Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File:                     9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier:          6zuWoPP6q4qXCMPXPeDMa+68aUo9xiaVVMpjGpPJt0M=
Subject key identifier:   21:F0:BA:21:D9:3C:0F:1B:DC:D7:7C:21:BF:67:69:D8:6E:07:52:D6
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer:       /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial:       0198D583D37CBD6D0C20D4D67F828A531198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 06:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:43 +0000
Files and hashes:         1: 88-pt2hIN1dTOb7W_yyIcsyIKos.roa (hash: rXxfNXMHY0jcVNFeL7a/dvDj6ZDtDB0GLjdB35wLnIg=)
                          2: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: 727Z9SIjLXnuh6OHOXnD0JBRpne7p2J7PnO3jWQUthc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:d3:7c:bd:6d:0c:20:d4:d6:7f:82:8a:53:11:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
        Validity
            Not Before: Aug 23 06:00:43 2025 GMT
            Not After : Aug 24 06:00:43 2025 GMT
        Subject: CN=21f0ba21d93c0f1bdcd77c21bf6769d86e0752d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0d:62:23:a1:f6:27:3e:7c:53:23:e1:54:09:
                    93:f2:c7:a6:d7:8c:9e:da:63:49:5d:6d:24:d8:5f:
                    9a:35:be:c9:08:05:98:67:fb:0d:f1:1f:89:25:1f:
                    d0:ff:bf:44:f5:90:2f:da:59:87:ac:d5:72:fa:11:
                    e7:3d:28:d9:c6:68:46:a6:1c:7b:0b:fe:7c:8e:80:
                    0b:8c:97:bd:b4:3c:f6:74:38:1c:84:fb:64:5c:fb:
                    eb:69:64:48:85:aa:a1:97:53:5f:e9:e8:7d:49:3e:
                    e4:ef:fa:50:f6:f4:74:c5:bc:bb:ad:02:81:08:94:
                    f4:4e:a4:f1:26:41:1d:f7:15:d0:65:b8:e0:f8:78:
                    af:d2:b8:2b:e9:6b:e7:35:ce:fb:dd:f7:a2:07:f0:
                    87:d0:dd:8b:99:9b:b0:41:92:e6:e6:f5:cb:c5:83:
                    87:39:7e:96:0d:61:b9:b6:d1:01:a4:7c:c7:c1:e0:
                    6f:10:01:ec:5d:d7:fb:1d:5c:99:eb:bd:57:73:0f:
                    c2:40:4e:fa:f0:3a:75:8f:a0:75:cc:c0:53:90:bd:
                    8d:95:5f:19:ac:3c:de:45:bd:9e:41:7d:eb:b6:09:
                    fd:d1:dd:3c:63:0c:d6:0b:70:f2:d5:02:f1:57:82:
                    a1:16:60:aa:c3:f9:40:0b:2e:f5:c5:31:86:bc:3a:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F0:BA:21:D9:3C:0F:1B:DC:D7:7C:21:BF:67:69:D8:6E:07:52:D6
            X509v3 Authority Key Identifier:
                keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9d:65:bc:2d:85:46:8b:27:34:ea:ea:d0:17:bd:eb:72:a6:
         c0:b5:da:81:4a:67:03:49:0d:d0:b6:8e:df:c0:42:c5:00:ac:
         d9:84:7d:41:0e:36:d0:bf:ee:49:e1:81:34:f5:99:d0:0d:28:
         c1:f9:42:a6:b1:13:2d:00:3f:13:e1:75:07:e3:27:87:87:6a:
         8f:70:47:d3:3b:14:6f:2c:fb:7f:df:8d:38:bc:38:23:51:56:
         ee:2f:c1:7f:78:7e:b2:2b:4d:e2:a2:4e:ab:d0:e8:d6:ab:ae:
         de:67:9c:f5:f7:15:86:6b:0c:30:b8:41:21:35:2d:75:a1:37:
         87:32:de:50:a1:24:43:59:59:b1:19:5c:1d:aa:53:a0:e7:af:
         3e:c0:f8:3b:fd:47:e7:89:70:0b:54:43:78:9f:bf:81:7f:89:
         55:5b:6d:5c:e5:28:95:42:0e:38:66:0c:14:a9:fc:e8:b0:ae:
         19:c6:f7:df:43:c7:2b:52:70:41:e5:a9:5c:51:00:2b:b2:f4:
         d3:ce:c7:54:5f:5d:c7:7f:84:bb:81:43:5e:82:b1:32:76:92:
         8b:e9:d0:c3:1a:46:f2:d3:d2:0e:69:4b:33:75:e5:cf:3b:b5:
         1c:d3:5f:79:ec:c5:e7:0e:88:2f:93:de:81:1e:84:3c:34:2e:
         4f:d4:75:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:54 2025 by rpki-client