Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
File:                     fewnmwUBcwaYowvNzqOuR3yVczE.mft (raw, json)
Hash identifier:          xiDjksQsSQnPcik8qyAq1GBMo19sRkBy7cXlK5tmzKE=
Subject key identifier:   9F:8F:03:00:D9:7E:EF:FA:A5:F2:EC:90:3B:33:6B:7E:E7:32:07:F4
Authority key identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
Certificate issuer:       /CN=7dec279b0501730698a30bcdcea3ae477c957331
Certificate serial:       01989713B49BCE8082C1D1957E256D12B4B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
Manifest number:          162A
Signing time:             Mon 11 Aug 2025 03:01:47 +0000
Manifest this update:     Mon 11 Aug 2025 03:01:47 +0000
Manifest next update:     Tue 12 Aug 2025 03:01:47 +0000
Files and hashes:         1: 8vkkegr96IBMHB6BFhag_SmFnOI.roa (hash: h5/oEq8rbYbckXXTNVYfhI/okuKJEZpt0WvLrdLeyGw=)
                          2: fewnmwUBcwaYowvNzqOuR3yVczE.crl (hash: x/tjX1ib4bnwbapsUkZ920Hf9SWdLce1hT4e4uSrrsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:13:b4:9b:ce:80:82:c1:d1:95:7e:25:6d:12:b4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dec279b0501730698a30bcdcea3ae477c957331
        Validity
            Not Before: Aug 11 03:01:47 2025 GMT
            Not After : Aug 12 03:01:47 2025 GMT
        Subject: CN=9f8f0300d97eeffaa5f2ec903b336b7ee73207f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:72:9e:b4:28:fe:f0:42:55:c0:64:1f:14:da:
                    da:27:4a:27:40:4a:cf:47:63:b9:0c:bd:8a:4d:86:
                    0b:bc:8c:8b:8f:ed:08:88:53:4c:a2:11:3d:e3:00:
                    59:16:f9:87:22:17:30:88:eb:bf:a3:a6:19:e9:0c:
                    bf:4c:ea:55:25:89:ff:81:11:e4:df:65:ef:ea:72:
                    c5:8f:11:0f:79:da:97:9e:32:3f:83:a0:ab:28:de:
                    32:c2:c2:de:b4:2e:e2:a8:f5:3d:dd:a8:6e:0b:b4:
                    22:57:93:5b:21:84:47:4a:f9:7f:5c:fe:71:d6:fe:
                    57:16:51:98:cd:2e:a0:94:4d:3a:b6:1e:40:d1:9b:
                    52:d9:2f:87:92:93:83:ff:79:63:79:6c:76:1e:09:
                    d2:df:d6:e4:e3:77:2f:c3:3b:e6:4c:f0:9f:97:e5:
                    b4:97:77:d4:dc:90:43:69:15:cf:0e:c8:ac:0c:43:
                    bd:08:18:2b:21:d6:86:87:34:31:c1:e9:0b:d1:3a:
                    e5:40:ed:88:cf:5a:23:dc:d9:44:da:60:d1:ff:ef:
                    ac:b1:dc:c8:f4:c1:5f:ee:3d:4a:bf:3c:95:f0:c9:
                    4b:45:27:7f:63:8c:20:d6:fe:f7:30:b1:c5:39:52:
                    07:17:46:bc:54:ae:bd:5f:32:f6:8f:c9:7f:54:c2:
                    ae:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8F:03:00:D9:7E:EF:FA:A5:F2:EC:90:3B:33:6B:7E:E7:32:07:F4
            X509v3 Authority Key Identifier:
                keyid:7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:bc:59:51:85:c0:dd:8c:cb:f7:61:e6:1f:b3:83:27:b3:00:
         86:18:a6:70:b2:11:60:f8:57:01:a4:9c:5f:69:4d:2f:5b:6c:
         12:50:b2:06:28:88:63:1f:d2:8d:f7:f3:56:04:e9:97:cf:71:
         4d:70:b2:5c:fe:f3:bd:29:cd:97:38:4d:ea:d3:d0:24:a9:31:
         69:fb:6b:8c:7f:a5:4b:39:4d:6d:d9:89:f2:89:f0:48:bb:2f:
         7e:bd:b1:bd:aa:fb:2b:df:5d:2a:f9:78:97:6b:fe:c0:eb:9a:
         7d:9a:87:7e:ff:6d:bc:56:88:0e:8a:cb:d1:a4:ca:23:f5:05:
         a9:cd:4b:5e:79:db:89:33:e3:51:8a:4a:c3:1c:d9:b6:ae:2e:
         3d:26:fb:c2:f0:c8:91:9c:40:e0:43:12:3e:f5:eb:3d:ad:bc:
         a9:d4:47:96:93:c7:95:43:78:cd:0c:51:a4:e6:e7:0d:0b:94:
         dc:2c:99:98:2e:fb:67:35:24:37:8f:b3:26:a7:25:91:5c:4b:
         a7:93:a4:ad:a8:0f:3b:53:da:27:dd:d9:54:45:0b:0d:01:11:
         1e:e4:d4:07:ae:d7:ad:c6:cb:7d:98:d5:db:40:5a:c6:ff:f1:
         88:98:b9:be:fe:c3:48:1e:f1:44:b5:13:bd:c2:c6:cb:d2:7e:
         0e:12:0d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:09 2025 by rpki-client