Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
File:                     Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json)
Hash identifier:          UDpYHNvvH/bLquJit0pP/MQPdjZh20UMJ6lHBZr8wGo=
Subject key identifier:   FC:E3:6E:FE:E1:8D:66:51:8E:10:55:F8:A2:5F:61:44:4B:77:83:91
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Certificate issuer:       /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial:       019937947CB7AE3EB9C2028648E0AFFEC513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
Manifest number:          167E
Signing time:             Thu 11 Sep 2025 07:01:41 +0000
Manifest this update:     Thu 11 Sep 2025 07:01:41 +0000
Manifest next update:     Fri 12 Sep 2025 07:01:41 +0000
Files and hashes:         1: 1-tY6XrpLl6k8z4SEpjbzLTNn-Ts.roa (hash: NgyRH1HoSM4A0oGw3/Fq5tCBEmQWMjuDp+Z3SYU6zV0=)
                          2: H6gjp969pDik2dbvAHkeDvA39EU.roa (hash: uTBwtnz4xC6ZHA5AOiAmoUrvWCrVfYHdQ+TO4uHFF8M=)
                          3: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: KKv5uMmVRIyTeVtn6PfrYtH40UCBtBuBX0E+J9CBj6Q=)
                          4: lZXduURQIAy8fdzIUaz-JWRizD4.roa (hash: vA2TeloqgyuxxL+VT++WEALS/lCOLQ2+y5IcVHn+2Aw=)
                          5: oM8IOquHIgB1YBWLpM1pmBbc7O8.roa (hash: IV7XgqctfzxaP5G+ON8fYqKcchsupNcGfIWY1I+WU3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:94:7c:b7:ae:3e:b9:c2:02:86:48:e0:af:fe:c5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
        Validity
            Not Before: Sep 11 07:01:41 2025 GMT
            Not After : Sep 12 07:01:41 2025 GMT
        Subject: CN=fce36efee18d66518e1055f8a25f61444b778391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:7a:9d:db:bb:8e:5b:47:e7:85:04:56:87:
                    a8:03:25:44:5a:75:5f:98:c0:7f:6a:d1:56:ce:2e:
                    a5:63:a8:95:f3:0d:86:db:5c:2a:61:4c:95:1d:73:
                    4d:a5:ec:ad:88:62:92:b7:4c:99:ba:b6:99:dd:70:
                    46:3f:ce:73:c1:a4:29:f4:b6:85:7e:77:17:e0:60:
                    b3:9f:44:0f:49:fc:59:d1:0c:bf:1c:58:1e:55:3a:
                    d6:fd:4e:be:ff:47:1d:ff:e9:02:12:3d:54:3a:59:
                    e4:4a:75:fe:30:23:81:29:2a:29:9a:e8:13:7b:78:
                    3f:a5:32:ab:8b:2b:6f:4f:bb:47:97:e5:1a:c8:9e:
                    d8:f7:ba:3a:eb:9f:2a:3f:f6:fb:23:20:1b:2c:87:
                    2a:9b:05:8c:48:9c:62:29:cd:0b:7c:a8:d3:21:6a:
                    10:e0:5d:65:a0:9c:b6:1e:e9:58:51:53:b1:0f:7c:
                    53:84:fd:58:65:c3:8e:b0:44:ef:00:45:cd:12:b5:
                    40:4f:f5:fc:d1:a6:b1:ea:04:6e:2c:27:08:39:41:
                    ac:a9:6a:9f:e1:21:5f:cc:88:02:4e:d0:cc:47:e6:
                    88:06:23:88:b5:6a:e3:c1:aa:24:3e:7e:f7:c9:3b:
                    6a:f2:2c:8c:55:88:f3:56:9d:76:36:9f:0c:1f:d8:
                    1e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E3:6E:FE:E1:8D:66:51:8E:10:55:F8:A2:5F:61:44:4B:77:83:91
            X509v3 Authority Key Identifier:
                keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a3:37:e4:48:7a:30:1a:a8:16:3b:07:43:bc:a3:c4:3c:7c:
         69:89:63:95:4d:eb:78:87:57:3a:62:46:cf:91:31:15:cc:64:
         a7:9b:1f:c3:d9:92:a4:9d:d6:0b:21:a7:6b:d1:33:81:66:1a:
         04:7f:e8:fd:94:f1:38:fc:61:ad:9e:5f:5e:f3:c1:27:e3:b0:
         0e:dd:f1:25:4f:36:d1:6e:ac:c0:3d:f5:a2:76:c6:aa:1b:d3:
         e8:92:8c:56:47:ac:8c:7d:8a:0d:db:58:a0:02:37:de:e1:96:
         62:15:94:ce:1d:40:90:3e:5f:05:99:d1:f9:61:2b:ae:0c:81:
         46:75:24:3c:75:50:06:69:bc:15:3a:86:56:5d:a5:6f:85:e5:
         02:28:79:1b:86:8d:15:6c:87:90:51:f2:e4:95:b0:4e:9d:a3:
         1f:88:17:9c:ff:14:42:c4:86:b7:6c:05:2d:8c:91:13:3f:55:
         01:1c:bd:b3:7e:c8:d2:90:02:22:c0:c2:e5:03:ad:67:a6:61:
         2e:d1:82:6a:6e:f1:0e:25:6a:d3:a7:62:5f:e0:f1:03:7f:8d:
         5c:57:3d:ac:63:8e:0e:24:67:46:d5:64:18:ed:11:af:d0:92:
         f9:77:25:7f:23:ab:27:05:b0:62:a6:0b:86:35:a6:4a:82:af:
         7a:fb:81:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:53:20 2025 by rpki-client