Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
File:                     T02gn7vpD7efDwiyB_g18PDaKf4.mft (raw, json)
Hash identifier:          J0uxbG3AYVnvzIPvZCK4sQZPsz4C0EgSiAPotrAwXOs=
Subject key identifier:   78:70:57:11:8B:A5:9E:16:09:58:FA:5A:95:82:5F:CB:37:0A:D5:A9
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Certificate issuer:       /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial:       0199353778BBCE28B5B7D94F7CCC6A4D2495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
Manifest number:          167D
Signing time:             Wed 10 Sep 2025 20:00:51 +0000
Manifest this update:     Wed 10 Sep 2025 20:00:51 +0000
Manifest next update:     Thu 11 Sep 2025 20:00:51 +0000
Files and hashes:         1: FuAE5x8IJALIfmhZTsiAE9-IbCg.roa (hash: MfUFICZEyn8ysR/zcHy2Sq4j5nmV7SDJce70wP8HCVI=)
                          2: T02gn7vpD7efDwiyB_g18PDaKf4.crl (hash: PX3kJVcuUc3lR2Qgp9P+P354VO/ROu62n6UJWINm05c=)
                          3: gdPSlZVyk0yt_ww6hr6rZwJTSYc.roa (hash: BWCu7uf0+bhsgilLRDC1frTnR4k0Kb5AA6w389paaDU=)
                          4: oFSSiFC3Vzphxz9KorzB0pMi8q0.roa (hash: TQSnPR7Rlvrd62e7kQsHyRbc3iccQgnfslp/ytEFEMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:37:78:bb:ce:28:b5:b7:d9:4f:7c:cc:6a:4d:24:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
        Validity
            Not Before: Sep 10 20:00:51 2025 GMT
            Not After : Sep 11 20:00:51 2025 GMT
        Subject: CN=787057118ba59e160958fa5a95825fcb370ad5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bc:d0:a1:bd:85:f1:be:6e:57:72:89:f0:49:
                    62:5e:d7:15:2b:e2:8c:ee:11:52:90:2d:0d:45:e0:
                    ed:1f:d2:63:36:f2:7d:b6:0c:b3:16:4a:ee:b2:57:
                    02:56:a5:e1:71:b2:2f:7c:3a:25:ac:c0:af:f7:7f:
                    54:a3:e9:b1:85:91:52:d1:c5:23:53:58:5c:27:40:
                    6d:d2:48:3a:26:f7:9f:5b:68:f2:c7:b3:fd:be:fb:
                    11:ad:52:fe:48:75:72:c9:74:97:3d:73:7d:82:56:
                    26:f1:c0:a6:c7:d6:55:54:74:e9:d4:50:53:1f:20:
                    e8:1d:22:40:a0:61:31:10:d8:a1:74:bb:20:4a:04:
                    6b:77:fa:f0:bb:ee:d3:88:b7:8c:8c:69:ff:92:a9:
                    27:f0:94:7c:58:88:2d:13:26:4a:ac:a0:e6:a4:2b:
                    96:ec:9a:14:27:58:a9:c7:dc:b4:c0:d4:d2:4f:32:
                    a4:75:61:79:8d:02:27:f2:50:d4:e0:d5:7d:80:ed:
                    e1:3d:8f:05:3d:48:a9:96:7b:07:33:f3:91:92:2a:
                    e0:31:50:e7:ea:a9:e5:03:f5:65:e1:9f:42:c6:6c:
                    50:df:23:7c:8c:dd:09:ca:1e:81:fe:dc:d2:a0:05:
                    5d:3b:82:74:4d:26:36:74:c4:2b:87:77:60:26:d0:
                    9a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:70:57:11:8B:A5:9E:16:09:58:FA:5A:95:82:5F:CB:37:0A:D5:A9
            X509v3 Authority Key Identifier:
                keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:44:4e:de:75:12:df:f0:8b:d7:09:b6:ff:ce:d3:eb:b5:8d:
         88:66:cd:64:a5:c8:47:7c:0f:55:0d:50:da:c5:de:db:cc:66:
         41:76:83:a5:e3:08:f5:2c:c8:74:ed:08:9e:bd:ec:f6:8f:58:
         c8:d2:dc:ba:e2:63:ef:13:06:d2:f7:8f:ed:df:09:5f:33:60:
         85:17:04:5a:af:69:92:3c:01:c9:b6:a0:3a:92:11:e5:d3:c2:
         db:1c:fe:3f:26:e7:56:2a:5d:45:34:b5:ae:a7:27:58:bc:9f:
         51:3f:ed:e0:8f:29:48:e1:a7:7c:db:b0:67:1d:cb:81:e1:2f:
         24:51:1e:3c:e5:c9:2c:65:09:f7:54:98:02:d9:98:ba:ef:51:
         5b:ee:58:b0:79:58:f8:bc:3b:ec:98:77:5c:66:a5:d0:9d:79:
         2e:0e:0a:c2:1a:d0:89:db:a3:a6:45:6b:66:45:6a:27:49:07:
         4b:29:38:ec:43:84:39:fc:6f:09:6f:85:8b:94:4b:33:62:6c:
         22:8c:ea:17:cd:c7:66:64:e4:a3:ab:de:d3:68:b9:ce:1d:03:
         52:d2:e1:02:c3:74:cf:ba:91:d3:48:35:86:19:7a:b9:ee:53:
         0b:e2:2d:98:16:30:89:ea:1c:af:ff:69:77:d8:ec:36:35:4c:
         f1:e0:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:56:57 2025 by rpki-client