Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
File:                     FmqYZpgAXVfnuS96ONIZu7gP4f8.mft (raw, json)
Hash identifier:          TwU3v035M4nTnaxuaHJi6cBSIr4IZ9hoVVwlYso9xnY=
Subject key identifier:   49:3B:16:85:14:B9:29:D8:38:5E:FB:83:23:CD:3A:9A:7C:3D:95:17
Authority key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
Certificate issuer:       /CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Certificate serial:       01984966A5EFF2DB1A7F4B7B9A1EE36591E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
Manifest number:          1089
Signing time:             Sun 27 Jul 2025 01:02:00 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:00 +0000
Manifest next update:     Mon 28 Jul 2025 01:02:00 +0000
Files and hashes:         1: FmqYZpgAXVfnuS96ONIZu7gP4f8.crl (hash: g0Bj2maninope6kyoDhiOvEZ3DaP6lfR/LXoHQPebRA=)
                          2: c4nEiNEeJD2vFf8wumBi1yYvs6E.roa (hash: aF0QKy6JcPOas0fgNBBJCKQQxMBB/xZccd3mvICIadY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:a5:ef:f2:db:1a:7f:4b:7b:9a:1e:e3:65:91:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
        Validity
            Not Before: Jul 27 01:02:00 2025 GMT
            Not After : Jul 28 01:02:00 2025 GMT
        Subject: CN=493b168514b929d8385efb8323cd3a9a7c3d9517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f5:7d:37:cd:f6:37:5a:cd:d8:ce:88:ee:2b:
                    e4:cf:95:6c:88:ad:be:1b:02:0e:ed:a7:6c:91:9c:
                    c9:f1:4c:2c:36:b5:38:68:d8:3e:c1:d2:49:52:b3:
                    8e:92:b5:4a:46:bf:94:c9:24:da:0f:6e:6e:43:3c:
                    b8:0c:20:24:99:db:91:f2:c4:49:c5:2b:d2:bb:21:
                    11:34:df:c3:a9:72:16:7d:d2:13:f9:7a:f7:87:91:
                    d1:61:a8:40:31:c3:94:95:84:8d:08:82:e1:c0:76:
                    22:98:37:0d:8e:27:44:74:95:62:cd:c6:25:c9:b6:
                    dd:a5:6b:19:f8:f4:45:fa:c0:06:f4:3b:fa:c9:d1:
                    9a:42:f9:7a:a5:00:c9:a0:a1:fd:5a:3e:d3:12:88:
                    f7:19:04:dd:7b:10:69:fc:4b:3c:a6:80:df:37:d8:
                    f8:40:55:92:3e:8d:30:58:00:bc:5d:37:b9:f0:6d:
                    e1:3a:17:63:88:ea:83:02:99:b6:6a:ed:ce:1b:ca:
                    10:b2:d0:8e:d0:26:62:aa:cd:aa:07:db:de:b4:dc:
                    c3:6c:88:72:0c:0c:1d:2b:55:5a:30:1a:bf:89:fc:
                    7d:c9:50:f1:7c:b9:bf:a9:b8:25:33:9e:e9:b4:ca:
                    30:c9:5a:c9:ad:89:16:78:c3:b9:6b:60:bd:c7:1a:
                    48:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3B:16:85:14:B9:29:D8:38:5E:FB:83:23:CD:3A:9A:7C:3D:95:17
            X509v3 Authority Key Identifier:
                keyid:16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:22:b5:eb:f6:ea:25:55:0d:d9:97:05:d1:a8:dc:79:dc:c6:
         da:fb:26:7e:8d:87:c1:69:91:0c:97:32:5c:cf:e0:5b:78:03:
         6a:9a:1b:90:c6:2c:15:e8:c6:d5:4f:36:b1:2b:fa:dc:4b:2e:
         5a:ba:18:ec:e1:a0:d3:8b:f3:20:79:2c:ff:c5:48:04:a9:99:
         11:a6:68:7c:50:09:52:24:09:40:30:43:53:fd:00:d3:4c:2f:
         f6:a3:a6:58:20:91:1e:27:63:ff:b6:69:e4:55:2f:ff:ed:af:
         0f:54:5b:b9:81:15:b5:d6:c6:36:00:5d:7b:3d:20:62:1f:87:
         e2:33:03:0f:b2:9f:52:b7:34:23:06:b9:77:28:03:e1:94:7b:
         90:af:d9:ec:49:3f:b2:ac:05:7a:96:89:49:4f:15:19:ae:56:
         d1:d5:e2:33:cf:cd:8c:be:48:68:c1:6d:5f:94:93:e6:57:4b:
         3e:74:6d:3d:c9:41:a3:a6:e6:24:1e:1c:39:7f:8d:8a:05:b1:
         95:80:e0:01:f1:0c:48:9b:dc:b0:cd:76:90:a5:71:6f:96:5a:
         1a:fe:a9:f0:d9:d0:32:d2:72:c1:e5:a7:d3:5e:ef:a3:52:c9:
         92:c6:94:6f:07:13:01:29:be:7b:78:b3:f9:bf:2e:77:35:a1:
         76:13:34:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:46:23 2025 by rpki-client