Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File:                     ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier:          Chou5Kd0ykYve+M4FxrIJEQOgS0dYAP/b3sxbmKbfO0=
Subject key identifier:   84:18:4A:FF:CB:CB:5F:BE:50:98:2A:DF:61:42:C3:3B:83:79:6D:89
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer:       /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial:       01992FD9D8391046F93F10A2272E27C104D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number:          167D
Signing time:             Tue 09 Sep 2025 19:00:29 +0000
Manifest this update:     Tue 09 Sep 2025 19:00:29 +0000
Manifest next update:     Wed 10 Sep 2025 19:00:29 +0000
Files and hashes:         1: 6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa (hash: vR97+OeUXCCOXRpSdGW1/Y4Sp/FefDWwnMJQ9Jni4rk=)
                          2: BGdD8LDEAedO7LkZulNO0on6BtA.roa (hash: 5JKMac3WduBMBCnJzqk90kK6WJ4PSh8kMPbmsKHD+wc=)
                          3: Bs46C8G9Xvlaiic-U_vabhAJhco.roa (hash: 3sJguMlQk0GQr3vKdqIN2WvzrXMmi6x68HlsMnn5UuM=)
                          4: D5iZPHtIHYKSLlUoRqhHam3z4fw.roa (hash: iQxb5JVe2tNY+bNton8d20CXKpbqyN/eHLh+5EoqEaI=)
                          5: Rl9152Qvb_u7j8K6moXvloqlxuw.roa (hash: 7VxgCsm28hyqe3FM8bfzznGaU0K/XnvaJIfEnQlGvZI=)
                          6: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: ETcZNnRQZEGGcIvyml2QE7REwwwcIpsNgWnQhiP+uyY=)
                          7: bkbeFY-foKd3saHxL2Ms4IvaWZI.roa (hash: Pb5Tubkcy9LxO6t4tf4Rf3p3iIfsYoVtUzwvSZ29zs0=)
                          8: h13V4d_ekYYA6uv0-jBvE7ljXgg.roa (hash: 64VEKJzZ2W6+uSgCoWExxMNGZCghiQUddh02slxkwlI=)
                          9: y4ffehEhJcuHU2W4RqSmsYxzQlg.roa (hash: stMeXk1cas0IbSmXY2+Qqlw++LVpL1MZDKLPTnxrrwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2f:d9:d8:39:10:46:f9:3f:10:a2:27:2e:27:c1:04:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
        Validity
            Not Before: Sep  9 19:00:29 2025 GMT
            Not After : Sep 10 19:00:29 2025 GMT
        Subject: CN=84184affcbcb5fbe50982adf6142c33b83796d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:19:be:21:d2:52:6b:4b:df:ad:0c:f2:69:
                    33:87:57:8d:0b:95:ce:55:02:60:fe:15:e6:1d:3d:
                    bd:48:32:73:c3:a2:16:48:6d:76:06:d2:fb:6f:e7:
                    90:29:76:0f:31:b1:31:a6:94:2f:96:28:c0:da:77:
                    51:09:8c:95:4b:23:e0:90:67:e7:2c:ba:ae:0d:8a:
                    b6:47:1d:0e:ef:aa:b1:58:5c:5e:61:8e:cf:02:ac:
                    51:9f:8a:db:bd:e3:02:fc:43:ad:ca:a1:af:83:32:
                    40:37:b8:8b:78:38:9e:ec:db:f9:b5:f0:1c:d7:b2:
                    ef:df:e2:60:45:4d:e6:c8:59:82:f1:51:08:c0:41:
                    ae:7e:0d:7f:a0:e3:4a:f1:33:98:1f:d5:f4:5e:2b:
                    7c:29:68:57:bc:31:85:5b:06:0f:58:91:91:0c:7c:
                    a6:5b:f2:95:3f:df:d5:d1:2a:84:86:4c:5c:69:b9:
                    5f:ed:b5:7a:06:2b:d9:dc:b6:17:84:38:87:1f:af:
                    a0:8d:f9:25:af:f0:2c:6d:2c:7e:3a:4e:08:22:2b:
                    1a:d0:49:24:54:e0:f6:88:07:73:9b:69:ce:14:f5:
                    56:f8:5d:f8:b2:6d:bc:3e:58:9c:31:b6:8f:37:cd:
                    44:8a:46:b1:a1:5c:21:53:1e:16:9f:f6:99:c9:5c:
                    54:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:18:4A:FF:CB:CB:5F:BE:50:98:2A:DF:61:42:C3:3B:83:79:6D:89
            X509v3 Authority Key Identifier:
                keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a8:2c:7c:da:f5:13:45:4a:0d:3e:e0:1b:f3:11:56:53:58:
         8d:e9:f9:bf:c6:0c:04:36:7c:92:aa:bb:13:a4:b0:d8:49:39:
         af:29:20:a2:c8:7d:fb:11:5e:4d:b9:f0:13:f9:ee:3e:73:3a:
         b9:7a:21:07:f6:86:7e:4c:0a:3c:a2:8e:11:b1:ec:d0:8d:71:
         cb:f7:c4:93:68:a4:7e:54:de:42:de:1c:b5:7c:80:5f:63:47:
         06:7c:46:3d:4f:c9:49:8f:48:5d:92:99:fb:bc:ad:08:00:88:
         c1:bd:9c:fd:5e:d1:77:74:46:37:17:ed:80:ac:2c:ec:97:e5:
         65:16:c7:31:9c:82:03:39:b3:03:36:c7:88:82:43:36:7a:a7:
         fb:52:6c:73:1d:40:a9:69:c6:67:97:ef:dd:bb:cc:61:02:f9:
         41:56:34:65:fb:2b:57:bd:8b:c3:dd:15:ce:59:97:cb:94:02:
         14:bf:c7:dc:55:9f:3d:54:33:22:81:4d:20:82:19:8e:04:95:
         96:cc:bd:e5:ec:3a:ae:70:09:09:c8:46:67:cc:80:2c:48:c6:
         02:78:57:54:75:f4:4c:51:84:4c:08:6f:41:42:7f:65:ee:d5:
         ea:70:16:60:2f:d8:f7:22:61:fe:b1:77:16:c5:be:21:f5:2b:
         42:03:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:54:55 2025 by rpki-client