Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
File:                     rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json)
Hash identifier:          pRVslzlXjM51qo5FBAL+/1NJFpZrfhF6dAgQZ6LBbOQ=
Subject key identifier:   2B:8A:4C:CC:6A:9F:A8:CD:FA:B1:59:8B:32:47:4F:9A:E0:18:0C:68
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Certificate issuer:       /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial:       0199312454DA8AACBCE7287581FEC5B5A610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
Manifest number:          167B
Signing time:             Wed 10 Sep 2025 01:01:28 +0000
Manifest this update:     Wed 10 Sep 2025 01:01:28 +0000
Manifest next update:     Thu 11 Sep 2025 01:01:28 +0000
Files and hashes:         1: 04xKoR3HixjwEV_dOrG3hKpzMP4.roa (hash: XSQ1jLSVKuR/7tbazdYV2Fv1OeY0/BCC+/gGVvZRwVw=)
                          2: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: 8DGkMQ236vghvIPSUPSZLMXiJkKl8JJOM4HYGbbvlvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 01:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:24:54:da:8a:ac:bc:e7:28:75:81:fe:c5:b5:a6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
        Validity
            Not Before: Sep 10 01:01:28 2025 GMT
            Not After : Sep 11 01:01:28 2025 GMT
        Subject: CN=2b8a4ccc6a9fa8cdfab1598b32474f9ae0180c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:28:18:e8:bd:75:0e:00:99:ae:ed:90:43:
                    70:9b:87:54:b7:08:72:c7:3d:7f:a1:9c:b3:fa:45:
                    d2:bb:ef:b2:a2:11:95:c8:3f:65:ab:1b:da:63:75:
                    eb:9e:6d:3e:14:fd:16:90:07:c0:78:4d:3b:1d:14:
                    2a:95:f5:62:9c:81:da:46:b2:62:87:52:37:97:85:
                    b6:88:a7:c1:fb:5e:5a:0a:5c:8b:59:f4:9f:8d:8e:
                    13:d9:73:c4:3a:62:be:49:ce:5e:ea:7b:cf:df:26:
                    a8:79:86:41:f8:fc:ef:c3:e3:be:3e:c0:6f:e0:36:
                    b3:f9:26:b6:5c:45:4c:1a:b0:84:03:32:64:2c:7b:
                    8f:b4:c9:75:7c:21:27:8a:bd:aa:06:98:fe:d8:26:
                    2f:50:45:fe:fd:57:20:66:ca:a6:e9:5f:ca:3f:aa:
                    b6:9a:41:d3:6a:64:24:7e:d1:ac:4c:f1:b6:bf:fd:
                    51:bf:6b:8f:97:eb:73:75:b7:1c:ba:62:96:2d:81:
                    f2:ec:f9:8d:7b:f3:c3:40:9b:c9:65:cc:bf:50:44:
                    8f:e4:77:cd:02:7e:49:7c:d7:a8:ca:6c:a2:bb:56:
                    53:22:9c:19:60:a1:ae:03:5d:03:94:dc:1d:6f:b8:
                    2c:12:a9:05:47:22:a4:f8:e0:5f:fe:05:ee:47:4e:
                    0c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8A:4C:CC:6A:9F:A8:CD:FA:B1:59:8B:32:47:4F:9A:E0:18:0C:68
            X509v3 Authority Key Identifier:
                keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ff:4d:96:a5:78:1a:d7:4e:1b:ba:7e:4b:53:d9:42:01:4b:
         a4:0d:59:3a:e3:bc:5e:34:ee:c6:25:5c:e6:9d:72:6d:82:75:
         6e:15:c3:82:5e:ed:00:bc:fc:7b:6e:81:76:94:16:bd:34:42:
         9c:d9:fb:3a:d4:85:5f:68:3c:61:d3:f7:bc:76:ac:91:99:90:
         32:3d:c0:d7:f2:d7:83:aa:7f:27:d7:46:7f:e5:f1:aa:4e:cd:
         da:d8:47:20:99:1e:87:c0:96:75:25:58:6a:0c:9a:6f:b1:b0:
         d3:32:7f:a8:19:62:6b:13:b7:07:17:f5:28:2d:47:61:a0:5b:
         a2:0c:6f:c7:a1:ad:c1:20:c1:f8:e4:16:e0:03:f2:a8:b2:36:
         88:12:65:7d:8a:12:f9:06:14:a9:86:99:86:aa:25:15:e8:1c:
         42:f3:f5:6c:15:5d:11:c3:4c:03:0c:35:ba:ac:ee:c0:95:8d:
         0e:f7:2e:c6:e2:03:95:9b:db:28:0b:7d:5e:fb:71:26:00:7b:
         8f:a9:15:c9:1f:ad:66:a7:d4:2f:36:3e:e6:de:47:c5:71:80:
         be:df:ba:86:f8:54:d8:2a:fa:b7:2e:bc:75:9a:af:44:1a:17:
         54:23:28:9e:db:c1:f3:54:49:c8:53:77:21:03:4f:cf:81:64:
         0a:16:92:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:04:35 2025 by rpki-client