Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
File:                     FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json)
Hash identifier:          rrbCjWs8PzEGhsgDqUAJ1svKj0z0It1Jp5UKJTg1yoI=
Subject key identifier:   F4:5A:5E:31:B7:D1:52:08:95:C0:0D:45:14:9B:1D:68:A4:4E:E8:95
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Certificate issuer:       /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial:       019A26D42453DC52E731DEA3F085CCDC8366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
Manifest number:          171E
Signing time:             Mon 27 Oct 2025 18:00:28 +0000
Manifest this update:     Mon 27 Oct 2025 18:00:28 +0000
Manifest next update:     Tue 28 Oct 2025 18:00:28 +0000
Files and hashes:         1: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: qh8vdZU1UKq/dMGX0v4hd+E/MLNZLO8TLtHwVldiQ5E=)
                          2: Ky4bLo9J6pOGQKNm7HdTTpVyXUQ.roa (hash: Nz/bgREWmfO74J020d6hSSWbUR82qaNTZZa/sGleP5Q=)
                          3: QSSnC_q8o-WsNaAyAgJiGCCIy84.roa (hash: +tcnmJxQS3P4w2G5HOWxZj9/1mLanqdz69L9k66eqp4=)
                          4: _ZHo0DXp29WN4BOS9yj8UgLowqU.roa (hash: k2O5B28gMEUS5GB1MDIowIqcob2fshstanyKIafnymc=)
                          5: i4MzjZTpbtZK_ZPjW181XA_QlOs.roa (hash: a3SMnVU0VU8ASpu/GP3SPdiJleFoyqLmWwLdGByzs8I=)
                          6: kEE54Na7-BCTgHLb6bkDtNrQEVo.roa (hash: q7RWUfa1vIWc5o8bk7iDaK25w/Hb4HrDG1w6G9yuV+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 15:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:26:d4:24:53:dc:52:e7:31:de:a3:f0:85:cc:dc:83:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
        Validity
            Not Before: Oct 27 18:00:28 2025 GMT
            Not After : Oct 28 18:00:28 2025 GMT
        Subject: CN=f45a5e31b7d1520895c00d45149b1d68a44ee895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7c:24:ab:06:34:82:e9:c6:f6:64:79:80:c0:
                    07:8f:5f:d6:0e:16:c0:c3:6b:a4:35:87:21:32:62:
                    b4:f8:59:78:07:8b:fc:65:1d:f0:37:72:09:3c:f9:
                    62:55:c0:f4:e3:f5:ae:33:0b:7b:bd:66:1c:fa:cf:
                    1f:03:ab:92:87:85:7c:84:23:cd:7f:e3:c9:00:16:
                    d5:eb:2b:4d:24:6d:41:5d:94:37:0a:98:55:16:00:
                    ce:49:d8:df:31:61:04:c5:16:4d:8d:4c:03:22:69:
                    db:bb:a8:f7:93:7e:76:43:9d:55:b9:8d:7a:04:8f:
                    10:0b:36:41:11:4f:62:26:d9:4a:75:ba:1e:19:08:
                    4e:d9:ba:ec:68:cb:55:fc:4b:d7:93:b3:ce:f6:83:
                    fb:56:2d:1f:f0:08:74:8d:7b:85:50:4e:5e:92:91:
                    80:03:7b:e4:29:84:5f:10:b8:d7:6f:82:8b:64:1a:
                    2c:24:8b:12:16:ff:2e:89:a9:b7:85:f8:e6:45:7b:
                    93:4d:1c:10:a3:65:36:01:11:bd:1e:2e:8f:d8:72:
                    29:40:96:50:88:01:7a:f4:95:80:37:f9:3e:94:42:
                    87:4d:6b:25:6d:d5:df:2c:6e:a9:a1:43:c5:db:74:
                    b2:1a:26:d0:d0:5a:3e:94:43:07:bf:90:96:ee:1e:
                    cb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5A:5E:31:B7:D1:52:08:95:C0:0D:45:14:9B:1D:68:A4:4E:E8:95
            X509v3 Authority Key Identifier:
                keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:43:12:58:58:26:47:0c:22:51:12:fc:d5:7f:2f:28:c9:ad:
         e0:1c:03:58:08:67:a3:04:36:17:ca:a7:c2:57:9b:75:e4:ba:
         ea:21:56:a8:11:46:34:44:f3:d3:d5:23:4b:2e:45:24:a1:89:
         8b:ad:ca:b8:42:51:3a:bb:ae:6e:31:3e:2b:4f:f0:a7:e6:e0:
         99:2b:29:c5:2f:74:b2:df:be:f0:6c:8f:a3:b5:f2:8a:f2:28:
         25:83:53:ac:17:eb:ba:52:b7:68:d6:8f:74:70:a8:54:81:33:
         8d:72:d4:43:fb:b0:bb:a5:6b:21:19:6f:2a:12:f3:31:66:91:
         0a:4e:70:a8:64:46:08:a5:df:5e:bc:d1:d3:6b:76:e9:5e:4f:
         4c:68:42:7b:74:48:c6:be:41:cd:01:8b:83:2d:e6:42:f4:aa:
         90:89:11:70:b4:64:eb:81:8e:75:57:5d:3b:e9:53:a1:38:12:
         c7:87:9d:9a:f9:65:fd:ca:14:e2:86:53:1e:90:f6:9c:83:02:
         30:89:d7:d2:66:1f:2c:22:03:f2:ad:c8:e9:b4:d8:7d:70:39:
         4c:d7:95:d2:8d:25:97:a8:3b:e5:09:87:f8:22:02:19:68:04:
         7f:9e:e2:ca:06:73:89:0d:7d:7b:fe:f6:28:f2:43:e3:03:4a:
         2c:93:8c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:26:07 2025 by rpki-client