Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
File:                     Fr_GV2_0KHqI6d4-IQuewOERta0.mft (raw, json)
Hash identifier:          +ChN+6yYzWHOGvRTB3YinQTJK3h2vqIdkQJe2zGRtrI=
Subject key identifier:   C8:3A:B3:86:E1:16:84:7E:03:06:D2:33:80:8F:C4:23:E0:DA:D3:73
Authority key identifier: 16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD
Certificate issuer:       /CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
Certificate serial:       019922FA2D83EA60A30EDFFC9980B7309BB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
Manifest number:          1651
Signing time:             Sun 07 Sep 2025 07:00:44 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:44 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:44 +0000
Files and hashes:         1: Fr_GV2_0KHqI6d4-IQuewOERta0.crl (hash: SGnKZaJHiCeHKqlZMRJ1igL7clJ/RHpvwK/PndCTn+8=)
                          2: Pl6_b4ESbhBQwVrjzE07MKHE2CY.roa (hash: xjan3bQ1OceBM5n08V3cPxCTA3U7Zazmx9IxnGNehfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:2d:83:ea:60:a3:0e:df:fc:99:80:b7:30:9b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
        Validity
            Not Before: Sep  7 07:00:44 2025 GMT
            Not After : Sep  8 07:00:44 2025 GMT
        Subject: CN=c83ab386e116847e0306d233808fc423e0dad373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5d:3d:ce:b1:c4:e0:e7:67:ef:f3:90:63:fd:
                    91:97:a9:2f:c1:43:7d:8c:46:ed:f7:49:6e:0d:d6:
                    5f:51:d0:49:97:14:50:95:1b:f2:f0:0c:07:65:ff:
                    35:ef:61:80:d6:aa:01:40:7e:d6:6f:b2:fb:bf:89:
                    91:a0:a5:38:71:8a:bd:5d:3d:b9:0c:16:d2:71:8a:
                    aa:ae:d3:22:e9:52:0d:59:59:58:2d:a1:56:f1:22:
                    13:40:89:c2:8e:bd:ae:68:18:ad:2f:fb:1c:f1:fd:
                    8f:7c:d6:4e:fb:7b:8e:6a:a9:f1:ef:a3:53:03:71:
                    b0:80:93:77:e7:1f:f7:bf:4b:bc:1f:74:f2:c4:1e:
                    ba:3f:f6:02:9c:f1:9b:02:6e:48:51:65:9d:aa:da:
                    21:ff:31:3d:b1:b0:f2:ef:49:c0:0c:bc:e5:ee:b5:
                    91:0a:f7:9d:36:10:d3:c9:3e:08:b2:60:8e:1e:4e:
                    07:80:c5:87:24:4e:45:c5:be:ad:ec:19:9b:91:58:
                    05:ac:3d:28:c3:30:5c:e0:20:2c:7a:43:50:ec:76:
                    ca:71:0e:5f:47:5b:76:74:82:13:e1:10:1d:5c:6e:
                    5d:8f:06:f3:ba:9c:ba:b7:fe:fb:74:5b:46:50:ab:
                    ee:72:cc:b9:81:eb:47:57:b0:29:be:a7:de:3b:a7:
                    6a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3A:B3:86:E1:16:84:7E:03:06:D2:33:80:8F:C4:23:E0:DA:D3:73
            X509v3 Authority Key Identifier:
                keyid:16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1a:4c:ff:c1:81:9b:f4:87:71:9e:27:40:cb:d0:ec:92:63:
         d1:0a:e8:22:c8:91:f9:da:40:2e:95:af:be:19:b9:9e:d4:02:
         58:de:12:ed:d7:ee:f8:db:52:08:51:56:d9:52:1a:84:4d:ba:
         bd:19:e8:9d:a2:aa:d2:d8:f8:61:5f:50:5a:77:47:d3:8a:f3:
         16:4d:bd:1a:12:10:02:88:1d:62:9e:bc:33:c4:b6:8a:dc:84:
         11:f8:76:4e:5f:9e:af:f7:32:1c:1f:10:70:43:8e:50:c3:a4:
         40:01:d5:10:f4:9c:dc:8a:cb:66:df:a5:26:20:eb:be:77:dd:
         89:6d:98:0f:f9:f6:a4:c5:bf:b5:41:ff:12:7b:2b:9c:0e:cc:
         f2:89:05:84:be:4b:60:72:55:e5:80:c3:39:4a:14:b8:8b:14:
         46:be:7d:0e:bc:e1:72:c7:b7:6c:1e:18:64:5a:04:e3:e6:17:
         9e:39:bf:61:ad:6b:1f:eb:30:86:8a:14:39:1d:2c:87:eb:86:
         fb:ef:aa:57:36:9c:48:19:4b:9d:88:55:db:be:bf:9c:df:5c:
         f6:ea:92:01:d4:c8:22:48:79:7d:0f:63:ac:76:b2:7a:f0:e1:
         d6:3e:bf:66:eb:44:7d:69:a2:7c:22:c8:eb:54:6e:6f:a0:c1:
         24:3c:7b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:49:26 2025 by rpki-client