Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
File:                     8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json)
Hash identifier:          wOuvy3L6mxc8zW6yUq07DSdpBT3KnHBrfSVj5/bOxEI=
Subject key identifier:   D9:A5:6F:F2:B7:05:3E:0F:FB:4F:21:CF:06:24:94:AB:C4:6E:EC:49
Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
Certificate issuer:       /CN=f16b28416ddbf39fb24b0996686acface76c98d5
Certificate serial:       019916BF36C683340388E0A53DA63B74089A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
Manifest number:          166E
Signing time:             Thu 04 Sep 2025 22:00:54 +0000
Manifest this update:     Thu 04 Sep 2025 22:00:54 +0000
Manifest next update:     Fri 05 Sep 2025 22:00:54 +0000
Files and hashes:         1: 6uJHb0n-o1Jmt4WfrkKYtugW_tA.roa (hash: oripnuB9VSq+/2+WmWeFeymLsX3aSd+Xhezj6MQbB30=)
                          2: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: o9lqY875bNFV78RHsWTlVVFmkW1CUWTdq/yLHHNhsQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:bf:36:c6:83:34:03:88:e0:a5:3d:a6:3b:74:08:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5
        Validity
            Not Before: Sep  4 22:00:54 2025 GMT
            Not After : Sep  5 22:00:54 2025 GMT
        Subject: CN=d9a56ff2b7053e0ffb4f21cf062494abc46eec49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:88:b0:fd:15:85:9d:06:6e:1b:86:6e:7f:
                    28:58:e2:fa:3c:ba:13:2b:53:5b:de:53:54:31:ef:
                    c1:bb:fc:e4:f4:8a:a9:16:20:d7:5a:63:2e:b5:32:
                    7a:6c:1f:71:d4:81:aa:82:1d:8d:54:f5:ec:59:2b:
                    a4:10:33:20:76:c9:38:8e:21:39:63:53:b4:77:87:
                    77:ca:3f:f9:54:90:d6:f8:3a:e3:d6:07:28:b1:f3:
                    99:67:e3:af:05:98:73:e0:e0:62:91:e3:f6:0c:6f:
                    2a:8f:2e:88:b7:08:0d:77:8c:4b:43:30:81:1d:3a:
                    bd:da:56:fc:e9:52:ef:a9:62:c1:59:03:49:3c:8c:
                    b2:42:d2:59:7d:d5:5a:f8:55:b6:b4:f9:b5:3b:9e:
                    da:70:c7:dc:26:b0:a6:67:2b:c9:34:aa:8e:23:c5:
                    e1:50:99:4d:bb:2c:c0:c7:b6:d3:9b:87:89:34:2e:
                    50:35:14:9c:50:73:a6:56:20:cf:92:97:2c:7f:00:
                    b3:d5:b3:ae:63:74:8b:2a:99:92:60:ac:3d:16:6a:
                    85:7e:7e:3f:b8:63:4c:0b:70:aa:64:e2:ca:54:b4:
                    4a:49:78:04:2f:be:15:75:5f:66:36:24:e3:79:2c:
                    21:55:43:8b:4d:80:9e:e1:5f:05:04:39:0b:2f:c1:
                    4e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A5:6F:F2:B7:05:3E:0F:FB:4F:21:CF:06:24:94:AB:C4:6E:EC:49
            X509v3 Authority Key Identifier:
                keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:b8:03:43:f3:3d:01:65:67:ca:1e:09:64:59:6f:a8:31:b7:
         9f:23:9a:eb:22:ae:7b:2a:15:a3:a9:eb:69:69:86:6d:c6:2a:
         4a:4e:cd:d2:48:61:04:f5:33:a9:31:39:4f:c4:d2:34:6b:0f:
         ba:c4:fa:66:2f:f7:fe:93:25:3b:22:a0:80:66:dc:be:6d:94:
         17:78:e3:ea:d0:42:e6:d1:c9:35:3a:b2:69:33:ec:62:1d:ac:
         00:7d:50:ce:3e:5c:4a:31:2b:b7:96:8e:d6:7f:3b:17:86:66:
         b2:50:0e:8e:b3:ad:d7:55:5d:39:ed:e2:e8:b9:33:b7:a9:b1:
         a1:b0:06:ee:c1:94:e3:7a:97:a3:2e:7f:59:ba:4f:d0:21:b3:
         dc:f5:9d:37:da:5d:06:45:cf:f9:b3:a9:68:c7:39:b0:47:46:
         5d:56:a1:f2:42:97:31:95:48:41:d8:b4:36:c9:25:b3:37:c9:
         b4:c8:ee:52:49:1b:d5:93:20:66:0a:f1:ae:a7:59:88:6d:55:
         2b:ea:49:89:52:92:e0:78:90:a4:cf:f5:f2:78:37:6a:60:b1:
         62:1a:a5:ca:5c:b4:07:76:04:e2:95:19:b3:c3:9c:fb:97:bf:
         1f:16:81:71:18:89:82:2e:5e:e1:3e:c1:51:01:24:94:65:fb:
         e1:ce:12:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:08 2025 by rpki-client