Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
File:                     hJ463_A6q2LV2yI6w7NeKpuqTqM.mft (raw, json)
Hash identifier:          Ibl+Xw7nBWY4Nn0JyBFedbIBxaejtCtsDSx9gvG8hd8=
Subject key identifier:   61:13:C8:76:0B:6E:11:C3:04:F6:A5:E6:D5:B5:98:A9:0B:89:F3:07
Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
Certificate issuer:       /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Certificate serial:       01993125104FB3FF88E0B289800CE68274E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
Manifest number:          167A
Signing time:             Wed 10 Sep 2025 01:02:16 +0000
Manifest this update:     Wed 10 Sep 2025 01:02:16 +0000
Manifest next update:     Thu 11 Sep 2025 01:02:16 +0000
Files and hashes:         1: SlIgtDyTd5cpyZ5qiIfHEefhUu8.roa (hash: cWooIQqAZCDw8Hk2WoTdEVBzSQhgQYC7c4wf4oYDYYU=)
                          2: hJ463_A6q2LV2yI6w7NeKpuqTqM.crl (hash: SfcnDGlkdKj+fO9jcdZbEFkuwnv/p6gx88+zC/c47qs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:25:10:4f:b3:ff:88:e0:b2:89:80:0c:e6:82:74:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
        Validity
            Not Before: Sep 10 01:02:16 2025 GMT
            Not After : Sep 11 01:02:16 2025 GMT
        Subject: CN=6113c8760b6e11c304f6a5e6d5b598a90b89f307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:97:50:16:a0:38:97:a1:f6:c3:03:80:d8:
                    5b:20:56:79:ed:31:32:03:a4:05:5d:71:bc:46:f8:
                    99:2e:10:ce:77:01:77:07:a9:bb:eb:2f:7c:19:b7:
                    ff:fc:70:5d:72:53:94:9d:e5:2a:78:e6:76:9f:63:
                    f1:3f:44:b1:a8:58:3b:85:eb:60:5c:14:52:80:a7:
                    f1:d7:f8:22:9d:df:ab:ec:51:69:26:14:04:c6:ab:
                    11:15:38:48:88:f6:92:e0:19:45:17:b9:b7:be:ad:
                    20:fd:0e:3b:b3:80:c0:63:d8:75:04:02:6a:1d:42:
                    2f:e0:f6:e4:56:32:35:a6:c6:7e:31:c2:9f:fa:3f:
                    f2:48:c6:a9:f3:58:9e:f2:56:7e:d6:60:48:c0:03:
                    3c:56:b2:f5:c0:cd:c4:e8:73:ca:6f:38:c8:df:55:
                    9b:96:ae:55:63:5b:f4:8f:ed:ca:af:a2:6b:d3:54:
                    3d:6f:cc:6e:50:d0:a7:5a:fe:d6:f0:ef:13:84:d6:
                    61:1f:9d:47:a8:06:35:df:8c:ef:f4:84:6b:83:12:
                    58:a3:3c:66:d0:f7:36:8b:33:64:fc:5a:a7:a6:94:
                    30:12:b6:49:75:d5:bc:93:fd:c6:ed:9a:8b:70:eb:
                    da:5b:61:49:d9:a2:a6:0f:97:db:35:65:48:37:d9:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:13:C8:76:0B:6E:11:C3:04:F6:A5:E6:D5:B5:98:A9:0B:89:F3:07
            X509v3 Authority Key Identifier:
                keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:bf:4a:04:b8:c2:35:f3:54:2f:d0:47:38:95:22:64:37:fa:
         ee:93:f6:cb:fb:72:9f:9f:05:c4:44:cb:35:43:52:28:91:41:
         60:4f:97:6b:78:7e:78:04:db:b6:60:24:d8:4b:11:37:b1:4d:
         ed:65:f7:14:88:59:1a:92:8b:14:a3:27:ec:46:dd:c2:6c:b7:
         b4:21:5d:71:d4:2a:2a:7b:30:32:66:28:49:68:1b:f3:dd:cc:
         74:28:59:26:de:e2:45:a6:14:16:cf:0f:24:bf:83:5b:9a:85:
         e6:1f:86:69:0f:6d:b1:31:03:0e:d6:f0:fd:9d:1c:64:a5:1a:
         22:11:48:7e:24:91:a3:50:d0:8f:aa:ec:7e:53:45:ad:ab:55:
         78:7a:4a:60:04:8c:54:65:f8:11:e9:0d:f7:72:e9:83:01:7c:
         48:58:68:1b:bc:c2:73:25:c5:29:ad:fc:7f:46:19:77:a8:0d:
         3a:66:d7:f2:75:ef:8a:49:4e:70:b7:bf:f4:b3:7f:4e:3e:69:
         dc:c7:e9:57:30:d2:ae:73:1b:e5:e3:bd:7b:36:fa:f9:ba:87:
         04:1e:82:8b:6e:f9:90:c2:d9:5b:c7:91:b0:cd:2f:c1:7b:81:
         e2:af:27:be:ae:91:09:47:79:26:d0:69:24:19:fb:8f:ef:35:
         7d:b1:9d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:57:47 2025 by rpki-client