Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File:                     FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier:          hXGqi/fV5eheq+JfJhAlu9OFHvFvLVxDQqxs+q/KcD0=
Subject key identifier:   1C:21:96:05:21:AD:CD:45:C4:F5:66:99:0A:BE:96:B2:48:7B:79:BE
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer:       /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial:       01991764ADF899EBF143AD361D84749EB4B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number:          166C
Signing time:             Fri 05 Sep 2025 01:01:37 +0000
Manifest this update:     Fri 05 Sep 2025 01:01:37 +0000
Manifest next update:     Sat 06 Sep 2025 01:01:37 +0000
Files and hashes:         1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: NEbCFhRdK3wB8aYLi3cl9kFzIbyn+nKwh/5PGs3R/mY=)
                          2: rXJZFmG2fExX2PgdhmMI1znr1Ys.roa (hash: jLirKW8uoxxjWyg59lIt3L6simlxOfJjoRXDdsPT8aQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:64:ad:f8:99:eb:f1:43:ad:36:1d:84:74:9e:b4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
        Validity
            Not Before: Sep  5 01:01:37 2025 GMT
            Not After : Sep  6 01:01:37 2025 GMT
        Subject: CN=1c21960521adcd45c4f566990abe96b2487b79be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:af:87:af:68:48:07:7a:6d:76:74:9d:49:17:
                    3d:3f:92:53:40:07:06:f5:ae:19:f2:ae:f3:e9:ae:
                    2a:ed:e1:fe:b2:2f:2b:a4:41:d1:43:a9:a0:1b:81:
                    b2:c0:9f:58:f5:ad:d5:05:0c:b1:6c:a9:f1:f4:d3:
                    2a:25:02:2a:bc:02:56:93:1a:f9:d5:07:21:50:79:
                    f3:50:84:eb:b6:fb:49:dc:d8:24:64:8c:a5:4b:01:
                    4d:88:6a:62:fa:2f:cb:74:b1:5e:6f:0c:03:fd:a7:
                    33:f3:33:7f:75:78:3c:3e:58:47:d5:b4:80:3c:6b:
                    29:45:f3:fb:2e:2a:ac:a3:e8:67:7f:ad:d0:37:39:
                    7e:e5:60:74:84:c9:4b:96:22:e7:3c:94:62:1d:a6:
                    c9:3a:30:76:20:31:2f:f8:71:67:1e:a1:da:0f:25:
                    f4:e3:7e:40:58:22:ff:e6:31:11:92:dd:56:c7:1f:
                    bb:33:5f:43:b6:dd:b1:a3:cc:f6:dd:21:53:f1:d4:
                    15:a3:3b:f5:39:49:94:e1:fc:be:b6:88:ff:95:a7:
                    fa:13:1a:08:e4:9a:f0:a6:bd:29:97:8d:91:9d:dc:
                    39:a9:3b:ab:43:94:01:ac:09:5d:fb:b2:ca:cc:a9:
                    e4:05:3f:eb:a9:a7:a7:46:c7:39:bf:55:31:97:fe:
                    ef:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:21:96:05:21:AD:CD:45:C4:F5:66:99:0A:BE:96:B2:48:7B:79:BE
            X509v3 Authority Key Identifier:
                keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:0c:00:c2:2e:e9:c3:4c:b2:f9:17:69:0d:89:e7:2b:d0:38:
         d4:e7:c3:14:8f:26:7d:91:24:99:06:cb:78:66:98:29:b0:5e:
         63:ab:84:c8:01:d7:8a:37:92:1a:f1:7d:d7:ac:77:09:14:31:
         6a:ef:ff:99:1d:7e:12:a8:50:f7:21:99:23:16:e4:90:78:41:
         40:ad:63:2e:01:ad:d6:45:3e:98:75:3a:00:4b:77:98:26:d2:
         9a:2f:a5:bf:04:36:f2:44:b5:27:07:b1:31:a5:f4:12:41:50:
         1f:da:dd:d4:dc:c8:f6:c0:b0:2a:f9:bc:47:7b:ee:81:15:3a:
         35:8e:b0:84:41:44:e8:8f:47:87:83:97:90:17:83:af:9c:30:
         7a:eb:b9:de:16:3d:4f:ca:33:a8:88:74:71:b1:fb:e9:09:08:
         7f:8b:e2:27:dd:74:1d:44:44:3f:74:b7:f3:66:8b:ef:9f:8a:
         9c:a3:5b:b8:76:7e:03:84:e1:08:e8:fb:42:8a:82:04:79:41:
         c8:8b:d6:45:9a:2a:f9:7b:82:9b:3b:11:0f:b5:de:3d:d7:12:
         40:f5:88:09:34:48:c4:37:f3:73:9e:96:b8:59:db:e7:70:dd:
         0d:98:31:fd:ac:0a:55:03:dd:2d:17:82:4c:bb:ad:f5:ed:ca:
         d4:b6:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:29:42 2025 by rpki-client