Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
File:                     FbpmvA_Dsmut1y-1u4OHttvDP3c.mft (raw, json)
Hash identifier:          eGzqoiF3xYXubFnYQS7ifassDswypyJnOGo8eIbM+3k=
Subject key identifier:   B0:3B:9B:EB:EA:89:BE:4F:5B:90:BC:08:FC:C8:36:A7:22:8B:2C:32
Authority key identifier: 15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
Certificate issuer:       /CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Certificate serial:       019922C38A863FDF9661F7478E0842B311EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 06:01:04 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:04 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:04 +0000
Files and hashes:         1: FbpmvA_Dsmut1y-1u4OHttvDP3c.crl (hash: P8nCz8Xam93tgWLeZjYpdhryy8M9wRowORXTtvKUUtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:8a:86:3f:df:96:61:f7:47:8e:08:42:b3:11:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
        Validity
            Not Before: Sep  7 06:01:04 2025 GMT
            Not After : Sep  8 06:01:04 2025 GMT
        Subject: CN=b03b9bebea89be4f5b90bc08fcc836a7228b2c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:56:45:61:b2:74:c2:f0:62:ea:49:67:2b:
                    ea:76:2f:3c:eb:42:45:6f:57:df:0f:cd:2a:31:56:
                    f0:a6:c2:d4:ca:ab:24:aa:53:78:c6:65:15:e1:b4:
                    c5:92:4d:4c:7a:cc:20:9b:a7:e8:e2:9f:b7:f7:e2:
                    d4:d0:6e:22:c8:db:8c:21:b6:3f:1b:7b:d1:e2:c9:
                    3d:2b:3e:9e:5f:f7:90:e8:03:1c:e4:da:9a:7f:fa:
                    ad:5e:17:93:3f:a9:d5:b0:d1:f6:8e:c4:e6:ab:d2:
                    9a:90:1b:50:31:9e:4d:c0:63:1f:cc:b1:d2:27:81:
                    c9:0f:ad:e0:77:2f:f5:a6:a2:0b:0a:8e:93:97:f6:
                    82:b8:06:d1:23:31:39:b0:65:6c:5e:a8:a1:b0:bd:
                    7a:bc:9a:2b:c1:b4:c7:c3:33:e0:62:13:01:e2:04:
                    1b:8b:3d:86:cf:a7:b7:11:c2:7f:b1:10:fd:17:a8:
                    a3:ba:7d:9c:bb:0a:dd:5f:f2:d3:73:5e:d8:45:61:
                    b4:93:81:ea:c2:ec:5d:e9:e4:f1:7d:74:75:ad:0a:
                    c0:5a:58:96:41:9a:97:75:86:fe:2e:7f:f9:6d:d7:
                    0e:da:9d:1c:a8:4b:9c:ba:33:29:7d:84:ed:97:42:
                    35:f8:ae:1d:a4:1a:02:e3:6f:72:ce:2a:cd:2d:01:
                    01:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3B:9B:EB:EA:89:BE:4F:5B:90:BC:08:FC:C8:36:A7:22:8B:2C:32
            X509v3 Authority Key Identifier:
                keyid:15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:62:71:23:d4:56:2a:22:45:9b:c7:64:51:d7:78:a1:e8:7e:
         43:f8:54:38:c4:d8:b2:10:6d:27:95:30:c2:bd:ab:b8:e5:92:
         64:58:ff:a8:02:a6:a0:56:b6:32:9c:e1:df:9b:dd:39:0d:8e:
         a6:75:39:34:70:6d:83:8f:14:df:2d:6b:c8:7d:59:de:24:df:
         12:88:e6:bc:e6:19:38:4d:51:e2:b4:37:de:25:42:e3:9f:48:
         6b:d7:29:81:86:f7:d9:b8:c6:25:df:5d:0a:01:40:26:53:9f:
         7a:32:64:5a:6c:4f:7e:d6:5c:ff:67:04:dc:eb:67:dc:85:25:
         b8:bb:ed:68:2d:45:d0:87:38:c4:83:95:5c:e9:79:c6:29:f4:
         2c:47:f0:38:f6:4c:52:f6:9f:e9:d4:ad:03:b2:e1:80:1a:32:
         0d:7c:ac:14:5a:9d:fe:82:60:49:fa:d6:50:e8:03:d6:c0:c4:
         8e:64:75:87:fa:33:ce:52:5e:02:6e:d1:4e:9c:db:52:33:8b:
         b3:e9:c2:7e:d0:2b:c2:5c:92:a1:0c:2b:e9:5a:99:ee:cf:79:
         65:30:85:f6:61:13:5f:7d:b6:1b:e6:2c:55:32:ca:7b:cf:52:
         91:b6:f7:3c:18:a5:eb:a3:3b:ba:d4:50:aa:dd:28:e7:87:0a:
         b9:1a:81:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:29 2025 by rpki-client