Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
File:                     _q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft (raw, json)
Hash identifier:          dlsiPbcNcTxDbbpJjWe8XbqGmZBMjkseT4SWKJ68F+M=
Subject key identifier:   32:1C:DF:E8:B6:C5:EA:93:44:51:EE:D3:D9:35:C2:CE:2B:90:C5:76
Authority key identifier: FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
Certificate issuer:       /CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Certificate serial:       0199239EC952B855223737A10BF1EE5316D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 10:00:32 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:32 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:32 +0000
Files and hashes:         1: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl (hash: hFks2fs5wHXD5XKU1V3fZExkEVFrh092MxQq2X7sPw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9e:c9:52:b8:55:22:37:37:a1:0b:f1:ee:53:16:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
        Validity
            Not Before: Sep  7 10:00:32 2025 GMT
            Not After : Sep  8 10:00:32 2025 GMT
        Subject: CN=321cdfe8b6c5ea934451eed3d935c2ce2b90c576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e9:9e:9f:23:6f:cb:fc:dd:3a:9b:c4:6a:ea:
                    4e:fa:d3:ee:dd:ec:ca:52:da:f9:e3:d1:87:59:1f:
                    e9:1d:e5:07:3f:af:37:64:53:09:47:8a:75:15:81:
                    75:33:1e:1e:ee:90:c5:5b:c0:70:6c:e7:38:d6:df:
                    15:84:80:eb:d8:d3:29:cd:28:86:4a:4a:a7:99:1b:
                    e4:5b:61:bf:4f:b5:c0:ee:c2:d8:c5:ff:3f:41:04:
                    a1:84:6a:09:73:f7:59:f2:be:c1:f7:9b:86:0e:fa:
                    f1:be:13:73:ff:c2:75:0b:62:4a:4f:34:73:0d:a0:
                    22:3d:f0:54:3d:1e:95:d6:9a:5f:14:98:66:21:75:
                    1b:e0:0b:63:ff:2b:b1:28:ee:2b:62:c3:0b:26:1c:
                    3c:49:96:af:34:ab:a0:22:c4:f3:40:b6:c1:42:24:
                    e6:33:67:c7:11:b9:b7:9e:67:3a:3e:47:30:a1:55:
                    ab:bf:ba:a0:a8:e7:99:4a:bd:e5:1b:83:f2:fa:61:
                    09:a9:76:69:e4:82:bf:7e:72:3f:5b:44:1f:f0:03:
                    ba:b8:d1:f9:86:0b:b0:82:6a:44:21:33:29:b2:e2:
                    75:43:84:10:6d:e2:ed:63:c0:a0:36:9b:09:dc:c3:
                    c7:89:93:49:00:ac:89:00:1a:8c:61:88:53:08:15:
                    d4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1C:DF:E8:B6:C5:EA:93:44:51:EE:D3:D9:35:C2:CE:2B:90:C5:76
            X509v3 Authority Key Identifier:
                keyid:FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4a:9a:48:03:02:34:4f:2f:b3:a6:a9:c9:db:b6:36:9e:af:
         ec:23:0e:e7:65:e4:b4:c2:9c:d1:56:83:eb:6c:60:3e:84:b6:
         24:80:0f:9d:22:8d:d2:0d:70:5c:26:f0:35:b5:c8:41:2e:1e:
         79:93:71:1a:a5:33:1d:97:b7:a6:d1:33:7a:ac:ea:8d:d0:2f:
         e0:3a:97:94:50:96:36:25:7e:e1:30:58:2e:20:8f:67:1f:3f:
         d5:73:42:f5:00:b4:04:57:49:30:8d:41:40:73:f0:5c:11:ba:
         93:49:15:d7:88:e2:af:8e:85:c6:43:36:12:8e:a6:ec:19:dd:
         2f:60:65:98:ce:5f:c0:8e:cb:32:84:8e:0f:a6:08:ca:a1:a1:
         13:03:33:6d:ae:ea:62:65:d6:2d:60:93:07:34:5d:f6:cb:18:
         f7:6f:6b:ad:55:30:79:2f:eb:5d:f0:89:62:31:ac:fd:c7:62:
         04:20:cf:7f:62:4d:99:27:6e:a6:2c:4a:be:3f:8b:87:81:fe:
         8e:3d:d3:7c:8d:fb:b7:57:11:63:51:bd:b6:dc:7d:15:4f:32:
         8e:05:3f:e4:35:81:5f:1c:52:23:86:9a:21:b8:2c:89:b5:f2:
         d2:37:05:e5:32:dc:c7:dc:d1:45:42:25:0a:13:9b:1b:1c:63:
         ff:5b:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:37:03 2025 by rpki-client