Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
File:                     bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json)
Hash identifier:          7KnYN8yafCq+f+m5szvNkfcFrrpcvlwpJ6V/bw38U+s=
Subject key identifier:   34:E5:C1:BE:C0:2F:78:69:FF:66:58:0A:2B:FD:F1:11:B8:D7:BA:8A
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Certificate issuer:       /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial:       01993492C75D2560E84F7C5668E0615F7656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
Manifest number:          167B
Signing time:             Wed 10 Sep 2025 17:00:58 +0000
Manifest this update:     Wed 10 Sep 2025 17:00:58 +0000
Manifest next update:     Thu 11 Sep 2025 17:00:58 +0000
Files and hashes:         1: A15OC13YGMvTmICTCy1AZnVK3To.roa (hash: PwsIGkVItakh2uZVvAdvG2pZjqN/gexEPiOMZusjdcA=)
                          2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: Kpjx4PHY2zxcAC555eBPzFqNuAMmcb4LEiAUGLJtrP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:92:c7:5d:25:60:e8:4f:7c:56:68:e0:61:5f:76:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
        Validity
            Not Before: Sep 10 17:00:58 2025 GMT
            Not After : Sep 11 17:00:58 2025 GMT
        Subject: CN=34e5c1bec02f7869ff66580a2bfdf111b8d7ba8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:8a:e7:c5:46:cc:11:11:60:94:7e:34:e0:
                    eb:59:18:de:39:40:16:26:5a:d2:a9:d8:21:4a:c7:
                    d3:f5:ad:fc:09:3a:81:b0:70:9d:56:6d:1f:4f:bf:
                    48:00:0d:51:50:be:b7:43:72:e4:5c:4b:86:84:4a:
                    09:38:3f:17:21:f5:e6:b0:f6:4c:66:33:f3:40:f3:
                    11:ca:12:05:f5:22:bf:48:d6:08:b7:65:30:14:5d:
                    02:ac:f7:b2:8f:2d:54:31:79:2d:91:76:dc:0b:4d:
                    01:cf:2b:53:75:b0:3b:40:c8:02:22:9a:5f:15:8a:
                    00:96:06:02:8d:00:ec:9b:e9:63:24:f6:f3:f2:27:
                    75:50:19:e5:8e:db:69:6d:a1:f2:fc:0b:89:eb:b9:
                    48:f9:ce:3c:18:a8:db:d8:0b:aa:58:e7:c1:14:19:
                    8f:3b:a9:c1:b8:d8:42:87:0b:d6:a9:5a:48:52:e8:
                    b8:23:24:da:54:84:6c:68:05:fe:ba:f0:0d:e8:fc:
                    bf:6d:fe:e6:5d:1a:73:4f:e7:ad:1b:33:59:51:35:
                    4c:55:61:e8:7d:3f:3d:d1:aa:86:b5:50:ca:14:74:
                    22:e5:37:d3:2f:58:6e:ff:0b:21:24:d6:42:b8:ba:
                    29:3e:5a:ee:6d:6b:6b:42:5c:a0:b6:79:7b:13:ff:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E5:C1:BE:C0:2F:78:69:FF:66:58:0A:2B:FD:F1:11:B8:D7:BA:8A
            X509v3 Authority Key Identifier:
                keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bd:38:dc:38:f6:e3:9a:48:64:14:30:7d:a8:60:a1:c0:dd:
         5d:2f:4c:d8:4a:c4:76:7d:22:33:41:78:3c:9d:98:6b:08:36:
         ff:3e:f5:6e:e1:a6:13:ec:50:66:84:fb:2d:13:d3:aa:3d:96:
         f7:c0:7c:aa:0a:c9:0f:95:98:55:35:e7:0f:dd:e1:26:97:12:
         b5:71:ea:a3:23:a1:7b:9f:5b:ff:5e:02:ec:ad:e1:7b:e4:aa:
         66:e4:82:ed:be:5c:ae:80:38:e9:67:00:00:c3:f9:44:aa:1d:
         cb:2d:25:19:52:15:c5:93:6a:f9:9f:11:66:09:fb:82:e4:34:
         76:43:05:65:ee:6f:95:74:ef:ee:e2:7c:98:ab:ef:2b:17:46:
         7e:8f:c6:b0:42:8b:b2:de:26:98:99:04:2f:ba:f5:a0:d9:79:
         8c:ba:fe:c4:71:86:6d:5a:3b:94:6a:e5:c3:91:0d:12:f5:f5:
         b5:e7:29:e7:c9:25:82:3e:51:69:95:f6:15:e7:2f:a9:50:23:
         8d:49:05:dd:9e:7e:a7:ef:e9:ee:79:27:b4:86:84:b4:c2:f4:
         dd:17:c8:8c:e6:1c:22:c2:c3:a1:39:94:b5:26:61:27:f5:bc:
         b5:46:60:76:9f:00:f2:5f:ce:01:38:91:76:b4:e5:22:c2:72:
         71:f3:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:22:23 2025 by rpki-client