Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File:                     SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier:          DC17w/nPL9EBokNVdAWujCMQ5Uv+guxGKdT2B3QI4VM=
Subject key identifier:   67:3B:69:7B:5A:0A:FA:D5:17:FA:A4:0D:03:39:EB:6B:F9:25:69:C9
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer:       /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial:       01992E906CA527130A5EBBB75416785A6687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number:          167B
Signing time:             Tue 09 Sep 2025 13:00:40 +0000
Manifest this update:     Tue 09 Sep 2025 13:00:40 +0000
Manifest next update:     Wed 10 Sep 2025 13:00:40 +0000
Files and hashes:         1: 0ghhSS3bKVZhw8XUGwgytRcqpMg.roa (hash: 5yQt6cwU2qkAgSrjPLqI1O3lJp1uRI2gxYBEBtwxPh0=)
                          2: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: w2bLvbNP3QXHixdQ4wbuvNBbIZAnJYMOyTql+qMzW10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2e:90:6c:a5:27:13:0a:5e:bb:b7:54:16:78:5a:66:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
        Validity
            Not Before: Sep  9 13:00:40 2025 GMT
            Not After : Sep 10 13:00:40 2025 GMT
        Subject: CN=673b697b5a0afad517faa40d0339eb6bf92569c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cd:17:26:37:ce:b6:52:5f:a5:eb:b1:c9:e0:
                    89:df:be:11:9e:63:25:f1:bd:4e:c5:63:5e:fe:af:
                    5b:79:22:f6:00:42:c6:08:fe:e7:91:1e:b1:f3:8a:
                    28:ed:c8:36:2e:b4:16:22:ee:94:f4:50:06:8b:33:
                    38:44:bd:b8:64:e2:e7:b6:78:d7:58:ed:b2:31:eb:
                    eb:6d:0b:0d:37:df:3e:30:9f:d9:90:17:13:a1:12:
                    4b:c5:2f:c5:ac:9e:cc:4c:28:15:4c:d9:7a:53:a7:
                    f8:ff:10:91:1c:4c:2b:d2:7a:73:43:32:94:99:64:
                    07:9e:19:0c:fa:8b:29:60:07:db:bf:74:68:fa:d5:
                    14:6a:d9:e8:9e:f1:44:38:02:3c:be:a2:66:40:3d:
                    be:8c:be:5f:cf:57:49:bf:4b:5f:2e:8f:b2:97:d3:
                    ca:21:9d:6d:ee:b8:34:7d:9a:9b:98:ff:4b:6d:0f:
                    f4:ae:0b:78:29:ee:60:a0:10:d2:ce:5c:ef:d9:23:
                    2f:aa:8f:fb:91:35:07:da:1f:ea:cd:3f:9b:1c:1a:
                    80:d7:16:74:31:3d:3d:24:41:41:89:b6:d3:96:f6:
                    af:9f:6c:55:c2:77:9b:02:40:ef:c5:57:c0:aa:39:
                    fa:41:db:3d:4b:94:22:85:b2:d9:eb:ea:7f:6f:cc:
                    08:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3B:69:7B:5A:0A:FA:D5:17:FA:A4:0D:03:39:EB:6B:F9:25:69:C9
            X509v3 Authority Key Identifier:
                keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:11:98:04:af:c5:29:b4:92:a9:c7:cc:b2:a3:90:34:8d:f6:
         42:65:83:76:51:ac:b7:ea:bc:4d:22:b6:01:70:3c:46:9e:28:
         64:b0:64:2b:e2:60:37:e5:cb:44:5a:43:9e:86:33:7c:4d:ac:
         28:7c:88:1c:fe:b5:b3:8d:ab:ae:f5:84:4d:35:f6:74:8c:b9:
         d0:9f:4d:83:b5:7c:35:e0:dd:3c:50:fb:ad:7c:0c:17:b9:3a:
         d6:88:11:8d:3e:6d:39:ee:50:da:34:9e:9c:00:74:25:15:37:
         df:c5:d0:09:59:d4:9d:2d:e0:94:27:44:a8:6c:7f:5c:45:46:
         fe:8f:43:69:24:74:ef:57:5d:c6:8f:1d:e9:8f:c9:66:80:ea:
         d7:8f:4b:4f:e7:79:5c:42:5a:17:5b:9f:a1:ff:2c:e5:36:55:
         93:a3:e8:19:7c:be:ef:79:c2:23:c9:9a:b0:6d:50:a1:c3:17:
         df:91:48:84:3e:4a:dc:df:17:19:ac:c5:96:73:91:1c:01:16:
         b3:ba:e2:2a:7d:32:00:2c:67:fa:2b:c3:67:64:2b:ff:ad:d4:
         3a:ce:a5:28:2c:63:8d:66:39:1b:2c:18:11:be:7e:92:4a:8d:
         13:20:cc:c4:eb:67:fe:ff:da:0d:45:60:17:e4:cd:65:a2:6c:
         cd:e2:65:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:59:54 2025 by rpki-client