Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
File:                     Fwpcah2MIGUdVj4_ELujqD344L0.mft (raw, json)
Hash identifier:          24RV66HbS/LDQjerDSAT1u6jk7NHx75drrbcGt0LVys=
Subject key identifier:   E8:40:DA:98:3A:88:57:C4:9B:65:28:06:85:F8:28:74:0E:DF:BF:B8
Authority key identifier: 17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
Certificate issuer:       /CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Certificate serial:       0199239FFAD865E2562BD44F53D43CDDB133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
Manifest number:          166D
Signing time:             Sun 07 Sep 2025 10:01:50 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:50 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:50 +0000
Files and hashes:         1: Fwpcah2MIGUdVj4_ELujqD344L0.crl (hash: QvlN1tsv+ELiGcpxt2FKOH+ukE6V33MbMuSoyUHIRrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:fa:d8:65:e2:56:2b:d4:4f:53:d4:3c:dd:b1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
        Validity
            Not Before: Sep  7 10:01:50 2025 GMT
            Not After : Sep  8 10:01:50 2025 GMT
        Subject: CN=e840da983a8857c49b65280685f828740edfbfb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d3:a0:45:a6:f4:7e:73:ec:5d:39:9e:df:dd:
                    55:82:4e:67:8e:67:6a:fc:c2:83:cc:a9:7e:01:97:
                    7f:b8:09:a8:6d:8c:b0:0d:a2:06:05:28:88:ef:af:
                    1e:09:1f:5e:d9:bf:3b:6d:e6:ae:a6:23:b9:5c:ff:
                    4f:1a:2d:b4:e1:8b:3a:b2:a1:02:f5:6b:ff:23:65:
                    2d:21:25:c7:c0:58:f4:3e:32:19:d8:40:7d:34:45:
                    51:7b:bf:48:4e:a3:89:ff:bc:2e:c4:df:18:bb:e0:
                    e1:8b:2b:37:b4:c3:76:30:f4:72:03:18:73:f6:46:
                    39:f4:b0:b7:b1:e2:e5:3d:48:82:c8:cb:6b:72:56:
                    6a:fb:af:77:4f:7b:c8:aa:7a:a4:09:ab:19:64:9b:
                    16:62:3c:53:0c:e1:16:ba:7c:18:d4:8e:ff:3d:d4:
                    4d:cc:82:53:be:81:16:b6:59:0d:25:72:b2:4d:ab:
                    5d:10:34:5d:72:f3:e9:83:d2:4a:4f:bf:3d:ce:67:
                    29:c4:1d:12:bc:43:bc:38:12:a5:79:6b:fc:71:5e:
                    9e:c0:9d:b7:70:1b:a7:da:b2:62:a8:ab:eb:67:51:
                    ae:11:ed:c0:0a:7f:3a:80:88:c6:e9:24:ed:4e:94:
                    44:d9:13:47:01:29:f6:39:7f:a4:f5:7a:1c:58:fe:
                    53:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:40:DA:98:3A:88:57:C4:9B:65:28:06:85:F8:28:74:0E:DF:BF:B8
            X509v3 Authority Key Identifier:
                keyid:17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ff:4d:84:4d:b0:36:8d:c9:05:58:f7:90:d8:44:99:8e:3f:
         6c:05:74:78:76:a1:2b:fc:6a:a8:14:71:3e:13:a6:f6:f6:73:
         38:79:a4:68:cd:91:30:a8:bc:e3:c5:b0:5f:ed:74:ca:a3:de:
         9f:06:9b:23:f9:b7:d2:22:e4:39:a2:21:2f:14:5b:7a:4b:53:
         92:43:83:77:43:6e:2e:ee:3e:19:8f:54:c0:75:1c:09:a2:74:
         b9:5a:26:f3:48:28:53:55:8b:d6:12:21:31:3c:36:d3:0f:45:
         df:47:3d:9a:0c:db:a4:59:b1:a4:5f:39:78:51:43:d8:7e:45:
         9f:e9:38:26:cb:e1:a0:b5:00:28:0b:ef:25:81:fd:b4:cb:a0:
         58:74:96:ea:3d:c1:4d:e6:9b:0b:04:8e:65:01:ff:89:bc:08:
         b8:44:37:b0:d2:ff:a8:5d:9d:2a:03:d2:81:ad:5e:c7:b1:2d:
         93:8d:74:72:34:fe:85:10:cd:62:c2:aa:c2:0c:78:ee:ff:43:
         96:af:bd:50:da:98:a0:f2:4d:4b:f6:17:a6:f6:69:1b:12:4c:
         8c:2b:ae:14:96:9e:ea:9f:26:43:c1:36:78:54:b4:3b:ad:2d:
         61:6c:e5:0e:8d:80:57:08:5d:0c:f5:94:95:9f:fb:de:2c:5a:
         f9:5a:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:24 2025 by rpki-client