Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
File:                     rnqbF0Wlpww797zCwu4WZGCv96g.mft (raw, json)
Hash identifier:          wP5SzQNa/cjsmrt97I+odP13u+R5RX/Qj77Zp7AYkpY=
Subject key identifier:   55:04:39:90:8C:19:98:64:F0:0E:8B:E4:D9:ED:6D:D3:FA:23:16:69
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Certificate issuer:       /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial:       019921B24529F9E49A4FA1E9EE097D7368B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
Manifest number:          167F
Signing time:             Sun 07 Sep 2025 01:02:35 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:35 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:35 +0000
Files and hashes:         1: NAiMyHsQ-abKVP6U5ZpEK_DkHV4.roa (hash: UKGnXTi/GeJEOIoHxk7WzSeeqHfs9EFC0zZJNKKSIz0=)
                          2: XA_piEc4HEvUHExh_2CSkkKu2EE.roa (hash: o4y+DZ7Kqo85gSPTmaUUa/xs87y4f7OVpkKcmJxleCE=)
                          3: f8xBUwiIZuwlbLideHYCraA5b80.roa (hash: 80zoqn9Od9Yp6Ppqm8QLXbeCtAS1Mylgf7fSAtsOaVc=)
                          4: lR6zP5U5RH-kGUiT4tee76n_n7U.roa (hash: d+2joVrqEnxO1Au13OpUY3xGwfVao9EUryyrW7jhHKE=)
                          5: rmFBYhkjlSHMaC1DXr2-oqhjCZ4.roa (hash: ANGzzWXs9WMc8fyGIbBpWcfcISDjUPoF4F+e/jtJ45I=)
                          6: rnqbF0Wlpww797zCwu4WZGCv96g.crl (hash: wFJWAPZhe8YI30907r9KRNnQ+rupI//Hts1HLvdG1uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:45:29:f9:e4:9a:4f:a1:e9:ee:09:7d:73:68:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
        Validity
            Not Before: Sep  7 01:02:35 2025 GMT
            Not After : Sep  8 01:02:35 2025 GMT
        Subject: CN=550439908c199864f00e8be4d9ed6dd3fa231669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:6d:ac:f7:42:3b:d1:3f:ad:8e:dc:1d:01:
                    ac:d7:d7:06:49:50:9e:c7:ab:fa:41:53:45:f3:50:
                    da:b7:78:14:f2:03:ef:8a:e2:9b:b0:94:40:e4:02:
                    31:06:12:1d:c8:fc:f7:4c:22:47:d8:09:e5:04:0c:
                    5b:60:ba:38:ac:10:ba:7d:62:52:e7:a7:56:2f:05:
                    6b:f3:8d:b0:02:a1:7e:c2:f7:f8:f0:86:f1:83:07:
                    06:24:e7:59:d7:6b:8e:a7:bb:ac:fc:01:cf:1b:c3:
                    7d:1e:df:e8:42:c3:c2:d2:5b:e5:6b:be:53:b1:18:
                    15:77:26:68:30:60:54:76:bf:dc:6b:11:7f:f0:c0:
                    56:de:93:6e:29:2e:01:38:21:d8:55:04:46:56:91:
                    cf:67:6c:6b:e2:44:ed:fe:35:eb:08:ec:03:71:56:
                    ac:eb:52:00:bb:70:ae:9f:33:0b:31:27:89:cc:d6:
                    c7:8c:ef:c0:cc:9c:7a:a6:c8:a1:a2:96:8b:a8:aa:
                    d8:fd:89:fd:7e:03:8e:80:89:a2:c9:ff:90:32:ad:
                    70:e5:03:86:26:e3:dd:fc:97:5e:85:d5:45:76:a7:
                    2c:ba:7d:08:84:cf:c8:f2:61:a5:8f:0b:59:36:8d:
                    b2:bd:03:e4:c2:dd:d9:58:78:dd:27:29:d8:d9:c6:
                    03:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:04:39:90:8C:19:98:64:F0:0E:8B:E4:D9:ED:6D:D3:FA:23:16:69
            X509v3 Authority Key Identifier:
                keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d1:74:18:57:45:56:a3:32:70:07:dc:53:cf:24:bd:a3:18:
         a9:e8:99:b1:c7:ef:15:00:e8:5f:17:77:db:98:b1:06:9a:89:
         7a:5a:4e:b9:69:4c:da:9e:53:f5:bd:91:2b:fa:14:11:37:5c:
         bb:6b:32:42:f5:08:27:ea:c2:cc:c9:f0:8c:e5:82:ee:60:a6:
         56:90:4c:8c:59:ea:5a:0a:9a:8e:19:a9:9a:8c:0f:e6:e3:a5:
         af:9f:d3:d6:99:eb:b2:97:80:45:81:34:01:21:72:f6:9c:66:
         40:dc:e3:9a:13:51:5f:c9:83:0e:ec:a0:44:28:df:c6:a5:55:
         d4:2a:5a:1b:04:67:bd:e2:de:bf:1b:f1:e6:b6:22:3d:6b:45:
         7d:56:1a:06:cc:4c:81:1e:4e:5e:66:19:15:88:88:23:df:86:
         cf:c6:b0:81:c2:16:d9:c8:2b:91:dd:7e:2e:30:ae:b0:55:ce:
         76:e7:ec:3c:23:20:58:b4:b7:94:f1:b8:86:ce:0e:08:73:b8:
         a2:a4:c3:cb:e6:54:95:a4:3d:20:7a:eb:51:1d:18:b6:80:c8:
         40:d6:fa:aa:a6:48:08:c6:5e:72:97:51:88:df:7a:84:ca:cb:
         5f:e3:b2:f5:3f:a8:ee:cc:09:f2:e8:e0:a7:2d:0e:8d:f0:6e:
         fc:14:f2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:47 2025 by rpki-client