Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
File:                     Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft (raw, json)
Hash identifier:          j9bcKLu8Ew5yfEirYBOJTu0vsetvoqsgsLj2nD09F98=
Subject key identifier:   01:60:8F:F6:90:A3:17:05:62:56:EE:E7:D0:71:5B:BF:CE:C7:15:60
Authority key identifier: 66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5
Certificate issuer:       /CN=6688f0f1b5d341670069202717d63c0540464ff5
Certificate serial:       019923A03466280429D3A1077278E77458D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 10:02:05 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:05 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:05 +0000
Files and hashes:         1: Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl (hash: gU4ZWB9U6v8sap1GOWjTiO4kiwWXrpPWgJcsYfNyK5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:34:66:28:04:29:d3:a1:07:72:78:e7:74:58:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6688f0f1b5d341670069202717d63c0540464ff5
        Validity
            Not Before: Sep  7 10:02:05 2025 GMT
            Not After : Sep  8 10:02:05 2025 GMT
        Subject: CN=01608ff690a317056256eee7d0715bbfcec71560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:ed:64:14:43:74:fa:79:5a:4b:59:d2:4c:
                    09:cc:58:a0:e2:e7:cf:4a:3c:24:0d:08:94:0b:9c:
                    30:e8:f4:42:84:da:0e:73:c4:c9:29:b8:8a:21:42:
                    bc:63:3e:76:19:4b:94:34:2a:fc:84:0f:77:47:3a:
                    29:fe:0c:0a:80:17:2e:13:bc:3e:b7:76:2c:20:fb:
                    fc:9c:b4:c1:90:45:af:56:fb:e6:9a:b1:f1:7e:d8:
                    58:19:47:83:dd:eb:00:6f:74:a5:ff:74:5d:51:7c:
                    6a:63:d8:64:62:9d:56:31:5a:c7:e5:d3:b3:ba:44:
                    8f:48:65:8f:8d:0c:a1:20:77:8f:4b:d8:7b:ba:ed:
                    63:e0:06:54:85:b2:bc:2e:fe:09:f5:bd:e3:b2:5c:
                    ac:00:c1:dc:a1:13:74:03:e3:09:8c:3c:25:8d:11:
                    d6:92:77:5b:8b:40:3e:2f:c0:f5:83:24:a5:ea:b2:
                    01:29:c9:33:8d:78:a2:27:9c:5d:a5:8d:12:99:7c:
                    a8:cf:c4:fe:92:7c:db:66:04:d3:65:f8:27:e1:3b:
                    f0:dd:a7:89:b7:93:34:92:c6:d5:3a:9e:58:40:bb:
                    08:ef:05:a6:f2:e8:72:71:f7:7a:e2:37:4a:47:7d:
                    4b:48:31:5d:92:bc:5e:7f:67:69:bc:6d:fd:b3:be:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:60:8F:F6:90:A3:17:05:62:56:EE:E7:D0:71:5B:BF:CE:C7:15:60
            X509v3 Authority Key Identifier:
                keyid:66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:89:77:53:02:98:66:0d:21:6e:9d:7d:2b:ef:4b:bd:1f:d2:
         31:48:d3:f8:92:25:0f:af:a7:98:40:96:c1:92:9d:91:9e:e3:
         b4:9d:36:bd:84:c1:36:b0:e2:9f:4e:22:98:b1:58:7c:83:c5:
         9b:25:25:f1:a5:33:28:29:32:0c:02:48:5f:2d:21:12:38:36:
         0c:a7:90:bb:3b:a7:fc:0c:89:40:4f:39:d2:66:3c:fa:45:28:
         93:5d:0e:4f:b8:3a:91:d5:77:5c:48:f3:12:a5:76:21:b8:d0:
         3a:9f:6f:70:7d:fc:b7:f2:2b:ae:74:40:6d:b3:82:7c:b3:0d:
         0c:aa:c7:9e:ac:c9:f6:64:ff:c4:92:55:06:b6:5f:9a:65:ec:
         9b:52:99:60:88:3f:c6:29:57:4f:58:cb:45:9f:3f:89:73:61:
         5c:7e:1f:e1:c2:51:bb:70:2c:03:a5:d8:1b:ad:20:b7:4e:67:
         da:98:7e:82:e9:42:9f:5f:a0:f0:6e:d0:51:74:4c:5b:d8:8a:
         63:ad:98:28:95:2c:a0:a9:2b:4f:a3:c4:2c:ce:1d:bb:d6:40:
         b6:62:96:a6:b9:60:c7:75:15:9b:74:15:64:87:df:85:3c:42:
         c3:23:89:aa:3d:33:66:8a:c9:00:7e:ef:0f:ff:ed:1d:2e:43:
         3a:4d:cd:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoDRmKAQp06EHcnjndFjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ODhmMGYxYjVkMzQxNjcwMDY5MjAyNzE3ZDYzYzA1NDA0
NjRmZjUwHhcNMjUwOTA3MTAwMjA1WhcNMjUwOTA4MTAwMjA1WjAzMTEwLwYDVQQD
EygwMTYwOGZmNjkwYTMxNzA1NjI1NmVlZTdkMDcxNWJiZmNlYzcxNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMftZBRDdPp5WktZ0kwJzFig4ufP
SjwkDQiUC5ww6PRChNoOc8TJKbiKIUK8Yz52GUuUNCr8hA93Rzop/gwKgBcuE7w+
t3YsIPv8nLTBkEWvVvvmmrHxfthYGUeD3esAb3Sl/3RdUXxqY9hkYp1WMVrH5dOz
ukSPSGWPjQyhIHePS9h7uu1j4AZUhbK8Lv4J9b3jslysAMHcoRN0A+MJjDwljRHW
kndbi0A+L8D1gySl6rIBKckzjXiiJ5xdpY0SmXyoz8T+knzbZgTTZfgn4Tvw3aeJ
t5M0ksbVOp5YQLsI7wWm8uhycfd64jdKR31LSDFdkrxef2dpvG39s75UBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFgj/aQoxcFYlbu59BxW7/OxxVgMB8GA1UdIwQY
MBaAFGaI8PG100FnAGkgJxfWPAVARk/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm9qdzhiWFRRV2NBYVNBbkY5WThCVUJHVF9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My85YzFiMTQtZTNhOS00ZDkyLWJlN2Et
YjEzZDJmZWQxZGM2LzEvWm9qdzhiWFRRV2NBYVNBbkY5WThCVUJHVF9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My85YzFiMTQtZTNhOS00ZDkyLWJlN2EtYjEzZDJmZWQxZGM2
LzEvWm9qdzhiWFRRV2NBYVNBbkY5WThCVUJHVF9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIl3UwKY
Zg0hbp19K+9LvR/SMUjT+JIlD6+nmECWwZKdkZ7jtJ02vYTBNrDin04imLFYfIPF
myUl8aUzKCkyDAJIXy0hEjg2DKeQuzun/AyJQE850mY8+kUok10OT7g6kdV3XEjz
EqV2IbjQOp9vcH38t/IrrnRAbbOCfLMNDKrHnqzJ9mT/xJJVBrZfmmXsm1KZYIg/
xilXT1jLRZ8/iXNhXH4f4cJRu3AsA6XYG60gt05n2ph+gulCn1+g8G7QUXRMW9iK
Y62YKJUsoKkrT6PELM4du9ZAtmKWprlgx3UVm3QVZIffhTxCwyOJqj0zZorJAH7v
D//tHS5DOk3NKg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:43:39 2025 by rpki-client