Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
File:                     Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json)
Hash identifier:          f6pHwzQJ4/lMh+KhJ8Wy4MZB4xCFHX5rPEMvHPVr/Y4=
Subject key identifier:   EC:C1:F1:B5:C5:E7:E9:A0:6A:06:39:94:1B:2E:BE:65:E0:59:41:6C
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       01983A96CBC015F4AAA321680E25B4490D7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
Manifest number:          0677
Signing time:             Thu 24 Jul 2025 04:00:17 +0000
Manifest this update:     Thu 24 Jul 2025 04:00:17 +0000
Manifest next update:     Fri 25 Jul 2025 04:00:17 +0000
Files and hashes:         1: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=)
                          2: 92JGCVG0KGUHt67vpM0BZVn3UQE.roa (hash: I5mDPM3UZXiNkN/cQREcr6aSi6ZUeTXzLV/2lof7iyQ=)
                          3: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=)
                          4: DHpzmZTvBAxT-43rfcQUmYozPLE.roa (hash: i/1DwqMjkRxMvpb2yMahb4K0v+eBiFoV+4UTK3EmkHM=)
                          5: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=)
                          6: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: AdB/ddZTjddGM2S4IwF5oMFLQJVvAIoqhgfyD24abG0=)
                          7: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=)
                          8: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=)
                          9: S4vy57KePPm5skYt1swzoPGddGE.roa (hash: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=)
                          10: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=)
                          11: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=)
                          12: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=)
                          13: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=)
                          14: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3a:96:cb:c0:15:f4:aa:a3:21:68:0e:25:b4:49:0d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Jul 24 04:00:17 2025 GMT
            Not After : Jul 25 04:00:17 2025 GMT
        Subject: CN=ecc1f1b5c5e7e9a06a0639941b2ebe65e059416c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:73:be:2b:cc:3e:f2:78:4a:88:3c:0d:98:
                    cb:50:95:21:0c:50:ea:51:8c:ab:f2:e7:6b:10:a6:
                    f8:f8:f1:49:3f:2c:90:1f:e8:41:f2:63:c5:50:79:
                    44:7f:12:87:3c:97:77:14:09:ff:3e:58:2f:1c:e3:
                    98:58:9e:e1:f0:52:22:62:db:19:fd:70:85:4e:14:
                    a1:a8:cc:4e:66:0f:35:2e:f3:13:ae:57:3b:05:f4:
                    d5:b2:4f:b4:27:e4:3f:6a:6d:b3:f9:c1:ab:cb:03:
                    59:c5:50:03:dc:ac:bb:f7:70:0c:d3:39:73:d8:9a:
                    39:ab:26:71:c7:df:45:d1:c6:3b:93:cc:bb:46:f5:
                    1a:33:ae:6d:4a:85:83:25:31:89:b1:20:27:6b:db:
                    2b:e9:77:bf:e9:4d:c5:b8:3b:a6:3f:41:27:96:70:
                    3a:da:a2:e5:9c:65:bc:e6:3a:e0:a6:7d:f8:49:ed:
                    b9:b3:87:23:9d:fd:20:71:ef:61:51:02:c2:c0:91:
                    a8:d3:16:49:b6:96:dc:75:01:db:ee:53:71:6b:47:
                    f4:a5:20:8e:68:b8:3e:37:b9:65:7a:5a:5e:cc:7c:
                    85:ac:03:a5:1d:a4:01:c0:63:a7:a5:e9:34:6b:7b:
                    0e:eb:cc:d5:fc:0a:f9:54:0b:57:b9:16:4c:48:20:
                    58:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C1:F1:B5:C5:E7:E9:A0:6A:06:39:94:1B:2E:BE:65:E0:59:41:6C
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3c:02:d9:03:0e:ad:cc:45:f4:82:13:a1:c4:5b:ae:b5:21:
         b2:64:54:c9:2f:50:27:b1:13:de:f6:22:3d:ed:9b:3b:0c:07:
         a2:c6:08:3d:75:7e:1c:a2:fa:f5:1f:51:3a:57:9e:ce:6a:e9:
         d4:dd:a8:25:4c:96:2c:c0:00:8b:90:38:49:62:7b:04:57:61:
         27:00:50:fb:b1:52:5d:41:d9:c2:64:9d:f1:89:04:86:73:8c:
         56:fe:1d:77:2f:8a:c2:b6:91:69:d9:cc:58:fd:dc:06:1c:cb:
         9c:7e:d5:77:16:e2:d8:4e:24:ec:c3:a4:14:a0:1f:1b:46:ea:
         fc:ee:8c:49:e4:56:59:be:71:b5:1c:a4:ac:04:8a:7d:d8:1a:
         02:e7:d2:01:67:a0:bc:38:02:16:7a:4f:a3:03:48:6c:04:e7:
         09:51:58:24:a0:11:e3:a9:d1:9f:96:b3:d7:ae:5a:da:b9:10:
         a2:c4:b2:c1:f2:70:0b:0e:31:89:10:83:68:d0:4b:41:05:e6:
         ed:f3:56:bd:58:19:d9:3b:3a:08:0b:e8:2b:d6:ec:21:42:d5:
         77:ed:1f:ee:53:43:1d:68:3d:eb:13:2c:d6:35:d2:dc:7b:49:
         79:c3:0c:fb:8f:d2:c3:fe:3a:58:a2:75:f4:6f:96:a2:84:9c:
         0c:3f:54:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:51:38 2025 by rpki-client