Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
File:                     b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft (raw, json)
Hash identifier:          UphxnMfujfN3SPBvmErJtDCFZXvgf+cJB+F7lZpOY0Y=
Subject key identifier:   9A:32:95:E0:8D:C9:CA:C8:61:CC:65:6D:A9:29:8A:C2:55:6F:B4:A8
Authority key identifier: 6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
Certificate issuer:       /CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Certificate serial:       01992FDA0F718D85B26D844A23BB46EE17D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
Manifest number:          167B
Signing time:             Tue 09 Sep 2025 19:00:43 +0000
Manifest this update:     Tue 09 Sep 2025 19:00:43 +0000
Manifest next update:     Wed 10 Sep 2025 19:00:43 +0000
Files and hashes:         1: PalviZLco2h6ucG2viir5MJ4Wvg.roa (hash: D2pj+/BZD2XBYZUI3y81qdZCcE/mlmlKVW87ul9H5bc=)
                          2: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl (hash: z1n8FIEtl3uqBuGVkUhFNeHCczPzpTKGp/Fw4c2+ZME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2f:da:0f:71:8d:85:b2:6d:84:4a:23:bb:46:ee:17:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
        Validity
            Not Before: Sep  9 19:00:43 2025 GMT
            Not After : Sep 10 19:00:43 2025 GMT
        Subject: CN=9a3295e08dc9cac861cc656da9298ac2556fb4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7c:b0:92:0c:7a:c7:c4:6d:8f:43:08:a9:44:
                    a1:97:11:91:bf:0c:0d:39:58:53:5a:27:2d:c3:a7:
                    ef:af:bb:5a:ac:b1:3b:71:58:fc:30:a8:7b:4e:0a:
                    17:42:1e:34:ca:f5:07:f0:21:43:59:f4:e4:57:67:
                    0c:be:df:5a:1b:8d:bb:6d:20:48:d5:1b:20:e9:0a:
                    c8:05:9d:28:bf:30:52:29:85:50:b2:92:1f:6d:e1:
                    d6:9c:d0:bb:eb:d0:0c:e5:87:a5:2a:0b:d4:8f:c9:
                    6b:a0:13:be:86:67:0e:b6:f9:f2:d1:f3:76:1f:a4:
                    5e:1f:94:f3:8c:6e:6b:e4:7d:2e:1e:87:fc:ed:b1:
                    93:d2:9c:06:f9:d1:cb:51:3d:c3:0a:d4:06:3d:d7:
                    e5:2e:cf:cd:a1:0e:a2:3f:00:85:f0:7c:8e:80:2a:
                    bb:dc:cf:c6:a0:40:4d:7c:2e:48:e0:ed:08:bf:4d:
                    c5:55:8d:37:d6:9f:2f:94:0d:33:ae:65:53:93:db:
                    56:22:b6:6b:00:8b:41:30:90:12:28:7b:9b:1f:ad:
                    cb:38:49:7d:d2:9c:58:aa:60:e5:92:84:70:0a:33:
                    a9:2f:49:55:84:cd:cd:f9:2d:dd:7c:cb:2f:f1:ee:
                    dc:2f:bc:aa:71:87:f0:68:e5:6e:44:55:bc:a8:c6:
                    e8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:32:95:E0:8D:C9:CA:C8:61:CC:65:6D:A9:29:8A:C2:55:6F:B4:A8
            X509v3 Authority Key Identifier:
                keyid:6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:71:af:ee:40:64:f7:9d:c5:99:3f:89:ff:7c:37:f4:9f:8e:
         07:ee:4a:a4:c7:a4:91:fc:a4:61:11:ab:2a:16:62:88:68:fc:
         12:6a:32:71:92:0e:e0:97:2c:e0:09:a4:10:25:03:92:25:e0:
         de:51:fd:cd:cc:e2:8d:37:da:51:e6:91:16:9a:21:8d:30:d6:
         79:47:12:a2:4f:67:4e:86:ba:a9:c9:16:1b:da:d6:7c:91:33:
         57:fd:a3:93:5a:e8:95:57:5a:2d:3d:de:49:38:84:51:97:f4:
         c7:cf:13:8d:09:8d:13:4b:c1:d3:38:8e:9f:8c:dd:06:cd:7a:
         77:07:82:bd:40:20:f3:e1:39:59:d1:aa:e7:e7:fe:27:2b:56:
         42:ac:93:9e:7e:e5:39:3f:15:16:cd:88:fe:5d:2a:b2:0e:fa:
         fa:25:9d:04:86:96:28:9a:ca:45:96:50:ec:dd:72:01:61:14:
         91:95:a6:b0:45:c7:02:82:c2:30:33:e2:52:d2:24:a3:04:25:
         b1:b5:76:4e:59:e4:fd:81:9d:56:ec:f9:09:04:ab:33:11:7c:
         9e:33:bf:76:f2:8a:84:fb:23:45:87:12:98:37:75:cf:96:ae:
         79:9f:1f:f0:ff:cc:86:75:1e:99:64:f6:c5:2b:66:97:8a:6c:
         4f:c5:da:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:47:10 2025 by rpki-client