Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
File:                     uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft (raw, json)
Hash identifier:          TN18/ylY6pznqqLq7Kwb3mq9+zg+YkUZEA8hi4EW7Og=
Subject key identifier:   1B:42:19:24:2F:26:5A:A2:DD:DE:B0:8B:9E:12:51:D5:5C:A2:9E:40
Authority key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
Certificate issuer:       /CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Certificate serial:       0199221F51139D06C81888411C552F5B1627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 03:01:41 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:41 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:41 +0000
Files and hashes:         1: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl (hash: 30gWUKZtcET45rn424Zn9bJ+R+M8MjG2+lV7rat9CZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1f:51:13:9d:06:c8:18:88:41:1c:55:2f:5b:16:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84b63058658a59ecbbf44395bf16f780dc929cc
        Validity
            Not Before: Sep  7 03:01:41 2025 GMT
            Not After : Sep  8 03:01:41 2025 GMT
        Subject: CN=1b4219242f265aa2dddeb08b9e1251d55ca29e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:80:50:a8:bd:3f:09:ea:71:31:96:7f:05:f5:
                    34:49:53:c7:d3:2f:28:7c:f6:36:85:3c:90:e0:38:
                    17:a1:19:99:c0:c9:35:a4:9c:81:1c:f5:f3:5d:32:
                    26:29:1e:d4:61:d8:48:59:ee:9e:16:9d:ae:f5:31:
                    54:95:42:01:cd:fa:0f:ad:9f:ee:9d:9d:6c:4d:0f:
                    7f:e2:9b:bd:46:be:ad:ae:7c:7b:91:59:75:53:e0:
                    7d:51:ae:b3:5f:3c:bb:e8:8f:96:e5:58:02:a7:98:
                    b8:84:f3:8d:6d:29:a2:47:a1:c6:08:0e:5e:3a:60:
                    9f:c5:7b:36:59:3f:ec:52:38:2a:fc:43:d6:87:fd:
                    60:4b:a9:b7:70:f4:87:bb:ef:1e:fb:15:5d:e6:a6:
                    7f:0d:b6:5f:0b:64:ee:4d:e2:88:60:b8:7f:98:7f:
                    f0:6e:79:fa:24:97:63:bf:bb:af:09:c0:94:7e:fe:
                    c8:a7:55:7d:77:85:89:c7:33:87:b2:33:65:ae:48:
                    cc:4f:52:a3:db:ac:85:a7:e6:93:e8:24:36:f2:06:
                    51:4e:23:04:25:50:d3:5e:37:7d:19:29:b4:58:b1:
                    eb:4d:88:7b:70:a7:ae:00:07:c6:b6:67:b3:40:4c:
                    69:a3:6c:9c:31:e3:13:2d:a8:39:92:e6:0b:f1:f8:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:42:19:24:2F:26:5A:A2:DD:DE:B0:8B:9E:12:51:D5:5C:A2:9E:40
            X509v3 Authority Key Identifier:
                keyid:B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d4:ab:8a:fc:69:ff:ed:d9:0a:a1:d3:5b:da:b4:05:fe:ce:
         35:c3:1f:a7:3c:4b:c1:2d:a7:5c:d1:1a:46:a2:f4:e6:d1:43:
         fd:6d:2b:c6:6a:6e:bd:d7:9a:9b:eb:0c:07:44:b5:aa:15:53:
         81:a9:2a:a8:52:f8:a1:7c:d4:40:79:5d:5d:68:62:3f:62:5b:
         64:58:c3:16:12:9b:84:00:5e:d1:26:9e:f2:86:c4:15:d3:76:
         dc:4e:47:c8:3d:2c:3f:c5:0d:59:5d:6c:9e:d9:8b:1e:f2:99:
         0b:8c:2b:e8:ba:b7:8d:1d:44:1b:62:9a:ba:62:f6:86:9d:44:
         5d:46:35:89:c4:82:73:8e:33:8f:87:a1:51:ea:83:35:19:a2:
         21:ed:6d:60:a6:a2:c9:c6:a9:bc:ef:ec:24:c1:8a:57:cb:f0:
         4d:87:21:ec:12:b8:e0:02:99:9e:a0:c5:d5:ed:c6:15:0b:a0:
         50:3c:7e:f7:70:c5:23:e3:63:95:77:b9:77:57:9c:53:64:84:
         58:8d:04:b2:8f:73:a6:89:32:7e:a5:78:a2:f6:4f:94:e7:9f:
         8e:2f:e3:b2:d5:2e:c3:56:0b:55:7e:f5:0b:fd:a6:4c:a7:6a:
         ce:2e:46:0a:1c:4d:c7:53:a4:78:16:21:25:05:cb:0c:d1:8e:
         50:1f:bc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:15 2025 by rpki-client