Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
File:                     wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft (raw, json)
Hash identifier:          kWxS065u0DQr6J2hdMCECPrpu6IG0Oi0gPyPk5yuJLs=
Subject key identifier:   CE:AF:CD:66:E2:1B:71:90:A3:18:FC:DA:12:AF:CD:63:9A:69:9A:F4
Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
Certificate issuer:       /CN=c13f17541732f57abff1294c71b533eb56746fd6
Certificate serial:       019933140C20FCFFA5078C9349FBC2069891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
Manifest number:          167C
Signing time:             Wed 10 Sep 2025 10:02:55 +0000
Manifest this update:     Wed 10 Sep 2025 10:02:55 +0000
Manifest next update:     Thu 11 Sep 2025 10:02:55 +0000
Files and hashes:         1: DljJr8JzJiVrlFsa4a_Y6aDbzLA.roa (hash: h/O87BR6bvL7AJdknAhnONrNppB3GhoL2ZES3kI48+0=)
                          2: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl (hash: uBOIKOKhMrDZVPjPccwqFe0LzV9ru63k2R6TbozsFD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:14:0c:20:fc:ff:a5:07:8c:93:49:fb:c2:06:98:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6
        Validity
            Not Before: Sep 10 10:02:55 2025 GMT
            Not After : Sep 11 10:02:55 2025 GMT
        Subject: CN=ceafcd66e21b7190a318fcda12afcd639a699af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:68:aa:50:f1:dc:75:f6:30:5d:0f:50:e3:
                    10:09:92:11:ce:eb:36:a2:a6:eb:38:4f:73:c1:b2:
                    5e:10:1d:37:93:7c:38:6b:ab:53:d6:29:c1:48:72:
                    c8:71:a8:00:45:a4:d1:71:8c:a4:a9:46:e1:28:14:
                    c6:3c:26:3f:34:60:1f:fc:5b:a8:ab:45:76:d0:de:
                    53:9b:d3:74:ee:11:29:69:b2:63:08:96:fd:62:ac:
                    2b:34:cd:9b:c5:55:9c:7b:8a:36:88:cb:ad:7d:9f:
                    16:dd:78:03:ad:0d:e4:b4:a1:a2:7e:01:31:13:d2:
                    33:97:30:de:24:ef:1d:91:37:cb:77:38:9e:e7:af:
                    c5:2c:f9:4c:35:dc:f5:d0:42:ff:11:89:a4:13:37:
                    b6:ad:b8:a7:c4:bc:bf:83:69:1a:77:75:1d:85:86:
                    8e:ac:e0:8a:1f:55:c5:29:43:e2:26:3c:26:3b:a0:
                    e7:ae:67:a4:19:5c:b0:87:b6:d3:ec:ab:0f:14:af:
                    ba:ea:42:69:57:ad:7b:c3:52:de:54:9a:79:26:8f:
                    37:f5:1f:1f:6e:48:47:17:f2:0d:49:7b:f5:01:24:
                    04:63:14:48:ad:a9:75:58:ef:e6:9d:7a:43:54:d1:
                    c9:66:30:60:a1:dc:4d:36:be:09:26:cb:13:f6:c3:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AF:CD:66:E2:1B:71:90:A3:18:FC:DA:12:AF:CD:63:9A:69:9A:F4
            X509v3 Authority Key Identifier:
                keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:00:24:ff:7d:8a:76:22:96:49:72:ef:e4:15:91:3c:98:82:
         6a:cd:9c:df:05:e3:8b:8c:ff:93:3f:bd:2d:f8:d5:fd:50:3e:
         31:27:80:11:bc:24:46:88:61:a2:31:f1:5c:3d:6a:39:38:60:
         83:d2:d2:13:29:a2:23:bc:c9:f5:c6:35:b2:7e:b0:1e:8e:6d:
         92:47:01:4d:5b:1c:ce:36:9d:4c:3b:73:a9:d6:5f:11:ba:7b:
         d4:4e:3f:7a:3c:00:3e:b4:2d:8e:f5:2a:d5:d9:d8:7e:a9:3f:
         f2:ec:47:74:be:80:61:4e:7f:56:c6:2a:c2:31:c6:ac:fd:93:
         91:1d:8b:97:eb:b3:64:8f:ca:d7:9e:82:29:60:f2:9f:f4:45:
         04:77:68:4c:e8:6d:94:bd:b6:0f:ab:3f:d7:db:c2:a1:c0:bb:
         b9:cf:5d:be:2b:01:20:51:1d:a2:59:59:3f:67:97:29:45:bb:
         7d:9e:a6:cc:25:09:ed:0c:3c:3e:ec:0c:53:ec:b9:d4:a5:71:
         f0:3f:af:55:d8:d7:6c:5d:89:4a:16:66:21:42:0e:b3:1e:08:
         c1:3a:29:ac:03:a4:d1:92:b3:d7:31:53:d8:6f:a7:bc:37:a0:
         37:7f:f9:d6:a3:d2:d6:d7:a6:fd:89:8b:a3:d0:e7:de:d1:b2:
         27:4d:68:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:04:16 2025 by rpki-client