
Subject key identifier:   B7:39:78:0D:DF:EE:75:4C:E5:63:21:B0:BA:47:40:A6:02:53:D1:F7
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer:       /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial:       019950411917DF1073A23BF6B92D8503879D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number:          169C
Signing time:             Tue 16 Sep 2025 02:01:07 +0000
Manifest this update:     Tue 16 Sep 2025 02:01:07 +0000
Manifest next update:     Wed 17 Sep 2025 02:01:07 +0000
Files and hashes:         1: 1YG59nbjYSEp8Dz6f0mC_6gefpg.roa (hash: 5tVXqxotHLEXF9KoqmQT6ylsFbR/apsye3JTV81hRBQ=)
                          2: DWHdsFsQlnFJcyPewoXT0lDFpvE.roa (hash: V6x8BrWgOBTucNWB1MpK3cn6rjM3I3+oPKM+8Z7R5vA=)
                          3: GQpZM-fB0ZkxzCRMqCw0f9N7tyU.roa (hash: KTppITpJ7wsyB8SXrbAMqiKKxUwVykbBRMICRs5VO4A=)
                          4: K221sfSU8a2Lsy0QMVbBz-yAHyg.roa (hash: kybj+mQFwM3CNEIgEWcR7xMFvyhG9N8dFqe0X/0hhYM=)
                          5: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: mTuqdbOezwqIleE23PwVjpDZIe+Osr+H7w4h7/dC7pM=)
                          6: hZBu7FQZVkKtWXL58gH8ufcnrgg.roa (hash: R2fcFnCqnbmbHv/RiPE81tSq/ElozG/l/Ezav5iqgYw=)
                          7: j93BEME5b_K-Zki214QPN4kzqeg.roa (hash: hcvpDseLA+C6KaXIoA6Bv3d4XdBkZlvTz5OO4bMB8oo=)
                          8: rqGlBLIWA_KsyY5dvVKcudAzYvY.roa (hash: 5OHCdN2GkrUd/qPuHKRYVHvCHLeex3MBnLChYf7HEzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 02:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:50:41:19:17:df:10:73:a2:3b:f6:b9:2d:85:03:87:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
        Validity
            Not Before: Sep 16 02:01:07 2025 GMT
            Not After : Sep 17 02:01:07 2025 GMT
        Subject: CN=b739780ddfee754ce56321b0ba4740a60253d1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:26:08:2c:55:4a:bb:e2:c7:2d:39:ee:bf:
                    6a:d3:c9:ca:56:ef:17:1d:97:46:4f:ef:b6:3e:3f:
                    5e:52:86:ce:fa:70:24:4a:11:2f:90:e5:16:7a:3a:
                    15:f5:c5:aa:d7:53:af:98:89:a3:98:7e:a7:fb:dd:
                    4a:16:c5:2e:9a:1f:d4:55:4e:62:be:cb:80:74:dc:
                    bc:f4:e9:93:48:32:10:19:71:d7:6b:ab:63:c5:fb:
                    eb:fd:60:0c:50:1b:6b:20:0f:ae:88:23:5a:45:4e:
                    95:33:10:4a:22:ea:5d:83:80:5a:14:7c:de:b7:02:
                    28:a4:03:e5:b8:f2:bc:2e:30:51:75:16:9a:c3:fb:
                    2f:b9:5d:c3:3d:3d:19:fe:b9:9e:87:14:00:93:50:
                    dc:8f:68:ec:9c:fd:26:65:41:6e:fe:b0:f6:96:fc:
                    05:b1:8e:81:4c:66:6e:8d:e4:e2:80:41:0a:fa:c3:
                    12:1b:7b:7c:67:21:9d:ad:79:76:3a:c6:c5:1b:d9:
                    6c:51:ac:20:1a:fc:e1:7d:31:c9:3d:c7:42:9f:ba:
                    91:cd:b5:4e:29:41:ea:0a:0c:ee:dd:87:74:45:5d:
                    a0:21:ee:7f:56:db:5a:3d:c6:98:c3:60:3d:60:b1:
                    13:84:9e:b3:5a:0b:dc:4f:3e:1b:f6:6b:ba:af:33:
                    de:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:39:78:0D:DF:EE:75:4C:E5:63:21:B0:BA:47:40:A6:02:53:D1:F7
            X509v3 Authority Key Identifier:
                keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:16:c2:e0:e9:42:54:b9:81:bd:a0:d7:10:ad:7a:9a:dd:e8:
         61:84:b3:12:d0:2b:3f:74:aa:b8:e2:8c:4a:7f:89:d8:a7:a9:
         8c:a8:35:b7:06:35:e5:e0:92:53:53:c9:12:ae:79:dc:d8:6f:
         f6:93:92:57:d5:23:d1:a1:2a:2c:2e:9e:9e:b7:3f:da:9e:b9:
         93:f6:09:45:97:57:85:54:bb:d6:ee:18:0a:a3:e1:ed:11:25:
         3c:8f:48:f7:ed:a2:4a:87:78:76:9c:ce:de:94:bc:89:9d:24:
         00:75:78:e8:17:9a:34:e0:fb:6b:3a:b5:cd:12:49:b2:99:ca:
         6a:24:c7:d1:81:91:93:68:5c:36:12:2e:06:da:5e:98:47:f3:
         c4:5b:34:3c:73:7e:c6:2e:24:86:a3:31:fe:21:e3:e2:89:3f:
         1c:ef:ff:29:2f:d0:ad:64:b6:d1:41:f3:2d:ca:ef:b8:a3:29:
         4e:6c:95:52:a7:bc:64:a6:a1:4b:d3:1f:80:47:00:8a:1c:1c:
         e0:09:ac:da:c2:b0:5a:77:7f:70:a6:12:0b:db:14:32:bf:a5:
         27:96:62:db:80:58:5c:03:d5:71:0e:d4:e6:d4:de:9b:c5:4c:
         6d:8b:b4:03:dd:2e:f9:93:98:99:bb:cd:69:1d:0f:34:1a:6f:
         8e:b3:77:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 11:31:42 2025 by rpki-client