Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
File:                     d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json)
Hash identifier:          ghMnsmSWg0vLzPteDeDn1sCDtwKZ2shFzAOUqWpgTU8=
Subject key identifier:   12:2F:39:FB:49:29:5F:39:5A:BA:40:A8:74:E5:4A:64:D0:2B:FA:8F
Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
Certificate issuer:       /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Certificate serial:       0199179B142ED5D251D8E1E3C0114325DCE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
Manifest number:          166C
Signing time:             Fri 05 Sep 2025 02:01:03 +0000
Manifest this update:     Fri 05 Sep 2025 02:01:03 +0000
Manifest next update:     Sat 06 Sep 2025 02:01:03 +0000
Files and hashes:         1: XufdK4JaU0kijhaCZqp6MWC7lI8.roa (hash: tAIQSyAZo/oGjmfexz3lVWcMQblwf+06mjxANWC5dis=)
                          2: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: arMKzFG8YaEgJ5JfjresA3n7Lv+PMMJYZ2014+fOeP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:9b:14:2e:d5:d2:51:d8:e1:e3:c0:11:43:25:dc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
        Validity
            Not Before: Sep  5 02:01:03 2025 GMT
            Not After : Sep  6 02:01:03 2025 GMT
        Subject: CN=122f39fb49295f395aba40a874e54a64d02bfa8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:61:b3:ee:16:1b:9f:70:fa:42:37:15:d4:
                    93:66:d5:ef:73:08:96:b7:43:5b:8d:91:70:9c:2b:
                    99:0a:5b:4e:47:d3:b6:21:6c:9f:11:6d:a7:9d:36:
                    09:94:5f:19:36:eb:8f:39:0c:07:58:04:18:08:24:
                    35:92:a6:70:ac:73:95:e3:f1:dd:fd:ca:98:d2:99:
                    ec:15:21:b1:86:0b:f3:14:56:a0:5d:e8:e1:6b:8e:
                    0d:39:28:f6:a3:b3:79:17:ef:59:2d:e9:7e:00:aa:
                    9a:57:1f:5a:f8:d3:70:3f:78:92:5f:7e:53:2e:04:
                    67:d9:e3:89:4a:da:5a:4e:62:aa:f4:2f:a6:16:5a:
                    66:5f:d4:98:02:c3:61:c2:ba:34:60:c6:7f:de:e9:
                    53:45:00:ee:6c:65:84:c8:04:44:c6:66:c2:b4:27:
                    00:da:6d:21:52:cc:fc:6b:5e:b5:be:fb:a7:ef:85:
                    50:40:a4:af:bc:dd:c4:46:68:76:23:cc:36:7a:f7:
                    f0:4c:e3:38:b6:5b:b4:f7:74:4b:95:57:dc:e5:bf:
                    ed:17:64:97:d9:c8:bc:0b:70:37:6b:23:60:e6:a1:
                    95:88:9b:94:2e:cd:be:79:38:95:eb:ab:6b:de:6f:
                    8b:4f:78:50:7a:20:87:f6:c4:d9:ed:76:bf:8f:0c:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2F:39:FB:49:29:5F:39:5A:BA:40:A8:74:E5:4A:64:D0:2B:FA:8F
            X509v3 Authority Key Identifier:
                keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c2:6c:80:05:28:7c:b7:35:8f:58:6f:35:41:07:a7:75:42:
         18:62:6f:ae:6c:c7:48:00:72:10:5c:63:4c:73:18:70:0b:2b:
         f6:57:ab:75:a5:2d:bf:33:6e:96:c6:1a:d0:4f:62:d9:38:57:
         1b:bd:59:ef:fc:86:03:fd:0c:b0:dd:81:65:5e:a4:b0:e1:3e:
         1e:51:cb:c7:d3:3e:7b:b0:23:e4:8a:a8:4f:a2:57:2c:43:d8:
         a2:b9:bc:a1:20:73:11:78:4a:be:d7:95:fa:7c:12:c7:da:a9:
         31:9a:bc:75:c7:88:ab:05:79:35:2b:cf:cb:60:dc:7c:72:64:
         92:d1:37:41:43:6b:91:13:23:e4:3a:b3:d4:4a:e3:64:d2:e6:
         fa:65:4d:ac:89:23:6a:75:40:3f:00:78:e4:83:10:79:a6:2e:
         fc:da:e1:43:05:bd:5e:17:fe:c5:9c:e2:6c:51:8e:15:9a:68:
         f9:84:be:d9:da:4d:32:fd:68:be:be:da:c7:35:10:2b:dc:34:
         ad:1d:81:df:6b:d4:1d:d1:a6:0b:1c:26:08:74:ac:eb:87:52:
         ba:c0:c7:fd:f1:d3:75:66:28:bb:7a:1f:85:c8:2c:72:b0:9c:
         30:7b:98:ac:38:be:59:34:1e:a7:0a:5f:80:41:e6:05:eb:a2:
         5d:4d:83:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:06 2025 by rpki-client