Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File:                     06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier:          dhzJ8oZN8BDUWfcA7Myfn0ZZjtBjIFKsrHGHE42p4kU=
Subject key identifier:   C0:FC:3B:11:50:62:8F:16:68:06:8C:48:3F:62:E8:09:ED:61:63:F2
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer:       /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial:       019921B0E5671B58A02D61B5E595DB9237FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 01:01:05 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:05 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:05 +0000
Files and hashes:         1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: Fm3cAWXbUFOTJ/2s/N8mO6c6DoCV288XymYzV+gN6C0=)
                          2: ruzowO5hkwvsrCMVqncyR6RC2cM.roa (hash: 3UI+kEeYIksu5ENYxWY/kKHH2Zgvkj1CId+2uWMcQI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:e5:67:1b:58:a0:2d:61:b5:e5:95:db:92:37:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
        Validity
            Not Before: Sep  7 01:01:05 2025 GMT
            Not After : Sep  8 01:01:05 2025 GMT
        Subject: CN=c0fc3b1150628f1668068c483f62e809ed6163f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a3:d3:fa:bd:3c:79:f6:ff:10:4c:5c:1b:ae:
                    6f:7c:93:ae:ef:f8:df:85:0c:af:81:f5:94:06:5b:
                    8d:9a:66:8e:d7:23:45:dd:f4:5b:ea:61:43:df:8d:
                    65:32:b0:24:1c:9d:05:49:ef:cf:d9:34:74:e3:f5:
                    01:c9:b5:22:15:d0:18:15:3c:ba:66:55:7b:ad:c0:
                    90:e3:45:b1:50:98:a3:82:66:69:9c:81:2c:a9:f1:
                    60:f2:2b:5f:08:11:5e:46:0e:f1:52:5a:a6:da:4e:
                    be:57:e8:de:90:eb:65:7d:0d:c5:6b:4f:1e:15:7d:
                    c4:1e:b2:bb:ab:89:e8:ff:6d:db:0a:67:71:db:8d:
                    46:12:f1:f1:20:f2:2b:cb:3c:5c:fd:6c:f3:33:22:
                    a0:2e:15:9c:a2:88:84:fd:01:26:6c:99:48:bc:33:
                    fb:d7:26:d8:c5:61:a4:15:2d:05:d5:87:f1:90:69:
                    94:20:e1:af:00:9a:32:3e:e3:41:8a:84:9f:9b:90:
                    29:1e:98:65:15:ce:f5:8c:10:1a:09:5d:93:30:66:
                    3c:4c:37:ef:55:6d:5f:c6:47:01:3f:f7:6b:c5:ec:
                    a9:53:4c:c9:63:d4:09:e1:70:32:ef:96:d5:54:84:
                    ba:22:67:d9:fd:b6:32:65:13:24:b1:22:fa:0e:d5:
                    fc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FC:3B:11:50:62:8F:16:68:06:8C:48:3F:62:E8:09:ED:61:63:F2
            X509v3 Authority Key Identifier:
                keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d8:9d:ab:ff:5c:a2:bc:fb:de:d3:2b:fb:34:80:2c:82:c0:
         c5:ff:40:c0:a2:1d:7f:63:31:55:47:db:f2:94:93:fc:4e:dd:
         fd:ac:fe:22:9e:9b:0e:0b:de:68:ec:18:00:fe:ca:48:40:68:
         a6:01:bf:19:5a:c7:9d:3e:9b:eb:fb:18:aa:7d:79:f0:d0:a5:
         fc:e4:0c:69:59:aa:53:a6:a9:3b:10:ff:3e:70:03:87:3a:4c:
         58:e9:8b:22:66:18:f1:cc:6e:76:a6:38:cd:3e:38:f3:ef:a8:
         34:36:05:5a:94:6d:f1:6f:6c:e5:ac:6c:4b:af:73:0e:e1:8f:
         a5:3f:5e:01:fa:ef:79:57:f6:df:82:86:09:d1:70:62:56:b2:
         ff:e8:ab:3c:2e:cd:3e:86:0f:97:83:13:8d:76:08:a4:87:df:
         07:39:c9:55:fc:6e:c8:0c:aa:cb:b0:6e:fb:9b:9e:81:0e:25:
         c9:eb:e7:14:e3:bb:e5:de:57:3e:6c:af:c3:c6:be:89:8c:46:
         a9:ba:c3:f8:10:c0:93:9e:6c:d8:a6:43:d9:a6:84:d2:c3:cd:
         69:e8:6a:05:f1:af:c2:1b:51:82:f0:43:db:1c:5e:6e:34:ac:
         ce:11:2d:66:26:92:04:5f:ff:d2:d7:52:8a:c7:e1:52:61:91:
         15:09:7b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:06 2025 by rpki-client