Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File:                     7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier:          UcMquEywS7SDXr5YPOBS3YMSFJBaN2C2IJT5/2svi+k=
Subject key identifier:   6F:C8:48:B0:BF:80:6A:04:3D:A5:37:38:B0:53:65:2B:5E:F1:5E:A3
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer:       /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial:       0199221EF645B59430FEC943C6962FBD08D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 03:01:18 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:18 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:18 +0000
Files and hashes:         1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: oOt0qEJUXCF7bdfWv3NKpHwIwx6cYmLtITCuXt+O6Ac=)
                          2: DJI5pA0yQdHfWf9YZsCq7SLW83k.roa (hash: aYlNDPO2QXpilHLu8WGoR0IYFB4fHF6uZQ2LQMfMdjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:f6:45:b5:94:30:fe:c9:43:c6:96:2f:bd:08:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
        Validity
            Not Before: Sep  7 03:01:18 2025 GMT
            Not After : Sep  8 03:01:18 2025 GMT
        Subject: CN=6fc848b0bf806a043da53738b053652b5ef15ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:a4:8e:2d:c7:0c:c7:f7:1f:a6:be:87:3d:
                    27:bc:66:47:f1:c8:df:dd:ee:71:c2:62:e8:b7:66:
                    e9:c9:ba:b6:42:3e:0c:c7:80:31:76:00:f4:c6:db:
                    56:ad:54:ad:01:ca:84:e2:06:3f:33:cc:4c:70:66:
                    68:4d:5a:0c:47:57:3c:67:64:1a:26:61:c7:2b:4d:
                    ed:7a:8a:2b:cc:0b:c3:c2:ce:12:a5:64:c6:ca:da:
                    ae:46:13:cd:83:58:c0:e5:44:a9:fe:fa:8b:14:bc:
                    12:77:1a:b6:b0:c0:ab:ea:b0:de:d0:a0:e4:44:91:
                    79:4b:25:68:d9:d2:7a:98:1a:f9:e1:76:a6:7f:c5:
                    ed:50:92:16:f1:35:4c:f5:bc:45:77:3e:91:ce:3e:
                    79:10:46:b0:eb:46:ce:72:b6:7d:86:33:8b:ab:ea:
                    f7:ae:c7:6c:65:e6:0e:58:19:3d:27:78:4a:9e:6b:
                    e8:21:5a:9e:fd:7c:29:aa:16:55:ab:86:e5:56:55:
                    f7:cf:26:ff:80:38:bc:2e:cf:3b:d2:74:8a:c2:bd:
                    63:43:ef:49:e0:53:50:b0:79:94:88:54:fe:29:48:
                    a3:c1:95:3b:c0:db:c5:8a:f8:20:85:63:54:5d:0a:
                    e1:5c:59:b7:97:68:d9:d5:40:68:3a:e8:48:e1:68:
                    ae:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C8:48:B0:BF:80:6A:04:3D:A5:37:38:B0:53:65:2B:5E:F1:5E:A3
            X509v3 Authority Key Identifier:
                keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b0:c6:73:45:ad:74:85:cb:35:8a:68:9c:14:07:a8:de:5e:
         c3:f7:0f:6b:34:af:78:d3:30:91:12:f4:8e:c0:02:d9:cf:5e:
         0d:72:f7:e1:43:26:d2:c5:a7:1f:48:a1:34:68:2c:8d:64:02:
         e9:9b:8b:88:1a:de:ac:84:d7:7c:f1:d9:60:05:fa:e1:f3:9e:
         da:67:22:af:17:c6:40:03:2a:3b:1e:17:68:1a:93:fe:c6:3b:
         33:f6:d2:34:e2:b7:46:18:3f:83:dd:ed:c7:b9:76:c2:3c:ef:
         36:6d:1a:94:52:1a:54:17:ef:fb:a6:91:7e:b2:d5:08:29:e1:
         0a:7a:14:bb:a3:92:80:fc:76:d6:ef:fe:6f:59:fc:00:9a:8e:
         8b:35:b3:14:19:6d:f4:bd:ba:96:90:92:0d:b9:aa:99:b9:c3:
         d8:40:71:78:1c:2a:19:0b:ac:56:58:c7:81:87:76:17:01:80:
         2c:35:26:e4:6c:cb:f0:d4:8c:05:64:5a:01:18:90:6d:7a:cb:
         d7:bd:3c:8f:54:c4:d2:46:e2:3e:e7:ed:18:7f:64:e9:2b:73:
         2c:14:5e:54:30:6f:ca:48:ba:6a:ed:75:83:8d:82:73:aa:d1:
         0f:71:0e:bd:24:1b:ac:b8:cd:0c:ad:41:0f:00:5d:29:05:75:
         9a:c3:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:58 2025 by rpki-client