Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
File:                     7YAJUKMdzayqxWrbk2pCvrhF4ks.mft (raw, json)
Hash identifier:          vGWx4dQw0zsR5ePAN1IOleJCLeFLrhK9FbqKdEAb5e0=
Subject key identifier:   1E:40:A3:C0:2A:04:A6:9D:4B:F8:0A:0D:95:88:EF:67:2E:C9:E9:7C
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Certificate issuer:       /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial:       0199221E7804D145FD0A6CD584E9C0417C98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
Manifest number:          167D
Signing time:             Sun 07 Sep 2025 03:00:46 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:46 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:46 +0000
Files and hashes:         1: 5MV2rdKN5gFzkLwT07F5rTi7omY.roa (hash: D3LvO+IMQRq6IdrMAHkY6QYNoiaJ3ZDYs8dNG78o/Fs=)
                          2: 6h2yqqYWrRghoIoxZYGFzpWfew0.roa (hash: U+lnqoe9GQk5UXj86Etet1S1TemuykTuT7gj4NeX2wA=)
                          3: 71BeoRLY37qqGRrW0q7PaZ4MISA.roa (hash: q87wHV6L3WsqVGDtFfCxv18cXyNSbCqzEF0eTOVfAv8=)
                          4: 7YAJUKMdzayqxWrbk2pCvrhF4ks.crl (hash: UsGIMGslfyfUy3/pFRJdy7T1Hrw8njB4LTF+cC1zghQ=)
                          5: Z2fOpxeOdQMYHdkDGfltSVuJwJQ.roa (hash: cNSmYsaFbWz1KHK5w6io+60UGsIvpGDu7K4HhPw9GkE=)
                          6: iXWiAu38fSPYWYABMk3KTWR8J94.roa (hash: PeV/ss1h89xDLD9aBvw1HJFSN2Rx7428f2qqc6I2rMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:78:04:d1:45:fd:0a:6c:d5:84:e9:c0:41:7c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
        Validity
            Not Before: Sep  7 03:00:46 2025 GMT
            Not After : Sep  8 03:00:46 2025 GMT
        Subject: CN=1e40a3c02a04a69d4bf80a0d9588ef672ec9e97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:89:cc:57:e8:5a:1f:bb:ea:2b:82:9b:e3:
                    8b:94:67:0f:17:70:9f:5f:8e:52:52:26:99:11:c7:
                    47:22:c1:52:e7:4b:8c:c3:5a:6d:86:61:88:63:9c:
                    12:f4:2b:9c:a2:90:bd:31:54:bf:cf:fb:28:89:8c:
                    c1:33:85:75:27:8c:3a:2a:a4:17:94:ee:e8:ea:a2:
                    47:d6:ed:52:1d:ee:a4:63:06:65:1a:37:31:32:72:
                    97:2c:cb:74:9a:7b:44:a5:33:be:f6:58:cb:76:14:
                    df:5d:70:7e:d2:83:ba:63:0c:6e:ab:97:c7:ce:5f:
                    2c:76:4a:3a:1f:a8:fc:bd:c2:cb:ad:99:0d:2d:93:
                    63:4a:c6:57:83:c1:64:e9:2b:f5:6d:41:aa:5c:71:
                    06:93:2b:ab:67:9c:62:45:b5:a8:5f:ff:ab:7f:93:
                    5f:8f:f4:db:ee:8e:23:1a:38:26:1e:fd:8d:d5:f1:
                    d0:0c:b8:2d:f5:9f:d9:01:e3:58:cd:b9:87:ba:e5:
                    76:28:55:fd:2b:ee:87:2f:7c:33:18:da:0e:52:5f:
                    22:a5:56:91:42:76:b3:ce:bb:75:85:58:4d:d4:bc:
                    2b:4e:c1:54:ef:c4:35:d7:27:dc:34:5e:88:cd:92:
                    43:94:85:c2:1a:38:04:6f:02:2e:38:e6:c0:99:17:
                    3e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:40:A3:C0:2A:04:A6:9D:4B:F8:0A:0D:95:88:EF:67:2E:C9:E9:7C
            X509v3 Authority Key Identifier:
                keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ca:91:92:57:10:43:1c:75:ba:fc:da:86:92:6c:dc:09:d1:
         c1:b1:d7:b1:41:cc:15:c5:fa:bb:83:f3:de:d4:37:60:1d:42:
         20:2d:4c:a2:fc:f2:2d:f3:a3:27:2e:b5:91:fe:dd:cf:c1:bb:
         c0:b1:b5:d5:28:dd:4e:b1:b5:19:f4:88:c7:18:09:7a:90:8b:
         37:0f:21:4a:60:6f:1b:19:e7:0c:7f:39:11:9a:af:80:e1:d9:
         9f:e5:63:f0:47:b2:2d:05:88:45:46:33:77:49:06:f1:6a:ba:
         89:03:b7:df:8f:71:f5:ca:7c:6a:b3:11:5a:c8:b7:99:3d:e3:
         eb:49:fd:f6:f4:4f:1e:9c:eb:af:80:ad:5c:13:71:ff:60:70:
         2e:04:c1:4a:88:71:74:c7:e7:28:07:2d:79:ec:39:c8:21:09:
         83:22:0c:8d:5c:17:c0:e5:3d:98:84:bb:ab:cd:88:7d:47:19:
         e6:d9:28:59:7b:94:11:32:7d:d3:11:30:92:94:ac:ca:24:9e:
         86:ea:8a:ce:ad:98:25:07:a6:13:40:8b:c1:6b:26:3b:ba:07:
         6f:da:59:d7:94:d5:7d:3e:5e:c9:55:86:6c:70:af:94:70:87:
         8f:63:1f:d8:bc:54:ae:04:41:f3:92:9c:5d:c6:fa:1b:9d:fa:
         b6:7e:0b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:39 2025 by rpki-client