Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File:                     Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier:          I8ueOwLufvp+X59To+ndBr9I4txltLH081U8x4pGreY=
Subject key identifier:   6A:F1:8F:06:8D:0A:41:45:D7:97:38:F2:79:73:5A:1A:E8:34:A5:50
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer:       /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial:       0199221E4A79144EA7DD1B4718895E55AF1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 03:00:34 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:34 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:34 +0000
Files and hashes:         1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: qDbfCjFUg9m21/A8FNXpHX/miCkWAkGjHPj70WVm2hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:4a:79:14:4e:a7:dd:1b:47:18:89:5e:55:af:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
        Validity
            Not Before: Sep  7 03:00:34 2025 GMT
            Not After : Sep  8 03:00:34 2025 GMT
        Subject: CN=6af18f068d0a4145d79738f279735a1ae834a550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:36:79:2a:71:dd:10:23:e9:79:40:c9:c0:
                    e3:4f:dd:d7:8f:af:5b:9d:78:c5:bd:1e:63:51:94:
                    e3:f6:92:d4:30:09:d5:7e:b8:6a:a3:55:20:85:f3:
                    21:5f:81:1f:60:4c:e2:57:f6:89:bb:4c:d4:15:dd:
                    b5:91:70:62:d2:50:62:a3:da:a7:78:f0:b7:8e:45:
                    2c:71:20:32:4c:dd:44:b9:a6:fd:9c:bf:59:16:fa:
                    3c:18:e9:bd:49:fd:5a:b5:1b:38:2d:b8:ac:83:73:
                    f4:a2:73:a7:35:49:79:20:2e:f1:1f:b7:d0:92:17:
                    a9:45:a6:b8:02:1a:09:bf:58:f1:bc:1f:5e:27:7f:
                    b1:57:41:90:1c:9c:cd:a1:3a:4e:00:33:b0:87:30:
                    00:46:b3:02:a3:f2:22:cd:c2:8d:6a:b2:42:ae:95:
                    15:7b:10:f8:fb:7e:ea:3c:9a:66:69:23:c1:75:9a:
                    7e:d1:89:d7:e9:11:4f:46:3e:a8:0d:0e:f9:3f:58:
                    77:f1:85:0c:6d:ce:22:16:2a:ff:b4:3a:66:24:fb:
                    d5:ba:0c:a5:21:77:06:54:ac:b3:94:09:f0:0c:8c:
                    78:88:e1:00:b2:80:65:03:df:21:20:14:bf:ba:0f:
                    2b:6d:1b:68:cb:44:39:6b:ff:77:30:d5:0c:6f:f6:
                    60:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F1:8F:06:8D:0A:41:45:D7:97:38:F2:79:73:5A:1A:E8:34:A5:50
            X509v3 Authority Key Identifier:
                keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cc:c0:53:3d:7a:b3:d3:bd:a8:39:6b:e2:5f:4c:cc:d6:98:
         e4:b0:3f:70:4c:00:ab:39:a7:a0:02:82:94:a8:2b:73:8f:4c:
         93:bd:9f:0e:b8:e6:8d:d4:5d:72:13:3f:d1:3d:74:5c:85:20:
         17:ab:cf:2d:df:c8:0c:0b:f6:4c:29:e1:5c:a6:f3:af:01:9d:
         cd:5c:23:59:99:8b:52:de:37:c8:a6:fb:93:54:b3:31:74:92:
         87:f3:14:e8:49:fe:09:41:e5:fb:9d:5a:b2:cd:cf:63:c5:78:
         b3:6e:6e:36:d3:a3:16:81:b9:6f:68:10:2e:db:7a:92:65:72:
         31:1e:d4:ca:16:88:54:44:a2:7c:c7:58:81:79:bd:64:bb:c1:
         40:55:fe:bc:6f:db:b9:d8:71:5a:ac:5d:d0:a0:23:5c:92:45:
         ae:23:32:e4:59:f2:66:24:e8:a2:1e:09:6c:21:3c:c0:c2:b1:
         58:0e:f9:5c:d2:ab:7d:70:12:cc:2a:2b:5b:ac:8d:22:45:b0:
         3a:90:00:3a:bf:92:db:b2:e2:44:24:d4:25:61:6d:ca:4a:93:
         56:9d:a2:81:a1:54:da:98:93:48:48:99:02:9c:5f:6c:c1:26:
         52:9c:93:11:c3:01:71:74:e0:d3:44:58:60:3e:ec:ad:c3:d2:
         a5:d4:14:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:22 2025 by rpki-client