Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File:                     Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier:          DH03OiLilyCogaRLMEqNxm74e2Mb3S4oSG1wqxNmPxI=
Subject key identifier:   92:75:61:23:D8:F7:E0:83:9B:23:AD:3F:5C:1E:36:07:E3:1A:D5:C5
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer:       /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial:       0199161B027AAA83D52EA35C9C4428207D73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number:          049D
Signing time:             Thu 04 Sep 2025 19:01:32 +0000
Manifest this update:     Thu 04 Sep 2025 19:01:32 +0000
Manifest next update:     Fri 05 Sep 2025 19:01:32 +0000
Files and hashes:         1: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: BhcosYdC6xOn9fkZnqBjB0scyt8q5pDhYkgkunt0+Ro=)
                          2: pzlWJjQzQzoCKZbR26xCajPlSDU.roa (hash: 61Hu+9N0msg0OltqRJ2+tDJ9j89XxxQKSANBLiUSU78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:1b:02:7a:aa:83:d5:2e:a3:5c:9c:44:28:20:7d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
        Validity
            Not Before: Sep  4 19:01:32 2025 GMT
            Not After : Sep  5 19:01:32 2025 GMT
        Subject: CN=92756123d8f7e0839b23ad3f5c1e3607e31ad5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:38:29:74:fd:c2:37:dd:dc:1b:6e:bb:e3:3a:
                    24:21:97:55:cd:11:18:4f:22:7a:e1:75:be:33:e5:
                    8e:12:ab:81:5a:5d:1e:7b:44:6c:36:e8:4e:16:6b:
                    63:48:24:57:f6:64:2c:86:20:f4:54:6d:a3:92:2e:
                    4c:d4:26:01:2d:56:13:90:4f:8d:bd:af:79:1a:ba:
                    05:1e:03:f0:69:0c:e3:d7:89:3b:8c:6f:fa:68:96:
                    dc:95:87:a7:17:db:e6:06:ad:5c:06:20:b5:08:4f:
                    5a:49:dc:64:0f:62:6a:ab:e7:a0:73:cb:c4:a6:0a:
                    cb:78:03:fc:b4:ec:79:04:7b:cc:df:db:b6:25:dd:
                    ce:36:29:70:3a:52:f9:c3:19:d3:96:03:76:05:0b:
                    8c:32:3b:a5:61:1f:1a:d7:ed:03:7d:37:1d:3c:1a:
                    1a:05:24:99:13:02:f5:86:ef:25:aa:0b:af:54:8a:
                    b4:a7:73:1d:d7:c4:b6:ca:c3:7f:59:8f:ca:11:98:
                    8b:68:8e:87:50:ae:c6:99:a7:94:c0:76:67:b2:ad:
                    93:7e:3a:85:77:de:c4:ff:5b:d1:b4:ba:44:ec:2a:
                    31:8c:0a:88:14:d6:47:52:b3:48:8c:2e:7b:9d:b9:
                    3a:07:d4:7e:e1:6b:58:b2:d6:7e:60:df:0b:40:b4:
                    60:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:75:61:23:D8:F7:E0:83:9B:23:AD:3F:5C:1E:36:07:E3:1A:D5:C5
            X509v3 Authority Key Identifier:
                keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:13:d3:94:d9:83:48:ef:f6:e1:e6:9d:b7:4d:2f:a7:2e:74:
         f6:0b:16:48:ef:21:89:3b:20:f3:40:8d:a3:21:38:44:24:c9:
         ae:ae:f9:19:f6:7a:e0:8b:99:3c:d6:96:63:34:e3:9f:56:72:
         13:0f:59:46:4e:25:0d:e9:b6:16:a9:70:67:07:47:eb:3a:a3:
         75:ff:fe:19:9d:40:1d:b1:73:cb:48:90:b2:e5:53:d0:bf:49:
         22:19:07:aa:a7:a5:48:55:15:5d:d6:8a:0e:34:ed:38:53:c0:
         83:7d:ef:57:c7:7e:7b:f0:b2:0d:ef:d2:66:4c:b5:27:50:8b:
         69:ec:60:bc:37:2a:af:56:9a:8b:83:f5:d8:cb:fc:09:df:c2:
         eb:17:5f:d7:f1:7b:3f:2f:a7:f0:98:5d:bb:e4:19:91:57:d7:
         0b:60:17:17:99:ab:ee:bf:dc:19:41:68:00:fb:f2:e5:dc:49:
         0a:6c:9b:15:81:1a:a8:15:58:0f:1f:d0:0d:2f:bc:18:03:d8:
         71:81:29:0b:4c:d8:2b:5d:e7:ca:6d:79:34:8a:16:38:19:8a:
         fc:be:10:3e:c9:b8:76:a7:cf:6b:4d:3c:6b:f8:1d:e1:7e:67:
         7c:fd:11:03:08:35:9a:0e:bc:f1:00:10:1e:3f:e7:64:e4:72:
         fc:cf:68:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:18 2025 by rpki-client