Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
File:                     aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft (raw, json)
Hash identifier:          OagQ2axkVQuXMpcqXomLBjpoK9MsSHBRoVmfvWXzNC8=
Subject key identifier:   B5:05:91:97:09:1D:0B:97:91:6C:D3:11:85:C5:BF:12:D2:BA:8D:A8
Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
Certificate issuer:       /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Certificate serial:       0199183F6D2ECA0C65ADF7E0E6D8C87DDFC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
Manifest number:          166C
Signing time:             Fri 05 Sep 2025 05:00:33 +0000
Manifest this update:     Fri 05 Sep 2025 05:00:33 +0000
Manifest next update:     Sat 06 Sep 2025 05:00:33 +0000
Files and hashes:         1: YixLFlfODucpz3SmvGUoO943czQ.roa (hash: U+vdy0unHKQkRcci4HnKyZFl5mHyggPlDsq3RNujwyk=)
                          2: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl (hash: GET+NMkzzSz+dEuuBzqvhwi369eLUfnzsZ0MWjR/xq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:3f:6d:2e:ca:0c:65:ad:f7:e0:e6:d8:c8:7d:df:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
        Validity
            Not Before: Sep  5 05:00:33 2025 GMT
            Not After : Sep  6 05:00:33 2025 GMT
        Subject: CN=b5059197091d0b97916cd31185c5bf12d2ba8da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:0f:c8:91:f5:a7:e5:20:29:d8:89:1e:19:62:
                    65:ac:b1:70:4b:cc:d8:fe:c3:ea:50:c7:92:a3:5e:
                    a2:a9:f2:af:1b:d7:55:1b:b2:18:26:00:5c:1c:f0:
                    bf:35:46:f6:c6:13:71:b1:1a:2c:93:2b:64:90:b9:
                    ff:b5:6f:88:ab:3c:d9:f7:c7:75:89:07:43:75:20:
                    a6:49:a1:1d:cc:16:9d:37:d3:e7:5d:e2:27:a7:97:
                    a3:c0:7b:e8:b1:cd:c8:fe:f0:0f:b4:55:02:b4:7e:
                    0e:a0:54:d7:eb:cd:db:1c:76:14:0d:fb:84:08:ac:
                    2d:cb:b6:06:4f:02:62:be:45:0f:d1:1f:67:8b:37:
                    a5:05:80:b0:7c:9b:f3:89:ed:77:2f:ba:6c:fa:0f:
                    7e:21:74:bc:e2:ff:d1:22:fb:46:0b:3c:06:a8:cb:
                    20:0b:f1:eb:c6:71:25:29:bc:8b:51:14:20:1c:95:
                    0d:61:10:c8:84:31:72:9a:7b:ab:1b:b8:b2:b7:07:
                    c6:00:e6:11:8d:1f:02:42:84:68:fa:db:61:5f:c0:
                    b7:ef:75:3e:21:21:75:e4:86:ec:92:52:cb:76:dd:
                    53:0b:12:a9:b1:a8:66:b1:b3:e9:99:4c:b7:44:f7:
                    46:8f:27:2a:30:2e:83:6f:60:39:0f:57:fe:bc:7c:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:05:91:97:09:1D:0B:97:91:6C:D3:11:85:C5:BF:12:D2:BA:8D:A8
            X509v3 Authority Key Identifier:
                keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d4:ca:0d:32:a3:88:ce:16:aa:b1:c6:4f:b8:8b:20:dc:9e:
         78:29:03:72:4a:a1:65:2f:cf:ce:ba:90:55:73:9c:a8:24:19:
         b7:4d:7c:c2:c4:4e:81:ec:10:95:db:38:5f:aa:29:f2:d1:11:
         66:b7:de:f5:02:59:e5:aa:fa:33:5c:9a:91:4d:92:a5:ac:34:
         2f:f6:af:93:27:52:3d:3a:2d:a8:40:83:13:6e:7b:34:96:d6:
         b2:99:8e:68:6a:89:cd:4b:46:6b:35:65:88:92:91:08:bf:2c:
         3c:6f:43:96:df:29:13:75:38:42:bb:60:5b:1f:1b:12:87:96:
         63:4c:45:41:7e:0e:ba:83:6e:1f:89:d9:c1:83:81:3d:b5:e1:
         27:e1:b1:74:94:21:23:d5:29:26:c8:00:1c:06:ba:ef:5d:e5:
         45:e2:01:0d:f1:1c:9c:cf:c8:1f:30:ed:35:b7:05:da:33:aa:
         77:9c:38:b2:cb:73:25:33:9e:d4:35:15:6c:0f:12:26:9a:c0:
         47:7b:74:a8:12:97:8c:21:62:8e:f1:c5:82:66:92:be:e4:09:
         f9:21:5c:ae:39:b3:5f:d4:bd:57:19:b6:c5:d7:81:ad:b2:d1:
         2e:9b:c6:80:b1:a3:71:44:b8:a9:23:cc:12:18:70:91:cd:86:
         ed:d3:2f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:28 2025 by rpki-client