Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File:                     FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier:          QBhdjtjVTpwNaxiYDxfYvt4eqqB80l96wRnhz26w2Ns=
Subject key identifier:   9D:4C:9B:16:AD:53:30:4E:BF:96:42:BE:9C:5D:12:47:F7:3F:37:C8
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer:       /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial:       019857FC9F7249C3B6C3F269806891930B92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number:          160E
Signing time:             Tue 29 Jul 2025 21:00:30 +0000
Manifest this update:     Tue 29 Jul 2025 21:00:30 +0000
Manifest next update:     Wed 30 Jul 2025 21:00:30 +0000
Files and hashes:         1: FLzhahX1RfEQksVef8HwMw5EmEI.roa (hash: 3r/+kxvTsJcUwXkCOUAwIQMliVjMUukx9o6NgfAcfNk=)
                          2: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: TVTEbTEdn6mVO9AtFZSBU5JIX/99mb0y24oWAiVhhFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:57:fc:9f:72:49:c3:b6:c3:f2:69:80:68:91:93:0b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
        Validity
            Not Before: Jul 29 21:00:30 2025 GMT
            Not After : Jul 30 21:00:30 2025 GMT
        Subject: CN=9d4c9b16ad53304ebf9642be9c5d1247f73f37c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:ca:5b:e0:13:d9:eb:d3:8b:ec:3f:27:f1:
                    8f:08:67:0f:d8:e7:e8:aa:fe:68:47:54:9d:66:5a:
                    88:b0:39:e8:29:2f:ad:10:24:dc:e2:14:c4:13:d0:
                    fa:a2:79:80:af:e7:6b:8d:e5:31:ad:a1:41:7c:c3:
                    18:b2:5d:60:b4:21:6b:4c:6b:5d:cb:f7:5b:91:2a:
                    b1:83:69:e0:29:85:b7:e9:7b:d0:2b:44:9f:e9:90:
                    56:3b:21:1c:b2:f7:c1:df:cf:4a:c8:b1:da:20:ab:
                    a1:74:49:1d:0d:7b:cb:e4:00:c2:f5:64:69:67:fe:
                    f8:a8:c7:b0:b4:d9:78:d9:5a:03:c7:8a:af:1b:53:
                    14:52:7c:61:52:b0:bd:97:a3:fd:38:12:a9:b2:ea:
                    7a:5d:e3:8a:e7:bf:35:18:24:e2:d9:c8:cf:19:c9:
                    a2:d5:50:29:47:85:7a:b0:34:61:87:fe:e0:00:1e:
                    c3:07:2b:32:4c:13:76:20:e5:4b:7d:58:55:ca:07:
                    ca:a0:9c:68:8c:af:c9:3a:cf:aa:da:81:ff:23:68:
                    b8:1b:55:3e:de:0b:39:4f:1c:96:89:7c:f7:0e:e2:
                    93:70:26:c5:2c:8f:99:ac:fc:b8:d6:18:c3:3a:5c:
                    70:d8:7f:c9:3a:39:30:f3:21:ec:b3:0d:4d:3a:0a:
                    a3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4C:9B:16:AD:53:30:4E:BF:96:42:BE:9C:5D:12:47:F7:3F:37:C8
            X509v3 Authority Key Identifier:
                keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:6d:c0:10:4b:eb:a9:23:7b:63:79:0f:e5:07:3b:76:91:
         88:d2:1c:81:af:9f:ed:84:b5:10:7f:07:7b:ee:55:09:a7:1f:
         90:1a:4a:a4:d7:43:47:25:41:89:d2:bf:65:ca:cf:71:2e:e4:
         4e:1f:b2:e8:6c:e6:b9:20:f6:15:0d:9a:d9:76:4f:a3:6f:e7:
         ed:e7:1e:dc:39:96:43:d6:29:f7:66:e8:8a:6d:49:d7:d5:cc:
         c6:67:2d:2c:9f:93:46:bb:a9:9d:e7:59:36:17:d8:a9:1d:93:
         cb:81:6e:e4:07:6f:c5:dc:a2:d5:4d:05:3d:18:b5:f2:f9:d3:
         3a:f9:48:1b:11:56:30:57:e0:8c:a9:3f:03:24:a9:1f:6e:84:
         c2:c8:27:35:b7:13:ef:e9:9b:77:ed:ff:af:14:3f:ee:58:eb:
         f2:e3:23:36:3d:40:6b:b8:66:c5:66:25:d0:90:f1:98:86:85:
         c4:f1:8d:9a:5e:5d:df:cc:48:0a:c8:c2:97:23:7c:53:b0:f6:
         d9:26:27:63:fd:7f:51:c3:7b:82:ff:a0:ec:e2:37:97:22:5d:
         9d:53:b5:75:c0:47:8b:f8:81:26:66:cd:f4:bf:8a:6f:6c:8a:
         3d:81:87:2b:21:a6:80:f3:99:b9:a8:73:09:5d:8c:4e:a2:6a:
         44:c3:b2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:30:02 2025 by rpki-client