Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File:                     758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier:          0I3dGzT8CjbSCHwPrdxKstzp6mf4UB6d8zuRzeMGE2E=
Subject key identifier:   C0:AF:29:A0:F5:18:36:C0:49:0E:E0:C0:06:62:5E:6D:8A:FB:79:62
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer:       /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial:       01994F9BBEB2AE50E4E0F510D08AE01D3A9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number:          168B
Signing time:             Mon 15 Sep 2025 23:00:30 +0000
Manifest this update:     Mon 15 Sep 2025 23:00:30 +0000
Manifest next update:     Tue 16 Sep 2025 23:00:30 +0000
Files and hashes:         1: 1bEC89myvydEqo_ZPjw-OQX0Qi0.roa (hash: ZmacESfVCLkopUwGADnqjPbJ5MKyVKen61NApT+t8VM=)
                          2: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: fpfZdMfNNQh9rA1hw4UxShcdeS7IQKFz7d2h0soTogg=)
                          3: iZ1aijGSpYaJ5lT694iv07s9IFw.roa (hash: epj7jnXUcZqcIR0Iu/H9+s0OqjsBdFMaftQUUMbM+4c=)
                          4: ksWoUId71Ta6zaKYKbekW8SN22U.roa (hash: tv73AIHBejtA7MQn113/2vhoh+psXUpDGtwp+NxnLcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4f:9b:be:b2:ae:50:e4:e0:f5:10:d0:8a:e0:1d:3a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
        Validity
            Not Before: Sep 15 23:00:30 2025 GMT
            Not After : Sep 16 23:00:30 2025 GMT
        Subject: CN=c0af29a0f51836c0490ee0c006625e6d8afb7962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:bb:84:03:5a:db:f4:66:16:fd:f5:4f:7e:
                    c7:89:d7:05:09:24:7d:5d:5e:5d:93:67:6b:76:08:
                    82:a5:34:c2:3d:37:5e:6e:47:20:b4:8a:ae:1b:ff:
                    c1:89:e7:02:ef:71:61:1f:01:c1:da:aa:22:ab:24:
                    bc:3d:83:21:c7:c0:ad:77:34:37:89:ae:97:6e:53:
                    50:eb:bc:cc:ff:10:fe:4f:45:27:75:66:46:e0:d8:
                    8f:5b:03:83:d1:d9:e4:e1:9e:7e:86:cf:b3:88:d2:
                    a2:f5:24:23:21:0a:f8:76:50:fc:84:ae:9f:cc:73:
                    dd:83:26:9e:2d:86:3f:3e:1f:17:2f:ef:e8:bb:7f:
                    86:65:ab:6b:22:d6:f3:70:8b:81:49:7d:06:d2:7c:
                    6d:04:89:0b:9c:f0:82:bb:ef:67:38:d6:7d:de:9c:
                    a4:0d:a2:57:7b:27:44:3d:74:2c:54:e7:24:ea:9e:
                    b5:e6:62:82:1d:8b:a8:59:92:a2:77:cc:ab:d4:ee:
                    fa:61:e9:76:f8:13:bf:76:df:be:08:81:ad:2a:bf:
                    2f:2e:e0:9a:ef:88:32:26:56:35:f6:f5:db:e3:a2:
                    01:44:cc:18:94:0d:d4:22:6d:c4:43:31:e2:23:f9:
                    18:b6:d2:ec:10:c8:c8:72:68:f9:68:d3:a9:cc:0a:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AF:29:A0:F5:18:36:C0:49:0E:E0:C0:06:62:5E:6D:8A:FB:79:62
            X509v3 Authority Key Identifier:
                keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:09:25:0b:90:91:62:c8:1a:1b:65:4f:5f:2c:ba:dc:7e:2c:
         7e:88:40:ae:c1:e6:11:d5:20:fe:05:72:73:b0:fc:ad:ea:a0:
         de:45:3e:f5:e3:c0:df:77:44:8d:9c:d0:0e:b5:29:4c:f0:76:
         01:03:73:3c:d4:25:e8:b8:59:8d:18:5a:49:bf:20:4c:eb:19:
         83:e9:4c:a0:08:d6:ac:87:23:a5:34:39:2b:39:6c:dc:c5:11:
         8c:3f:8e:5f:9f:98:8b:1b:58:60:0f:64:e4:6d:9d:9e:a0:fa:
         4f:53:22:63:6a:cb:25:86:37:9c:ff:6a:61:34:9a:eb:0d:c6:
         b5:9e:24:4a:b9:95:cc:fc:96:07:4a:b6:10:7b:0e:f0:85:ab:
         35:0a:d8:31:77:4e:b5:9d:07:ef:1f:8a:89:21:70:59:d0:07:
         93:8f:3e:67:62:25:89:3a:05:8e:14:e4:23:2b:57:b5:40:3b:
         3c:81:3e:46:63:fa:38:df:3b:bc:74:cd:c9:1c:4a:96:56:64:
         93:dc:d5:6e:64:ee:cb:4e:64:1a:13:8f:1e:bf:ca:a4:a9:1b:
         80:99:ed:7b:95:ec:c6:8e:88:43:e2:1f:37:13:66:da:5c:52:
         c2:b7:82:32:b0:f4:cf:b3:f9:f9:7e:1b:ab:f6:37:66:72:8e:
         db:a1:10:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 07:29:18 2025 by rpki-client