Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File:                     sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier:          za5BULxcQcrpcfkVv7cvZ0RORixPHg0owOtWRIxNXoQ=
Subject key identifier:   03:E0:46:8D:61:13:B6:8C:38:83:F8:E2:10:EA:59:7B:82:7B:95:EB
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer:       /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial:       0199342493F55B8757DB6BE79886D0848C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number:          167C
Signing time:             Wed 10 Sep 2025 15:00:36 +0000
Manifest this update:     Wed 10 Sep 2025 15:00:36 +0000
Manifest next update:     Thu 11 Sep 2025 15:00:36 +0000
Files and hashes:         1: IO0LvnAOcWauTMBpIRocATcgbnc.roa (hash: X7MgkZkBpVtr92LvTB/v/8FDDjBqTMenme65NutXS6Q=)
                          2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: xiL8vxwsWbKsx/rsBYpiHB4uudMQdffl17ZquYuzzMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:24:93:f5:5b:87:57:db:6b:e7:98:86:d0:84:8c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
        Validity
            Not Before: Sep 10 15:00:36 2025 GMT
            Not After : Sep 11 15:00:36 2025 GMT
        Subject: CN=03e0468d6113b68c3883f8e210ea597b827b95eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b5:dc:39:1c:1c:d9:bf:9e:10:68:90:a3:1c:
                    26:6e:6f:82:f4:f6:5b:d7:ce:40:13:af:e1:a8:65:
                    a5:3e:93:96:f8:2b:fa:3c:eb:bb:8a:ab:3e:87:9a:
                    ad:a0:fb:7f:4d:b8:e8:38:23:49:e1:87:3b:04:7a:
                    6e:30:7f:e6:80:11:89:9c:68:fb:98:a1:c8:2d:b6:
                    c2:43:5f:d6:4f:7d:c9:c6:a9:92:e6:b9:d3:e8:21:
                    b6:51:40:58:5c:15:d8:81:54:79:dd:ee:6f:cc:0c:
                    0c:7d:17:b9:b6:7d:39:2e:0f:0c:91:d3:e5:79:af:
                    5d:60:e7:ad:73:49:dc:eb:75:5d:fc:2b:dd:54:44:
                    ea:1e:b5:ab:7a:d5:56:d0:7e:c2:d9:5f:fb:2e:6d:
                    99:09:18:3a:a7:27:9e:f5:20:2d:aa:e4:9b:cd:28:
                    33:20:2f:ab:77:46:b7:b7:7e:cd:6e:30:db:22:18:
                    36:38:ee:95:b2:98:7b:ac:65:81:fe:02:09:c7:48:
                    10:e2:c7:5b:d8:91:fd:55:51:29:7c:78:c2:8c:06:
                    9c:15:98:1b:89:13:bb:ba:c5:b4:68:d0:94:8f:0e:
                    cc:47:75:34:d1:80:11:e6:b9:00:17:0b:10:a9:e6:
                    04:4f:31:56:81:af:23:0d:3f:d5:51:ea:17:bf:4c:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E0:46:8D:61:13:B6:8C:38:83:F8:E2:10:EA:59:7B:82:7B:95:EB
            X509v3 Authority Key Identifier:
                keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:50:63:45:2d:92:7b:fd:9c:9f:bc:d2:da:3d:f5:ce:99:78:
         bf:8b:6f:82:d5:88:24:f7:f8:d1:4e:18:6f:22:08:ae:cc:9a:
         c4:f5:a6:d0:15:c6:95:46:0e:16:65:1e:01:e1:e1:8a:41:4f:
         1d:1c:c8:f4:45:71:d2:10:1a:35:4e:42:2d:d3:8d:42:0e:a8:
         40:ba:d3:f6:d4:df:e7:59:f8:9e:ab:e3:ac:a4:3b:39:fd:87:
         25:5f:93:23:13:eb:44:75:25:bd:2a:3f:ff:e1:ce:d9:8f:21:
         e3:07:68:1a:ed:ef:0d:be:16:e0:e9:80:81:00:37:3c:19:6e:
         51:ae:b4:b6:ae:84:3d:27:e5:a4:64:e1:16:07:d6:cd:cf:8a:
         40:c7:4f:ea:df:c7:3f:ca:08:63:06:98:3a:fd:35:af:06:4f:
         ea:0b:71:93:1d:85:e4:07:5d:b0:50:be:2a:4a:75:48:fe:dc:
         ee:24:83:9c:3d:f5:8c:d0:6c:60:1f:8a:f5:67:6f:77:10:41:
         58:0d:46:5e:09:0a:e2:04:08:a6:8d:84:6c:83:ad:a6:41:55:
         fc:6a:43:05:c7:5a:76:dd:1e:2d:73:bc:53:12:ef:e9:16:e5:
         b5:cf:42:16:47:8e:c1:92:fa:9d:4f:4e:45:94:29:ea:1e:73:
         65:58:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:00:49 2025 by rpki-client