Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
File:                     Fc09GKyTtW_SsxgAAWXc1swwE4I.mft (raw, json)
Hash identifier:          iOEV8DvW1n4zQjfNTFrfoXnpyWtsGLP55gGrLZmiM9o=
Subject key identifier:   3B:8C:E9:A3:1C:60:53:2A:9E:5D:6A:34:C6:6F:F6:2D:84:0A:E3:5F
Authority key identifier: 15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
Certificate issuer:       /CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Certificate serial:       019921B230529DFAE209A71CD8CABDDC4DDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 01:02:29 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:29 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:29 +0000
Files and hashes:         1: Fc09GKyTtW_SsxgAAWXc1swwE4I.crl (hash: VX4SxZAPK/D8GgqHZtKl2KuiwR1+/ErwBB4g4MQiZjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:30:52:9d:fa:e2:09:a7:1c:d8:ca:bd:dc:4d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
        Validity
            Not Before: Sep  7 01:02:29 2025 GMT
            Not After : Sep  8 01:02:29 2025 GMT
        Subject: CN=3b8ce9a31c60532a9e5d6a34c66ff62d840ae35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:d3:7f:6a:c5:5e:59:e7:e5:15:44:f8:b9:
                    52:49:5d:61:12:16:fc:d7:c4:40:e6:a8:dc:46:2a:
                    eb:9c:74:3c:02:99:1c:0d:13:d3:27:c0:a0:4e:26:
                    c7:37:3c:28:c1:f6:cd:96:e4:07:df:42:28:07:17:
                    9f:a4:40:a2:1b:bb:84:27:ce:ac:b0:8b:61:80:8c:
                    26:e4:b6:ef:57:9a:64:5f:4f:8c:5c:f8:13:3c:c9:
                    52:61:c4:2e:92:b0:59:04:17:d0:79:42:48:f7:17:
                    65:32:4b:ed:6a:55:64:5a:4a:5d:ee:24:05:32:5b:
                    a2:31:93:5c:a3:35:72:89:73:19:6f:69:cd:a5:0c:
                    f2:df:ce:49:b8:ad:22:35:8a:4e:2a:b7:32:ee:72:
                    e2:14:bb:db:21:81:50:19:41:4f:55:b5:39:9c:08:
                    73:71:c4:b3:3b:18:41:54:66:0f:4b:20:09:74:4d:
                    c9:35:78:5a:45:5c:43:28:fe:1e:37:6c:2b:e6:e8:
                    a2:5c:88:e0:e3:47:61:03:a6:84:62:12:e7:10:9b:
                    8c:bc:45:8c:e3:99:f2:44:4b:c0:3f:45:82:fc:53:
                    a7:06:f9:6d:aa:45:ab:f1:2d:2b:43:59:d3:db:71:
                    2e:cd:10:a0:22:01:a2:5f:24:19:44:11:1d:40:5b:
                    02:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8C:E9:A3:1C:60:53:2A:9E:5D:6A:34:C6:6F:F6:2D:84:0A:E3:5F
            X509v3 Authority Key Identifier:
                keyid:15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:aa:db:99:de:19:62:75:8f:c8:23:06:a9:e4:d9:51:b2:61:
         e8:6c:69:23:ce:6d:14:77:ca:d9:33:90:0a:ce:09:45:e0:d5:
         cb:55:43:6c:1d:e4:fe:84:24:61:95:0e:c6:b8:3c:a6:e4:61:
         58:ad:f2:88:ec:d6:ee:ba:4f:7e:5d:83:07:c8:3b:33:f2:36:
         e0:6a:d3:b0:e9:94:9a:a4:0d:ee:b3:32:3f:d4:e2:0d:f3:01:
         c0:5e:0a:45:28:7f:8d:b2:fd:5f:02:e0:c6:1c:f3:59:47:ae:
         84:40:ff:27:af:b6:33:60:84:de:9f:09:48:cd:e5:24:cc:f4:
         3a:48:23:d1:1c:78:53:56:0c:bc:f6:c7:58:61:fa:90:7e:c9:
         70:b6:76:26:7f:ba:3f:d0:15:78:a1:ef:8e:56:a3:75:ff:d3:
         4a:ec:a4:5e:d3:c0:6b:8f:f7:f2:94:bf:9f:61:7a:c6:ca:7e:
         0c:92:19:bc:f0:a4:46:1c:c8:bc:3a:a3:15:82:8d:6d:66:72:
         76:ab:1c:b1:55:6a:b0:57:4d:9b:23:4a:42:aa:32:39:c7:df:
         4f:bc:b5:19:08:7f:cb:d2:80:15:10:48:d8:11:34:f9:48:8a:
         9e:3f:72:67:a7:f4:2e:f1:21:a0:be:52:7a:d1:ea:7c:9c:df:
         1f:53:47:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:35 2025 by rpki-client