Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
File:                     82ct8ORpiLvu2b5UENoSo_Fw1pE.mft (raw, json)
Hash identifier:          ed5bsXB+eZQyrcOx7WC5733A9jtwOQyUv11yswwebDo=
Subject key identifier:   EF:0D:2D:FB:92:21:C9:B6:71:5A:73:AD:1E:B4:8B:48:F9:A9:CF:2D
Authority key identifier: F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
Certificate issuer:       /CN=f3672df0e46988bbeed9be5410da12a3f170d691
Certificate serial:       0199221E3BA3EE8C510F355FCEBDF87D2388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
Manifest number:          1674
Signing time:             Sun 07 Sep 2025 03:00:30 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:30 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:30 +0000
Files and hashes:         1: 82ct8ORpiLvu2b5UENoSo_Fw1pE.crl (hash: zYjXz3wm2RNGGUSkzRHuuFiWZyU7kDmjFWAsylYIX+8=)
                          2: qF15Fek2B8QG87gZ7XIr-H3O168.roa (hash: 5FnSKwJ5Mf9Vo3kgskFawnnVLq6cD4vo+8P1ZuvgDrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:3b:a3:ee:8c:51:0f:35:5f:ce:bd:f8:7d:23:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3672df0e46988bbeed9be5410da12a3f170d691
        Validity
            Not Before: Sep  7 03:00:30 2025 GMT
            Not After : Sep  8 03:00:30 2025 GMT
        Subject: CN=ef0d2dfb9221c9b6715a73ad1eb48b48f9a9cf2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:f5:a7:0c:3c:5d:f7:89:59:b9:76:c1:1f:
                    da:6a:bd:85:ad:99:cd:af:d1:56:e4:3b:84:40:71:
                    24:15:c9:7a:a0:b1:84:d2:1a:34:51:fb:de:8c:6c:
                    37:5e:64:8e:15:fe:93:f8:32:04:97:a1:45:77:d1:
                    8b:bc:f7:97:7f:8f:33:84:fd:20:3a:e0:06:ec:29:
                    5f:d4:f9:39:e7:0e:17:f0:c1:18:07:92:45:7b:13:
                    33:8c:f0:9f:32:1e:4b:71:24:53:43:d4:74:d0:6c:
                    31:14:ee:f5:4c:60:a8:c1:50:a0:aa:bb:48:a9:ba:
                    51:b5:72:70:9d:63:69:95:9e:9c:ad:ad:70:6d:db:
                    0b:4f:61:af:6d:01:e8:71:fc:d8:e5:1b:e6:9f:69:
                    a6:93:fe:a1:f6:37:82:85:39:89:bf:6f:77:34:99:
                    41:4a:e5:26:6e:f2:6c:30:66:cf:8f:b6:93:34:33:
                    1c:36:2b:62:a4:4f:e8:61:5a:d8:d9:bb:a6:b7:30:
                    97:d3:8e:45:80:c5:06:cf:e1:02:6b:36:ef:fe:17:
                    fb:66:a7:b0:78:90:e7:7a:07:d1:e9:e3:93:80:84:
                    c1:fb:ac:64:dd:91:83:74:aa:18:f5:3b:1c:b7:c6:
                    2c:f4:68:88:88:55:21:db:0a:3e:26:33:77:a8:d9:
                    10:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0D:2D:FB:92:21:C9:B6:71:5A:73:AD:1E:B4:8B:48:F9:A9:CF:2D
            X509v3 Authority Key Identifier:
                keyid:F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:34:f9:45:0b:6c:02:22:91:02:1c:a0:cf:78:f7:db:1b:4a:
         35:2a:c3:6e:cb:4a:3a:2f:73:97:a6:db:e7:e7:af:59:07:57:
         ac:7d:29:b8:ed:b2:d3:3c:6d:15:93:0f:3c:ef:e7:a8:c2:68:
         b4:98:7c:57:ef:6a:19:05:78:0e:a0:fc:93:9d:65:68:6c:4c:
         f0:6a:28:76:bd:26:d8:0d:11:40:a3:c2:36:09:f0:52:bb:a2:
         9f:8d:db:9d:31:ee:a0:81:d2:70:60:6f:47:c3:c1:2d:79:f5:
         c2:23:fd:1d:a6:27:55:e9:6c:82:40:37:ac:c6:2a:98:ad:06:
         ea:b1:f7:ff:73:8d:18:16:86:ce:05:d2:f0:37:df:2a:ca:d8:
         06:df:56:ac:a8:25:dd:0e:14:94:fa:d2:90:de:fb:00:33:96:
         a7:65:66:a7:95:2b:a0:28:44:9e:4f:63:5d:76:1f:00:4b:3f:
         43:3f:83:82:04:22:72:b7:fe:57:1f:78:d5:77:ca:29:3a:2d:
         e1:48:4b:50:5d:3b:fa:0b:08:fb:5d:a7:0c:cb:4b:57:b4:cb:
         e3:98:f9:51:f0:a4:f2:01:0a:d3:b6:46:ab:7c:f9:b2:3c:dc:
         f0:34:23:f6:8c:62:93:c8:12:db:4e:b6:c1:4b:ef:68:3b:30:
         c3:eb:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:02:51 2025 by rpki-client