Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
File:                     Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json)
Hash identifier:          m0j/C8jSYHocC5FQiVYdZAzYkHASyn9w6dj8AWxuqp0=
Subject key identifier:   61:FB:21:88:F2:AB:CA:15:8B:C2:CE:0F:07:37:22:38:A1:09:30:A3
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       019838A8A38DF528E342CAC419E39CD1D535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
Manifest number:          0676
Signing time:             Wed 23 Jul 2025 19:00:32 +0000
Manifest this update:     Wed 23 Jul 2025 19:00:32 +0000
Manifest next update:     Thu 24 Jul 2025 19:00:32 +0000
Files and hashes:         1: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=)
                          2: 92JGCVG0KGUHt67vpM0BZVn3UQE.roa (hash: I5mDPM3UZXiNkN/cQREcr6aSi6ZUeTXzLV/2lof7iyQ=)
                          3: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=)
                          4: DHpzmZTvBAxT-43rfcQUmYozPLE.roa (hash: i/1DwqMjkRxMvpb2yMahb4K0v+eBiFoV+4UTK3EmkHM=)
                          5: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=)
                          6: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: 4Uji3IGh0fbNJlfg2pB8Itoqo2X2o4J67qi+Rl7n/es=)
                          7: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=)
                          8: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=)
                          9: S4vy57KePPm5skYt1swzoPGddGE.roa (hash: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=)
                          10: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=)
                          11: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=)
                          12: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=)
                          13: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=)
                          14: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 19:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:38:a8:a3:8d:f5:28:e3:42:ca:c4:19:e3:9c:d1:d5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Jul 23 19:00:32 2025 GMT
            Not After : Jul 24 19:00:32 2025 GMT
        Subject: CN=61fb2188f2abca158bc2ce0f07372238a10930a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:88:c5:4f:b4:e0:7f:8f:2b:b8:10:c9:28:
                    e6:96:a6:73:c4:45:38:b0:b6:14:83:cc:21:a4:e5:
                    ab:ab:ac:71:6c:37:39:b6:f0:62:c8:9a:6d:e2:f9:
                    8b:17:81:01:b9:3b:56:2c:68:92:e7:b2:30:39:e5:
                    5e:8c:93:4e:08:99:fd:9e:61:d1:4e:c5:d8:cf:63:
                    50:f3:6a:bc:ee:dc:60:55:bc:03:d4:ad:a6:a0:7d:
                    54:1c:60:1d:66:eb:7a:d4:bc:d6:40:36:2d:19:57:
                    a7:3a:98:98:07:75:34:a0:53:21:43:49:4e:ff:c1:
                    53:e6:47:00:94:ee:42:20:1e:9f:48:fc:3b:43:b0:
                    16:8d:57:7e:13:f1:aa:88:6a:4f:60:7f:41:11:ac:
                    9a:69:e0:4e:95:e6:a1:5b:e2:6b:28:3b:59:a1:ef:
                    18:b5:c9:01:a5:a6:df:03:f1:03:9c:ca:22:31:7b:
                    77:fd:08:43:db:13:10:18:fd:15:7c:12:3a:d4:22:
                    c1:b2:97:bf:35:18:a9:19:29:42:66:4c:85:e6:32:
                    8b:06:93:f7:0a:8b:67:41:9a:2f:85:b6:98:12:ff:
                    48:cb:29:b2:c3:02:7f:4f:62:93:bf:d6:02:44:8b:
                    ff:7f:3a:5d:93:82:8e:33:aa:07:74:cb:fc:e5:9c:
                    67:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FB:21:88:F2:AB:CA:15:8B:C2:CE:0F:07:37:22:38:A1:09:30:A3
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:cb:58:11:89:bb:9e:4f:37:9c:bc:3e:ee:96:8b:bb:d5:bb:
         09:9b:64:a2:b5:56:4f:18:0a:ff:9e:72:97:41:cb:24:0f:99:
         5d:35:bb:91:35:df:fe:8b:44:0d:78:dd:0c:da:9c:69:89:41:
         cd:1b:91:0c:46:bc:89:47:18:89:12:d7:57:97:2c:1f:31:b2:
         1b:69:c0:fb:eb:65:74:39:ab:85:ca:08:b1:57:9d:b3:a0:f2:
         5c:23:88:d8:ae:6e:bc:df:44:ca:2f:20:6d:7a:b9:4a:5a:f6:
         8e:09:87:c9:cf:ab:55:5f:c1:6c:85:7a:f5:d3:8d:0d:e7:6c:
         1b:90:fb:13:51:de:c1:cf:3e:bd:85:d0:cb:8f:47:bc:3d:b9:
         02:8b:34:a5:a5:9d:7f:b6:96:c7:e2:bb:68:8e:de:ec:62:65:
         54:bf:6b:9a:6f:de:eb:22:d2:ec:65:4c:02:ec:7b:1a:ef:f3:
         9e:ff:d4:de:61:4c:bd:24:50:ee:02:b3:3e:47:72:64:b7:e8:
         ec:ed:9c:f7:a5:19:93:5b:f9:d3:6f:6e:d6:ac:f2:28:bc:67:
         f6:c5:f7:83:cd:e0:48:9f:3e:2c:ed:b4:b4:1b:2a:6f:55:5b:
         68:16:c4:7a:e4:e6:2f:f5:cb:9e:c3:a8:17:69:7d:d5:49:4c:
         ad:1b:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:52:54 2025 by rpki-client