Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
File:                     ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json)
Hash identifier:          jjCPfQ4o1VBxfzV7DXoDH4meVZrXdjiMIYGvgm94Kx8=
Subject key identifier:   B2:FB:91:7D:E7:6A:B7:D7:01:3C:49:A1:F1:B8:EE:78:5A:92:88:70
Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
Certificate issuer:       /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Certificate serial:       019922551E925B566D67C96895581D90C43B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
Manifest number:          166D
Signing time:             Sun 07 Sep 2025 04:00:27 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:27 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:27 +0000
Files and hashes:         1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: FvMaOYzngh7UQbukR8ibTSyTpZIruX8Wchp2zQ+0vag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:1e:92:5b:56:6d:67:c9:68:95:58:1d:90:c4:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
        Validity
            Not Before: Sep  7 04:00:27 2025 GMT
            Not After : Sep  8 04:00:27 2025 GMT
        Subject: CN=b2fb917de76ab7d7013c49a1f1b8ee785a928870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:16:18:b0:00:c3:30:eb:5d:bd:a6:ad:15:
                    49:ac:cd:5c:45:9d:f5:52:9d:33:3e:46:62:23:3d:
                    b0:38:82:12:eb:b0:88:80:3c:33:91:e6:75:06:d9:
                    fd:8d:06:06:23:79:c8:fe:21:5e:f0:45:c1:e7:55:
                    d9:44:cf:3e:d7:e6:12:8b:48:60:be:3a:21:ad:2a:
                    ca:10:03:d3:12:85:71:17:ea:18:ef:d4:74:ec:0c:
                    3b:b4:e8:99:8e:8e:7f:15:89:74:60:ff:e6:e3:cc:
                    d9:80:46:e1:98:cc:9f:25:7f:d5:71:4a:0b:fb:6e:
                    f0:0d:ac:50:96:c9:83:08:c1:8a:e9:34:95:45:23:
                    21:c9:9b:c2:61:ae:bc:bc:8b:c3:0f:d4:9f:9f:88:
                    f9:6a:d9:06:b8:66:81:5b:3b:58:9f:c3:57:77:87:
                    23:a3:52:b2:69:6c:8b:04:97:b3:92:1b:c6:75:d7:
                    43:29:f5:0c:f0:1c:9c:d6:6b:bb:8c:10:08:b8:32:
                    4f:14:b0:a9:d6:ce:38:81:e1:18:8a:18:c6:de:cd:
                    f4:9d:a2:5b:0d:ef:e1:f3:13:60:e9:da:ca:c2:8a:
                    d1:11:70:40:a5:43:09:d8:90:16:1b:37:5e:6c:70:
                    e5:60:44:28:bd:10:c8:44:4b:f8:e9:c6:2a:aa:42:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FB:91:7D:E7:6A:B7:D7:01:3C:49:A1:F1:B8:EE:78:5A:92:88:70
            X509v3 Authority Key Identifier:
                keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2a:8f:66:af:64:08:f5:3e:8c:1e:23:d6:26:8e:5c:1d:7e:
         ea:4c:55:fa:dc:5d:24:2c:da:78:c9:37:77:31:2f:f6:a2:ee:
         15:12:a6:14:a0:12:b2:9f:43:6b:3a:1d:d1:6b:69:51:5e:5d:
         c3:ca:8a:5c:26:74:5e:d5:7e:4c:ea:04:32:14:46:2d:53:fc:
         27:36:6a:1c:5c:af:0f:b9:77:cb:ea:9b:8d:1b:88:5b:cf:df:
         08:94:f1:ce:62:f7:53:7e:b6:ac:92:05:7f:23:5a:87:b8:f9:
         48:32:d9:a4:0f:d1:9e:41:aa:d9:47:ea:56:fb:95:11:64:a8:
         37:f5:4e:cd:3f:69:81:a5:1e:90:c2:b8:22:9f:47:63:26:43:
         88:93:51:b5:1d:f2:75:dc:05:e4:cc:9d:15:52:95:22:0a:48:
         5e:6e:f5:b6:4e:c4:4c:18:a7:3c:a1:62:d2:64:7f:31:e6:b1:
         8a:0b:b4:eb:29:3e:87:ad:9f:42:5f:b1:e6:01:80:79:4f:8e:
         a1:22:68:25:28:e8:15:83:2e:f4:f8:ba:37:de:e1:49:c0:f9:
         ac:78:3b:48:78:85:26:58:05:64:27:f1:29:2d:e3:f8:1d:5f:
         9d:67:06:b8:86:4e:a3:32:25:0d:87:cc:ca:82:21:a8:a2:2e:
         5b:fd:5a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:57 2025 by rpki-client