Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
File:                     Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json)
Hash identifier:          5gZtqvzzSilPGQlsOBvXsK7VOjibeYHcms/nqHZFhHo=
Subject key identifier:   B5:67:6A:DA:C9:FA:F2:88:E6:D9:01:7E:26:4A:B1:02:8D:12:5A:68
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       01983E73E8248105007D196FB4953F024333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
Manifest number:          0679
Signing time:             Thu 24 Jul 2025 22:00:40 +0000
Manifest this update:     Thu 24 Jul 2025 22:00:40 +0000
Manifest next update:     Fri 25 Jul 2025 22:00:40 +0000
Files and hashes:         1: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=)
                          2: 92JGCVG0KGUHt67vpM0BZVn3UQE.roa (hash: I5mDPM3UZXiNkN/cQREcr6aSi6ZUeTXzLV/2lof7iyQ=)
                          3: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=)
                          4: DHpzmZTvBAxT-43rfcQUmYozPLE.roa (hash: i/1DwqMjkRxMvpb2yMahb4K0v+eBiFoV+4UTK3EmkHM=)
                          5: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=)
                          6: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: fA6DD/jzA9O12ITlJc2GTrvgt9BW/XWWHaUZqJ9nNCM=)
                          7: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=)
                          8: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=)
                          9: S4vy57KePPm5skYt1swzoPGddGE.roa (hash: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=)
                          10: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=)
                          11: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=)
                          12: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=)
                          13: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=)
                          14: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3e:73:e8:24:81:05:00:7d:19:6f:b4:95:3f:02:43:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Jul 24 22:00:40 2025 GMT
            Not After : Jul 25 22:00:40 2025 GMT
        Subject: CN=b5676adac9faf288e6d9017e264ab1028d125a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:db:fb:b5:e6:5c:60:cd:1f:1f:ea:61:19:b8:
                    e5:3a:c5:6c:44:bd:5c:27:50:b1:da:08:fa:bf:3d:
                    db:9d:39:93:19:f6:b8:49:1c:b9:8b:e1:82:01:a3:
                    ae:64:7b:8c:fe:3b:e0:db:f2:b5:e4:c4:8e:f2:09:
                    dc:67:fe:3e:9f:cc:15:4a:16:fb:1c:f0:d5:d2:b8:
                    72:ed:1a:16:e9:83:c2:21:86:7c:73:bf:ed:51:89:
                    75:6b:d2:c0:01:31:01:69:f7:c9:74:9c:44:48:d1:
                    48:97:45:49:94:ce:c5:e1:fb:89:d7:31:15:3e:c2:
                    e0:8d:e1:c7:63:69:c7:e8:bc:54:4a:d3:ee:b4:1c:
                    a0:b4:c2:22:e1:fb:d4:55:85:18:76:f4:4d:7a:3e:
                    af:88:9f:f0:f8:29:2d:bb:09:25:07:dd:1d:fa:69:
                    a2:1b:49:df:76:48:32:24:74:fa:d5:04:11:b6:1c:
                    c6:da:6a:60:f4:13:d9:93:9b:ad:29:9f:74:0c:16:
                    09:df:a7:20:ab:54:8d:20:ca:e4:fa:b0:fe:be:ed:
                    fa:40:88:19:1b:b3:63:91:ca:6b:8a:2b:a9:26:e8:
                    aa:89:d4:44:d5:e0:73:25:3e:33:f4:00:8b:9a:00:
                    de:6a:3b:ed:66:77:4d:93:63:a8:72:4f:03:dc:35:
                    76:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:67:6A:DA:C9:FA:F2:88:E6:D9:01:7E:26:4A:B1:02:8D:12:5A:68
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:7c:00:7a:e1:a1:1b:63:ee:9c:31:9a:88:f8:de:c7:02:81:
         cb:6c:91:e8:e9:ea:01:e7:6c:31:1c:af:82:a7:f9:4f:1e:f6:
         16:52:be:1f:cd:03:a9:66:57:eb:e0:6b:60:8f:c5:00:c8:d5:
         27:52:43:6e:38:83:4e:fa:11:08:25:25:5c:94:61:15:d9:7f:
         77:da:a5:fd:4f:da:44:b1:b6:db:0f:01:bf:e8:4e:ce:65:9f:
         a4:85:0d:5a:59:ab:a6:c9:f8:af:a8:f6:70:ff:de:80:5a:56:
         1e:1e:78:74:0a:09:b7:51:19:27:0b:53:38:f4:7b:62:c0:d7:
         f1:d5:00:9d:17:1a:00:23:c5:44:c5:d5:24:d4:09:00:74:e6:
         32:e8:eb:92:ea:83:eb:7e:70:ea:bd:f1:37:1d:11:13:f7:88:
         b1:fa:50:71:c6:21:57:ae:c7:b1:87:cb:aa:db:27:73:6b:5c:
         f6:7d:20:fa:62:de:d1:7f:31:88:15:4e:ba:09:d3:25:6f:7e:
         e5:ed:c1:c2:c5:33:3a:e4:b7:d7:c9:5f:77:8a:48:c4:09:02:
         fa:74:70:79:3d:8a:54:2e:2e:f6:3d:30:86:c8:50:f4:4a:90:
         de:ee:1d:eb:83:7e:36:69:5b:57:cf:61:30:65:ce:9b:8a:f9:
         3e:1e:c4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:11:09 2025 by rpki-client