Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
File:                     f3NriKAkBNQwS92tX_VQSmgz57c.mft (raw, json)
Hash identifier:          XIYcX8ysHPhfuf3ezv7a7gDx13fhpC7hG6T2V5IZ22M=
Subject key identifier:   50:A4:C1:D9:A3:34:18:6F:76:08:AE:D3:EB:FD:DA:46:E1:58:8C:D5
Authority key identifier: 7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
Certificate issuer:       /CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Certificate serial:       019921B09947BCB3089831E4BD42CB296D70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
Manifest number:          166D
Signing time:             Sun 07 Sep 2025 01:00:45 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:45 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:45 +0000
Files and hashes:         1: f3NriKAkBNQwS92tX_VQSmgz57c.crl (hash: WJ6LJY90g7S39W4/+OulJxQV50GN8DJ5zNTlVWMD0qQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:99:47:bc:b3:08:98:31:e4:bd:42:cb:29:6d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
        Validity
            Not Before: Sep  7 01:00:45 2025 GMT
            Not After : Sep  8 01:00:45 2025 GMT
        Subject: CN=50a4c1d9a334186f7608aed3ebfdda46e1588cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:0d:04:14:89:a6:ed:91:16:50:92:be:61:
                    93:bb:19:bb:a5:1d:2b:71:b2:05:fd:b7:16:0d:11:
                    3b:37:e9:fe:e1:ca:34:a0:f6:d8:8d:8d:7e:8b:26:
                    5b:91:82:da:d4:49:bb:28:6d:f3:c9:d6:e2:04:e8:
                    01:95:b8:66:06:a2:54:dd:c2:b0:73:86:ef:05:eb:
                    c4:36:e5:71:f7:c5:21:0c:75:74:39:7a:5e:4b:96:
                    e2:00:bc:1c:30:58:02:bf:f1:7c:80:a5:06:8f:eb:
                    d0:e2:64:eb:15:58:71:f7:20:77:87:3d:8f:17:f9:
                    98:2c:66:95:16:87:84:01:36:2b:b2:e0:07:d2:b2:
                    86:11:81:52:18:aa:5f:0f:4d:07:01:47:21:7f:0f:
                    ae:b6:68:d2:31:cd:3b:e1:35:9a:48:2b:ea:77:49:
                    3d:d7:e8:f3:59:e2:f0:13:55:2a:47:fb:de:22:00:
                    45:9c:1f:54:e1:e8:e6:46:0c:de:9b:ae:a2:54:0c:
                    57:08:f5:c5:10:a2:57:01:35:52:81:58:e9:c1:6e:
                    2d:ae:53:64:a6:72:12:8c:6a:07:ee:c3:c0:4a:c2:
                    8b:03:d9:8d:b8:77:dc:ab:36:fc:52:e6:9b:f5:60:
                    9f:5e:de:7a:28:fc:b4:8a:46:7a:ae:41:9c:c3:65:
                    88:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A4:C1:D9:A3:34:18:6F:76:08:AE:D3:EB:FD:DA:46:E1:58:8C:D5
            X509v3 Authority Key Identifier:
                keyid:7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4f:ce:5f:1b:47:4e:2b:99:05:95:17:7c:55:73:12:ff:c9:
         df:75:fb:be:b4:f3:a7:34:24:df:d5:42:03:ae:c2:c8:85:c2:
         60:1c:31:18:c3:41:1f:86:fa:ab:e5:12:82:fb:36:dc:03:33:
         2e:2b:9c:dd:2b:b4:77:76:00:bc:a1:6e:bd:6a:f2:10:ab:47:
         a6:70:2e:4a:d1:10:e5:54:b8:40:19:f4:f9:7a:b2:43:ae:cf:
         09:c8:c9:1d:d6:0a:7b:81:42:4e:ed:c3:31:94:99:7e:8f:5c:
         55:be:13:18:64:e9:f0:0e:0c:70:59:97:00:d0:f2:b0:47:54:
         5b:35:bc:ef:d4:d5:c9:de:4a:6a:20:40:1f:0d:7e:ec:6b:69:
         d0:75:12:2a:84:61:a5:de:40:da:d2:0d:d0:aa:a1:93:26:78:
         75:9f:d1:33:d0:ce:d9:7a:59:5f:80:2a:68:21:0c:f1:c6:24:
         31:7d:28:a9:7c:85:fb:50:bd:34:a6:44:a7:c9:5c:34:fd:20:
         49:ad:84:f5:58:27:97:c0:94:a5:50:cc:17:12:fb:eb:ce:3c:
         8e:5b:69:d8:5d:be:f0:fb:6e:7a:61:21:ec:51:96:56:99:80:
         95:50:ac:06:5d:ef:98:10:00:97:7e:49:e7:3a:33:b4:b6:fc:
         f5:a2:19:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:33 2025 by rpki-client