Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
File:                     rFxTEhWE19himH8m_3vtWuE4FqE.mft (raw, json)
Hash identifier:          X53EhetmBG/4Aker3EFcjuCJm8lZ0YPe1/08/BLh7lw=
Subject key identifier:   17:60:E5:7B:56:E4:CD:B2:21:0C:3A:C6:DE:D4:EB:7B:7C:5B:6A:32
Authority key identifier: AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1
Certificate issuer:       /CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
Certificate serial:       0198CA25B8C013FDF238550C5809FCEE3588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
Manifest number:          09
Signing time:             Thu 21 Aug 2025 01:02:06 +0000
Manifest this update:     Thu 21 Aug 2025 01:02:06 +0000
Manifest next update:     Fri 22 Aug 2025 01:02:06 +0000
Files and hashes:         1: rFxTEhWE19himH8m_3vtWuE4FqE.crl (hash: gpd+F7g5qEc9pPRZUHLjyv/AvogWB/AotD9CMy9byas=)
                          2: tE2-w8GfKCp0rc9wUQGDCMDaXtA.roa (hash: 2MgwOZTjIHEb4mTC8CdutjmxgqJ5RVv+wXieNgEA//M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 23:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:ca:25:b8:c0:13:fd:f2:38:55:0c:58:09:fc:ee:35:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
        Validity
            Not Before: Aug 21 01:02:06 2025 GMT
            Not After : Aug 22 01:02:06 2025 GMT
        Subject: CN=1760e57b56e4cdb2210c3ac6ded4eb7b7c5b6a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:90:58:d8:75:da:08:88:d0:fb:cd:80:c4:
                    a5:6e:6d:29:7c:8f:f1:f2:50:43:a6:2f:f5:07:72:
                    a4:8c:f7:d1:e8:96:55:b1:ee:1b:a7:03:ad:e0:07:
                    43:5a:e4:ab:8a:0c:e9:01:e7:1a:f9:8e:d9:3f:8f:
                    cf:e8:d1:6f:e3:90:a5:e9:c0:8c:d8:4e:03:81:9e:
                    f0:47:6b:a9:0e:9d:d2:55:82:26:bd:70:78:50:6d:
                    c1:28:0d:04:11:cf:5f:31:a2:3f:3a:22:b5:27:af:
                    0e:58:5b:5b:f8:8a:e1:c0:51:0c:73:9d:5c:88:e4:
                    75:39:4d:41:2e:76:f8:ec:ea:dd:da:6f:bb:6f:5d:
                    be:dc:7d:1f:e2:fb:ec:4d:74:03:a3:51:1b:c1:e3:
                    71:14:1b:51:c2:0d:1c:f8:c1:9e:db:3d:50:b2:46:
                    af:da:f6:9f:6d:51:2c:7e:e4:63:b8:fa:fb:fd:37:
                    d8:cc:1a:fa:ab:92:b9:a7:82:28:4d:f0:46:4c:ce:
                    6e:09:cc:8b:9b:89:13:dc:f1:66:9d:bb:6b:20:29:
                    a1:ec:a6:0e:f6:6b:a0:5b:f3:3d:bf:e1:96:a7:d2:
                    87:ad:89:cf:a2:4c:f3:43:f8:7d:62:52:51:32:cd:
                    b2:f4:4e:74:2c:b2:a0:5b:d0:4d:ad:2a:9f:a9:3b:
                    47:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:60:E5:7B:56:E4:CD:B2:21:0C:3A:C6:DE:D4:EB:7B:7C:5B:6A:32
            X509v3 Authority Key Identifier:
                keyid:AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4b:12:01:cb:3d:5f:f9:77:e9:7b:44:f4:6b:2e:ce:40:4f:
         57:83:92:12:46:fc:8c:4e:26:ef:a2:e9:a9:30:6b:18:84:c5:
         1a:c7:23:be:2c:1e:43:62:3d:bb:38:ce:4e:9f:24:0f:6a:b2:
         8f:34:2e:72:46:3c:fc:4a:0d:89:2c:d4:12:e3:42:ac:7c:17:
         19:ba:f1:22:e0:74:71:77:4c:f7:42:45:6a:55:37:13:e1:0b:
         a1:1c:09:e3:85:62:1a:95:a8:e1:9a:e9:cb:56:ba:27:1b:59:
         ea:b8:87:49:8f:81:e0:49:1f:87:16:e0:a0:9e:36:ad:c7:79:
         7b:18:aa:64:91:b7:31:9f:59:0c:81:08:a3:8f:a7:ad:be:53:
         0d:2d:1d:5c:99:4e:49:13:c4:d5:90:59:74:23:22:79:3c:09:
         5a:12:b3:27:48:62:95:d8:a2:f7:80:03:e0:b5:dc:83:ff:13:
         72:89:5c:37:ad:21:99:a1:63:32:fc:1b:3c:3b:f7:b8:38:4d:
         2d:2d:40:ca:7e:0f:65:78:5c:c3:27:c9:2d:fd:bd:ff:97:17:
         15:08:58:70:31:b0:0d:9e:58:a9:49:a6:c9:77:ad:7a:83:96:
         37:ad:cb:ab:84:7a:55:a6:3f:67:15:f4:cc:4b:9f:7e:33:fe:
         8e:a9:26:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:09:12 2025 by rpki-client