Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
File:                     FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json)
Hash identifier:          YG1X8Nno4y273noZ/WHVmkwEDgrtmGoBazwxV8Bse6M=
Subject key identifier:   C2:6D:23:64:DB:16:70:42:F8:60:0C:50:1B:C5:B4:A8:27:5E:36:F8
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Certificate issuer:       /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial:       0198458945CE3A2CAE172F1DBD126C7B355D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
Manifest number:          1619
Signing time:             Sat 26 Jul 2025 07:01:20 +0000
Manifest this update:     Sat 26 Jul 2025 07:01:20 +0000
Manifest next update:     Sun 27 Jul 2025 07:01:20 +0000
Files and hashes:         1: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: 95A2DBwzVU0G/6mJzqpcmQVqPn2w06+GwvN6HlEs5Ow=)
                          2: Ky4bLo9J6pOGQKNm7HdTTpVyXUQ.roa (hash: Nz/bgREWmfO74J020d6hSSWbUR82qaNTZZa/sGleP5Q=)
                          3: ZuxCaM0jvO8dT69rrtCo-UU_fGM.roa (hash: mTx3iBU5+gUzCuwkRIlwRwR4OdmyhWs/YLzJTZWJgsk=)
                          4: _ZHo0DXp29WN4BOS9yj8UgLowqU.roa (hash: k2O5B28gMEUS5GB1MDIowIqcob2fshstanyKIafnymc=)
                          5: i4MzjZTpbtZK_ZPjW181XA_QlOs.roa (hash: a3SMnVU0VU8ASpu/GP3SPdiJleFoyqLmWwLdGByzs8I=)
                          6: s09aV916ePc245Z9GMH4Ts0cTn8.roa (hash: hdMuDE9zUjm2uLsuj9BEHmHlQ1AMBc0s6keoHZxmUYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:89:45:ce:3a:2c:ae:17:2f:1d:bd:12:6c:7b:35:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
        Validity
            Not Before: Jul 26 07:01:20 2025 GMT
            Not After : Jul 27 07:01:20 2025 GMT
        Subject: CN=c26d2364db167042f8600c501bc5b4a8275e36f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:a6:3b:c2:ad:d0:60:90:9d:b7:0d:e7:75:
                    53:ff:c8:7e:4a:61:de:7b:3b:77:b2:12:05:14:08:
                    ab:18:96:09:b8:c7:be:9b:16:31:12:85:a3:1c:45:
                    e6:5e:a8:24:7f:7f:be:e0:52:7b:17:df:b2:3a:38:
                    95:61:c5:22:65:1d:6e:c1:e7:d9:bb:46:2c:36:1d:
                    c1:c5:37:34:54:be:34:4a:31:50:e8:cf:32:d8:88:
                    91:72:fa:96:8a:65:be:10:bf:5b:64:21:cd:61:cd:
                    64:93:b1:89:f5:a2:14:49:06:c9:df:c3:cf:bf:9e:
                    d9:3a:29:f2:29:73:f8:e0:46:5e:50:e1:cc:d8:18:
                    69:13:f8:c7:4d:dd:59:ae:e5:ad:d8:0d:f7:f3:35:
                    45:ba:3c:b0:41:03:a2:44:07:dd:97:52:e7:9e:66:
                    cc:72:45:3a:a3:76:e2:22:ce:bd:d9:f2:ea:60:4d:
                    84:6a:e8:29:e1:dd:be:9b:72:e1:cc:bb:91:28:64:
                    91:87:87:6f:79:4d:66:17:ce:14:1a:5e:4e:d8:60:
                    b5:0e:37:76:fb:f3:fd:c9:f6:6d:b2:6a:03:ae:e5:
                    26:bb:0f:e6:7c:51:3b:da:47:d1:7f:cc:cf:c6:cb:
                    68:cc:54:2a:77:0d:c3:ce:b8:29:07:1c:6e:92:3c:
                    32:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6D:23:64:DB:16:70:42:F8:60:0C:50:1B:C5:B4:A8:27:5E:36:F8
            X509v3 Authority Key Identifier:
                keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:dd:88:7d:df:90:21:b1:db:da:bf:42:c5:6a:2f:0c:16:9a:
         fb:7b:b4:ee:bb:c2:19:2c:15:e0:68:56:08:28:f9:b1:7e:e3:
         54:3a:e1:5d:59:0f:57:b2:71:83:5f:a7:2c:a8:0c:ee:8a:20:
         35:4c:f7:03:df:ca:87:31:6b:af:45:73:d3:d2:16:89:27:69:
         d8:55:6b:c8:70:5e:23:29:bb:60:2e:0c:f8:20:ee:3b:ca:d4:
         84:cc:00:2a:1a:21:9d:d1:aa:90:54:b3:68:6e:35:08:22:b4:
         61:81:49:92:7d:44:c9:0e:b2:de:66:c8:59:a1:ed:0c:18:bf:
         5f:9d:06:6d:76:d3:f0:ec:43:bd:ab:7a:96:05:f3:1f:c5:3d:
         2d:96:b1:b1:a4:33:d6:19:f6:ba:b2:a5:a2:71:dc:0b:8c:82:
         fb:f7:48:88:b6:d6:af:ef:09:c4:81:0b:01:31:61:7c:f7:27:
         db:2b:b8:4a:ee:55:6a:d9:f3:81:44:04:d5:84:09:20:29:81:
         d2:2e:04:4b:9f:8b:1c:d2:b6:5c:82:ac:6c:b9:33:d4:b5:3b:
         e6:f3:fd:d4:8a:65:d9:f6:71:eb:cc:2a:51:11:3b:bf:78:40:
         8a:9f:80:45:6c:35:ff:62:50:ac:2f:b9:85:3b:66:78:b4:8d:
         1b:93:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 16:24:20 2025 by rpki-client