Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
File:                     g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json)
Hash identifier:          vu4TgbAocQYM0bw+ci95twPZXygDa1I1EaulJRSpecw=
Subject key identifier:   DA:AA:BD:C3:8B:69:44:1E:3E:2E:F9:29:29:AE:8C:B1:F8:11:BD:82
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Certificate issuer:       /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial:       01992D7E7C16928455500C71D7AD9612E0C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
Manifest number:          160B
Signing time:             Tue 09 Sep 2025 08:01:27 +0000
Manifest this update:     Tue 09 Sep 2025 08:01:27 +0000
Manifest next update:     Wed 10 Sep 2025 08:01:27 +0000
Files and hashes:         1: 7Atpb8ICQNgBoE2VxygDoXR916c.roa (hash: 9LfiFF+kHY8QeDVlYR0804RgSHl5CYTGB3eoMEBzGw0=)
                          2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: BBPL3Llk0ZBVMBWU59sS7f/Ha1f6j33zEgLMsq9mTdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 08:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:7e:7c:16:92:84:55:50:0c:71:d7:ad:96:12:e0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
        Validity
            Not Before: Sep  9 08:01:27 2025 GMT
            Not After : Sep 10 08:01:27 2025 GMT
        Subject: CN=daaabdc38b69441e3e2ef92929ae8cb1f811bd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:ca:37:c8:bc:9d:cf:b4:1f:0f:a1:c1:37:
                    68:ca:fd:a8:aa:75:0f:22:fb:28:e6:5b:9a:4a:7f:
                    1b:24:12:12:66:62:dd:02:32:ec:b3:a7:42:36:ae:
                    28:14:dc:96:f2:c7:9f:a7:55:a2:43:4b:8c:52:a3:
                    90:47:66:5e:45:b9:69:e4:aa:2e:7f:33:b7:96:30:
                    a9:91:45:cd:31:09:65:61:b1:36:bf:9e:51:17:34:
                    9f:65:0c:80:f9:f8:9f:cc:22:bf:94:c2:db:c4:83:
                    fe:e8:20:98:03:ec:f6:53:1a:7a:6a:6f:84:52:89:
                    4d:0a:7b:db:34:c8:de:cc:27:36:1a:a1:aa:ca:38:
                    55:d2:9d:8f:b7:74:69:94:3e:19:47:db:76:86:b9:
                    af:3a:b1:73:5d:53:4e:58:8a:57:c9:4b:89:14:b9:
                    d8:3b:65:39:bc:a0:ee:69:4c:fd:05:28:48:0f:6e:
                    aa:41:77:10:8b:a1:47:48:a4:1a:66:5e:32:8a:2a:
                    ce:2c:3b:3a:0f:11:ca:bb:9f:86:23:b4:59:ce:42:
                    0a:1b:f9:4e:dc:36:a5:b3:86:13:d6:a1:b4:2e:82:
                    74:0b:51:75:18:c1:e5:c6:8b:1a:ec:c0:89:47:e1:
                    7e:dd:f9:17:a3:b6:26:ce:42:19:3b:58:11:b0:14:
                    e6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AA:BD:C3:8B:69:44:1E:3E:2E:F9:29:29:AE:8C:B1:F8:11:BD:82
            X509v3 Authority Key Identifier:
                keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cd:ad:18:b1:37:45:1f:45:e8:ac:70:1c:4b:78:01:ee:0d:
         04:a7:ed:40:26:f5:71:a4:e8:12:5d:ce:b1:43:b7:6a:11:4e:
         d9:fb:e8:27:8a:06:1c:ff:28:51:47:de:2c:ab:5f:b8:f8:87:
         1d:75:08:49:44:35:c1:3b:4d:44:a7:c6:3c:c9:73:6e:b9:37:
         d5:59:69:5e:a6:2e:3d:ec:64:9b:ce:6b:2c:59:ea:78:4b:b0:
         ec:db:98:46:c7:ee:33:a2:e7:23:4b:4b:a8:ce:d4:27:6e:52:
         95:0c:8e:fd:be:a9:32:9b:39:21:15:86:4a:0b:7a:76:03:c1:
         ec:37:04:ea:43:f7:39:19:36:e6:47:fa:51:54:6c:15:de:56:
         36:87:15:4d:52:4c:79:f3:0d:a0:66:b6:63:ed:63:56:9b:a9:
         83:82:a4:3d:7e:b2:48:f6:50:eb:0c:5c:8d:62:c2:16:08:b9:
         10:f3:1f:cc:a5:81:11:a7:15:a6:a2:53:1e:ce:9b:4c:d6:f0:
         e8:c9:69:ab:06:9a:9a:b7:8d:ef:16:63:6f:59:b6:04:5c:c0:
         07:5d:5d:0a:b1:5f:ff:f4:3b:e0:35:20:fd:e6:35:61:ef:2e:
         63:ad:60:7b:49:2a:60:2c:0c:21:b3:70:77:29:d6:8e:b1:17:
         a8:66:78:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:55:57 2025 by rpki-client