Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
File:                     wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft (raw, json)
Hash identifier:          7FE+gSUzrdmMZOBs080NiQEtBQeWVquxWsQhc/PD/VI=
Subject key identifier:   4A:A5:1F:2D:E8:CB:91:77:D7:16:AA:8D:83:E7:9B:81:A0:00:2E:AA
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Certificate issuer:       /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial:       019937CB209B69E8685E352BAE4627504047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
Manifest number:          167F
Signing time:             Thu 11 Sep 2025 08:01:22 +0000
Manifest this update:     Thu 11 Sep 2025 08:01:22 +0000
Manifest next update:     Fri 12 Sep 2025 08:01:22 +0000
Files and hashes:         1: A5e1ajK6VG8bsSgi6vHK9FVhkA0.roa (hash: DwfexPS0q4iJHOaKGcYE+MnhBqtqidrsPJZ1x03qAag=)
                          2: FZT_BTCcPvUDg2WMebmfcMFfqlk.roa (hash: 9tnNWNBi7xBlzEQuuTA6YbXDIlQAtmVWyk/P9qheXMo=)
                          3: XOd2oE1ewhF-ZbAEMdaVC12jAfE.roa (hash: Qb1mjfUYvzsw4HemAT0H4CHevsLBTYDDvuwnqPNJ06Q=)
                          4: ukTsh__PD-e49THfmeczO06Ewzg.roa (hash: 2pxpwWB8nzVKK5ZFAoaYU/qGI9s7E3tcdxUF1upjgL8=)
                          5: wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl (hash: fyxeTLEwy7xioXnrcDSGyg79LsA2iQlp7KkuUqTEz+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 08:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:cb:20:9b:69:e8:68:5e:35:2b:ae:46:27:50:40:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
        Validity
            Not Before: Sep 11 08:01:22 2025 GMT
            Not After : Sep 12 08:01:22 2025 GMT
        Subject: CN=4aa51f2de8cb9177d716aa8d83e79b81a0002eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:54:22:27:d7:e7:b9:26:f4:ca:64:a2:68:
                    0f:c2:1a:b7:bd:90:c9:6c:e8:ca:d9:96:81:5e:7b:
                    6b:28:a1:66:04:8c:3f:46:b3:40:15:28:ac:bd:ab:
                    15:bf:90:9b:56:94:c8:6e:c5:e3:03:8e:86:f0:ee:
                    bc:98:c5:50:5e:fa:d2:00:aa:44:ed:68:6c:6b:c8:
                    ab:6f:cc:69:4c:4b:45:b9:08:45:dd:a9:96:36:a4:
                    ec:c9:ef:4c:23:ad:ce:65:2e:b0:3e:4b:1d:f6:1d:
                    d4:c7:ee:d4:0f:18:5e:69:5d:5c:3c:ae:c1:93:72:
                    fd:8f:a6:8c:9e:2e:f9:d6:ce:07:ad:32:e7:94:2d:
                    40:52:08:68:7d:51:56:33:c8:bc:25:e1:06:3e:e0:
                    cd:5f:5f:c0:3d:2b:65:7a:42:69:73:61:b3:0a:1a:
                    52:fd:5c:51:66:f8:27:2b:88:39:01:8c:25:ca:a1:
                    a7:bc:57:14:50:66:e6:c3:5c:a7:34:00:4e:fa:1f:
                    c0:38:97:eb:45:4f:aa:1b:c8:66:44:5e:6c:34:44:
                    9b:c3:c1:47:83:75:a7:f1:cc:6c:e6:c2:fb:59:43:
                    42:da:8f:18:fa:4a:99:1b:a9:0a:82:f7:9d:26:e0:
                    3c:7d:7a:14:88:1b:41:00:ea:47:dd:f7:0d:05:b4:
                    61:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A5:1F:2D:E8:CB:91:77:D7:16:AA:8D:83:E7:9B:81:A0:00:2E:AA
            X509v3 Authority Key Identifier:
                keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b1:2f:20:5c:ea:9a:7c:cf:73:63:f8:d8:36:6e:1b:8f:ae:
         ad:ed:e4:f1:2d:d3:c8:9b:47:36:78:23:12:53:14:56:fc:9a:
         a9:cd:21:29:11:4c:d4:8b:26:dc:0e:65:7a:6e:9a:84:64:1e:
         7d:3b:3b:e2:d9:bc:c2:fe:8c:f8:c7:b1:30:97:55:a5:ee:25:
         be:9a:a4:74:4e:d9:39:1e:09:6c:1c:9c:45:50:f6:85:48:46:
         bd:85:4b:d0:04:c3:3e:a3:41:cb:06:e4:58:a4:b1:83:72:41:
         50:bf:14:8a:05:c4:df:61:a6:f1:93:d3:92:fe:35:88:d9:7c:
         ad:5c:38:69:17:4f:5d:df:1e:a3:d2:48:c0:01:17:63:43:b3:
         c6:58:39:b1:78:03:f0:b5:3c:23:a3:bc:f5:71:15:a9:ab:95:
         bf:ec:e2:75:35:3c:09:dc:eb:e1:2d:4e:38:38:28:50:9b:47:
         2f:cf:c4:88:2c:61:45:70:4f:dc:07:28:41:0e:45:00:8a:73:
         91:02:9d:24:b6:64:b2:00:47:b1:ad:91:51:ad:a1:14:a3:9c:
         a8:bc:3a:64:c1:ed:a6:e0:8d:e0:f0:2a:4d:c6:11:e9:66:9a:
         22:5f:4a:c7:60:f2:aa:d6:9f:d3:f7:5c:14:01:49:10:67:27:
         b1:6f:f4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 17:45:54 2025 by rpki-client