Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
File:                     FjvL2byThJp__fcpTC3p37Hq8oM.mft (raw, json)
Hash identifier:          jRqBHBAKwvMj1VGGpzAB+l8VH80C0bM2ZG/1qIkyOvs=
Subject key identifier:   9E:C7:FC:D1:85:E7:C0:9F:62:D7:21:26:78:25:A7:E9:B5:B3:89:8D
Authority key identifier: 16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83
Certificate issuer:       /CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
Certificate serial:       0199228C303D9C4700F924B31E202D913E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
Manifest number:          083F
Signing time:             Sun 07 Sep 2025 05:00:36 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:36 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:36 +0000
Files and hashes:         1: 3UNyKDhAIctkIaiCHfw-i8AjC60.roa (hash: RbaiVZW2VnfBiQ5GEAYbSY+TEp7BHi5lhZORNmt7Iwo=)
                          2: FjvL2byThJp__fcpTC3p37Hq8oM.crl (hash: dmXD+rr9LBDp8TQJzNyA+NYpjYoUQ+z6n52crtLfu2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:30:3d:9c:47:00:f9:24:b3:1e:20:2d:91:3e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
        Validity
            Not Before: Sep  7 05:00:36 2025 GMT
            Not After : Sep  8 05:00:36 2025 GMT
        Subject: CN=9ec7fcd185e7c09f62d721267825a7e9b5b3898d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:f4:5d:96:23:0a:c7:8b:09:56:37:2b:1c:
                    23:c4:e2:36:3e:ef:bb:91:5e:ed:d4:c7:cc:fa:10:
                    6b:43:b3:ba:35:ec:1f:c6:8d:74:d9:44:b4:07:46:
                    68:49:65:cf:39:7b:53:24:92:92:6d:5b:21:4f:15:
                    c3:68:c3:49:70:f7:51:b4:6d:61:ec:a9:dd:2a:fa:
                    dc:a3:0a:a3:35:47:a6:e9:ee:07:98:90:a8:d8:78:
                    ca:fb:2a:e7:17:75:0d:a2:5d:42:9f:8d:b0:6a:ec:
                    1c:4e:56:13:42:3d:70:1d:ac:28:73:c4:3e:26:fa:
                    ed:60:fe:4e:62:75:9e:e0:23:a4:fc:70:df:b2:a8:
                    07:d8:15:c0:74:be:af:42:9a:c1:95:bb:b2:10:84:
                    c9:33:f6:1b:bb:f2:7e:42:e3:aa:c5:88:fd:57:fc:
                    7f:53:84:e7:72:c7:a5:ac:48:18:2d:6a:a3:9d:20:
                    8e:7d:f7:b7:ac:c7:2d:c3:e6:f6:c9:5c:b0:64:2b:
                    93:25:19:6b:6f:a1:73:96:a7:c1:c0:07:3b:f6:0e:
                    0e:80:8c:ff:e7:b0:49:e8:3e:43:1f:b6:6c:be:50:
                    5c:17:85:d2:3d:11:a0:65:8e:2c:50:59:c7:d8:6f:
                    b5:7b:71:bf:6d:09:87:00:19:9c:9a:58:be:3f:6d:
                    9b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C7:FC:D1:85:E7:C0:9F:62:D7:21:26:78:25:A7:E9:B5:B3:89:8D
            X509v3 Authority Key Identifier:
                keyid:16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:38:8a:2e:79:5c:cb:e4:f8:fb:92:c5:99:f0:b1:1e:79:e0:
         bd:c9:c5:7f:42:62:12:ca:64:48:63:39:aa:85:6a:70:bf:84:
         2c:05:0c:a7:a9:ba:ba:57:5d:47:86:82:95:bc:4e:13:25:30:
         44:fb:ef:be:05:60:cf:8e:9e:b7:a6:23:1d:81:95:a3:e8:4c:
         40:60:18:2a:bc:6a:24:f6:39:6d:c0:c8:73:79:f7:d3:01:a2:
         f9:3b:89:1d:fe:79:5c:0d:c4:a2:4e:4f:d4:59:b2:7b:84:09:
         5b:a0:29:34:a1:d1:01:5b:c4:e6:54:ab:a2:c5:85:6b:c0:bb:
         f2:b8:fd:07:f9:29:a1:b9:3d:74:48:cd:e8:d8:14:74:8f:78:
         8c:3f:77:6b:e2:4b:f6:2e:a6:90:0d:ae:f4:24:cc:dc:fc:2f:
         ca:37:29:21:40:ac:c6:8c:58:e9:0e:c8:11:21:06:07:f5:09:
         6d:a2:dd:6e:2e:42:8f:ab:0a:84:c7:ce:59:84:57:7c:fc:a8:
         7b:0c:34:18:6d:bf:de:57:bc:eb:1c:e8:46:36:90:ef:37:ca:
         80:a3:33:d3:5d:f3:16:ae:62:1d:8c:7b:c7:bf:c4:8a:c6:7d:
         bb:76:22:d7:90:48:2e:5c:75:82:46:b6:af:9d:2e:7a:41:81:
         df:a3:d4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:29 2025 by rpki-client