Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
File:                     Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft (raw, json)
Hash identifier:          qE8lso3/3LZF5SRCVVrteEwsfZVPqv5mQiV/468UfPU=
Subject key identifier:   FA:54:9E:62:19:96:CD:CF:9B:F9:8E:E5:DD:7E:46:24:B0:E9:8B:F2
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Certificate issuer:       /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial:       0199326D97606C5956DD19D5003F0A06F9D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
Manifest number:          1685
Signing time:             Wed 10 Sep 2025 07:01:06 +0000
Manifest this update:     Wed 10 Sep 2025 07:01:06 +0000
Manifest next update:     Thu 11 Sep 2025 07:01:06 +0000
Files and hashes:         1: 8MKd3VTEWL0s1pZO8n6cvyCKvy0.roa (hash: ibfT11EuyvSPHljHc5Ukxkt2NUNR/CsPsg2Qv31ogDQ=)
                          2: Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl (hash: /LtgoEl0czjzTcnQSd08xjX4Zau/07rj9pZoN25YPsQ=)
                          3: GkXcWKv2tiZbmRFso5KDAtIlFEs.roa (hash: qBk0djYI/QNSD8TA0vX6gS28tOn4bjIOUEqnaYwDuO8=)
                          4: MAzNFV2te9n7kjEaFpStK8vBowc.roa (hash: cw6Ks/U2S63sovwgOc3pI9cS6N4rqlfzqVdKZqK6qIU=)
                          5: jmKQUYSEuZIWnZkjgKqeurLJKlA.roa (hash: ubeUqXL5MrFy3GKLg6YblSSTGgynKbrvwUY5fbq4vzw=)
                          6: tzI-3RvxZseZ0auE1vTr_8vXlHs.roa (hash: CiZ/fhpSU1BnMxFu5Ur8z7I7FFKUZ6D5j7i0HG/zpqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:32:6d:97:60:6c:59:56:dd:19:d5:00:3f:0a:06:f9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
        Validity
            Not Before: Sep 10 07:01:06 2025 GMT
            Not After : Sep 11 07:01:06 2025 GMT
        Subject: CN=fa549e621996cdcf9bf98ee5dd7e4624b0e98bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:77:b2:18:d8:4b:12:56:95:67:35:68:d7:ab:
                    33:d7:34:89:e1:c9:74:e5:34:7f:b6:38:75:ed:1a:
                    0a:4c:79:41:6a:11:96:60:8a:7a:11:08:f3:db:4f:
                    15:80:82:b1:fd:fd:5d:6d:40:a2:6d:34:08:84:17:
                    04:79:41:97:50:65:d2:ab:d5:8f:0e:e9:d4:c0:9f:
                    f5:0c:30:c9:1f:6f:23:47:8b:54:43:8e:dc:11:5b:
                    03:8f:03:7f:fd:62:da:9a:27:b0:1c:53:b8:f2:89:
                    b5:36:92:3e:0b:d2:8f:12:89:be:a5:d8:1e:60:d3:
                    54:ff:5d:30:9b:db:e6:fe:6c:00:11:28:84:c0:81:
                    79:f8:fc:3c:29:8c:93:b3:2c:0b:cb:2d:01:66:1c:
                    75:9f:58:bb:d7:61:73:cb:21:e0:9f:28:08:b8:e7:
                    24:99:1d:d3:5c:1c:20:b8:fe:ca:19:f2:8a:2a:c4:
                    c1:63:34:90:97:74:6f:13:54:f8:c8:65:23:02:c9:
                    f7:a9:77:25:1c:05:4f:92:82:84:62:f6:40:aa:6f:
                    d0:bb:4f:c0:c1:38:8d:16:a2:4a:b7:73:5f:0e:f1:
                    1f:8c:80:f6:f3:0a:be:e8:d7:e5:31:cc:22:05:7c:
                    73:f3:bd:f6:ff:2b:9b:76:6d:d3:50:3a:3f:90:0a:
                    75:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:54:9E:62:19:96:CD:CF:9B:F9:8E:E5:DD:7E:46:24:B0:E9:8B:F2
            X509v3 Authority Key Identifier:
                keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e5:24:3a:74:53:22:66:d8:83:65:3d:d4:de:5a:fe:76:15:
         13:b3:ac:c9:eb:cd:f2:b9:28:be:04:c1:6e:63:53:04:61:45:
         80:5e:32:ec:1c:12:0e:e1:e9:4d:1b:2d:d5:2f:19:c4:82:ba:
         5d:9b:53:db:8e:5c:03:97:61:f4:b2:0c:bf:5d:0b:eb:76:15:
         93:00:d2:7c:5d:5b:b7:14:fc:2c:fb:9c:23:ec:85:6e:a1:52:
         12:ba:5b:9a:c3:2e:68:cd:cd:35:03:43:01:d2:62:bc:55:db:
         c5:39:cd:20:23:d4:d7:70:a6:3e:3f:95:be:e0:de:78:d4:eb:
         70:8d:e5:d8:e2:a0:4f:1d:78:6a:d5:e9:23:81:62:e0:a8:bd:
         fa:91:bd:49:f3:c4:0b:5a:2e:4b:4e:0c:26:12:f4:0c:e3:be:
         6a:89:79:00:50:38:57:d6:da:13:2d:d9:4e:97:5d:c4:4c:d2:
         76:72:aa:24:33:83:93:5c:cf:d1:6b:5b:48:b3:f9:41:33:34:
         d0:ae:e7:ff:80:ac:8e:19:79:e9:ce:c4:63:ea:c5:97:42:76:
         f3:eb:7d:49:85:63:09:4f:0c:85:ca:7d:8a:e5:1e:bf:4e:54:
         c8:c2:72:f3:bc:fc:3b:98:33:bf:58:99:ba:07:09:1b:29:eb:
         d0:a2:c0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:10:20 2025 by rpki-client