Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
File:                     Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json)
Hash identifier:          jsILhmcqPsnjFUfapY4W5VjSxrioyD+rjlAgihGpoao=
Subject key identifier:   61:F0:3F:BB:F5:0B:1D:56:34:44:D7:88:7D:74:3F:28:D4:C3:EC:C9
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       01984250B44EF89ED4F5DD4AAA4512145AAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
Manifest number:          067B
Signing time:             Fri 25 Jul 2025 16:00:41 +0000
Manifest this update:     Fri 25 Jul 2025 16:00:41 +0000
Manifest next update:     Sat 26 Jul 2025 16:00:41 +0000
Files and hashes:         1: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=)
                          2: 92JGCVG0KGUHt67vpM0BZVn3UQE.roa (hash: I5mDPM3UZXiNkN/cQREcr6aSi6ZUeTXzLV/2lof7iyQ=)
                          3: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=)
                          4: DHpzmZTvBAxT-43rfcQUmYozPLE.roa (hash: i/1DwqMjkRxMvpb2yMahb4K0v+eBiFoV+4UTK3EmkHM=)
                          5: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=)
                          6: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: kHPaDM5ETx5jkhrKjFqCGvqXYUMEufopLrDWy+VXCOE=)
                          7: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=)
                          8: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=)
                          9: S4vy57KePPm5skYt1swzoPGddGE.roa (hash: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=)
                          10: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=)
                          11: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=)
                          12: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=)
                          13: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=)
                          14: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:50:b4:4e:f8:9e:d4:f5:dd:4a:aa:45:12:14:5a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Jul 25 16:00:41 2025 GMT
            Not After : Jul 26 16:00:41 2025 GMT
        Subject: CN=61f03fbbf50b1d563444d7887d743f28d4c3ecc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5a:f3:86:90:bf:c4:92:e5:db:8e:d8:e6:d7:
                    8c:b8:89:3e:82:27:2d:f1:43:c5:b7:8e:da:dd:f7:
                    72:f2:15:e6:74:1e:46:fc:7c:a4:16:7d:ee:cc:3c:
                    08:34:c8:ea:e2:22:8a:a9:d5:81:76:86:72:6a:5f:
                    68:5c:85:2a:93:e1:0d:7e:4f:b9:0e:58:5c:f4:49:
                    89:0a:4b:2f:a6:ce:a4:a4:1c:c6:35:91:67:96:7a:
                    75:66:39:1d:6f:78:c7:e7:55:cf:9b:cf:10:d1:88:
                    fc:c0:99:56:8e:c8:46:18:ad:67:74:7c:5f:41:c7:
                    59:fe:10:3b:f9:3d:93:c2:26:50:7d:be:4b:17:a0:
                    01:76:2a:77:1d:c8:52:8d:8f:29:82:8c:1b:01:8b:
                    f6:ab:f5:f8:ce:50:17:e2:4d:73:b2:29:8f:de:d9:
                    a3:78:fb:3b:c8:5f:69:af:5d:ad:4d:c7:c6:91:b1:
                    3f:0a:52:5f:ea:c5:b6:22:35:ed:d4:4c:de:b1:3c:
                    c3:91:fb:74:42:9c:fb:23:5d:ca:39:3d:f4:de:8d:
                    37:5c:d9:1f:bd:e6:32:f2:86:bb:93:7a:55:af:13:
                    cd:e2:04:8d:0b:9b:b9:74:da:0c:87:0f:fb:55:89:
                    d1:1a:ae:9e:22:0c:85:7c:cf:f5:d7:d7:ba:59:db:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F0:3F:BB:F5:0B:1D:56:34:44:D7:88:7D:74:3F:28:D4:C3:EC:C9
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4e:14:f4:31:92:ab:5f:b8:e2:e4:59:82:bc:1c:18:db:75:
         4c:f3:13:b0:3a:af:ed:4e:a0:e2:d4:e7:42:e5:f8:42:ec:f0:
         dd:12:b6:ed:48:b8:91:91:8c:06:b9:25:1a:70:ab:bf:98:09:
         ed:52:8c:eb:cc:ad:7f:29:d9:41:08:13:e3:f5:72:e7:03:3c:
         82:65:b0:68:7d:43:fc:a1:ab:bd:a4:33:84:35:77:3a:89:23:
         1b:6f:03:05:34:d7:29:9f:45:1c:c3:0d:4e:66:47:86:1b:55:
         04:de:85:05:ab:7a:bb:76:49:93:bd:0e:6e:fe:b7:43:b2:df:
         42:1f:db:f2:af:d7:6d:b8:f4:a9:0f:22:17:ad:88:17:df:90:
         dc:db:cc:10:6d:85:e8:ac:7f:9f:a5:57:63:a7:03:ff:b6:0a:
         ae:56:2a:43:25:94:60:7e:6b:66:c6:57:46:7d:fd:de:c8:40:
         53:3d:d4:e9:6a:b0:d8:99:d1:e9:60:5a:fd:24:92:63:c2:76:
         d2:d7:2f:f2:ea:b6:52:6c:5e:e4:a8:67:d3:39:fb:2d:4e:78:
         f3:89:ef:f6:cf:99:8f:e5:36:68:70:d7:31:22:80:75:c1:59:
         e7:7c:43:e3:b0:cd:d4:dc:76:d4:22:20:46:39:25:56:f4:4a:
         86:59:01:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:50:38 2025 by rpki-client