Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
File:                     KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft (raw, json)
Hash identifier:          1QbSN5O8i3HZUb+5IWujkrwENgR2ylsJnAJ3IKSH+Cw=
Subject key identifier:   FC:A9:E3:BA:28:06:59:34:F1:5A:BA:82:4A:50:76:58:60:CB:F6:DB
Authority key identifier: 28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E
Certificate issuer:       /CN=285feec87d1959340872f8f79831202f24c80c9e
Certificate serial:       019922FA06E368F459DB860E93D74CAEEE09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 07:00:35 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:35 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:35 +0000
Files and hashes:         1: KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl (hash: QAQ98FV53t3GUvAbz8w1CakL6LtreHRBarWftC+R9X0=)
                          2: dufDt0AmSEl5MX84gmoizwQiTsk.roa (hash: aXEbp58hPoSuyC6IS1AxqUQLOo+BHH3jFCGl+xNSnf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:06:e3:68:f4:59:db:86:0e:93:d7:4c:ae:ee:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285feec87d1959340872f8f79831202f24c80c9e
        Validity
            Not Before: Sep  7 07:00:35 2025 GMT
            Not After : Sep  8 07:00:35 2025 GMT
        Subject: CN=fca9e3ba28065934f15aba824a50765860cbf6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:44:38:06:eb:73:33:8d:43:0a:4c:1f:85:
                    f5:75:af:11:b2:81:5d:d5:1a:93:3f:6d:7d:e3:43:
                    68:d0:15:f0:ad:bc:dd:e0:86:1f:c6:70:e7:dc:1b:
                    26:9e:25:55:4f:8b:4c:a2:61:6d:d3:72:e7:c1:ce:
                    d3:43:2f:4c:4d:62:41:85:b8:eb:3d:6d:9c:f5:18:
                    6b:b6:eb:94:ea:9b:af:e5:62:3e:62:9c:32:45:17:
                    77:13:b4:53:25:a9:8a:76:5e:38:5b:fd:9b:ee:ea:
                    e6:be:41:0a:b7:24:bf:35:7d:c3:02:e0:99:1f:8e:
                    9d:7c:61:ef:7d:6c:23:12:ac:7c:dc:ee:00:d8:eb:
                    8f:dc:39:b0:25:e6:99:03:33:61:59:ec:c2:c2:20:
                    df:75:95:00:6a:38:dc:cf:e4:8b:d6:17:63:73:b4:
                    8a:b9:0c:33:bf:3b:98:36:40:0f:c7:ce:63:d4:51:
                    7a:65:42:e1:3c:bb:6f:85:6e:0e:00:58:53:b9:34:
                    06:47:67:f4:67:16:32:2e:28:60:fa:8e:1a:9f:38:
                    27:ce:d7:91:b8:67:c4:e9:3b:5d:3c:89:1b:3f:c3:
                    5a:45:ae:f3:be:5b:06:34:9a:12:db:8c:5e:97:fa:
                    d7:eb:01:46:d9:be:c4:1f:8e:4c:56:5d:75:42:e4:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A9:E3:BA:28:06:59:34:F1:5A:BA:82:4A:50:76:58:60:CB:F6:DB
            X509v3 Authority Key Identifier:
                keyid:28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3d:76:71:53:6f:c1:fa:ba:09:72:0c:b0:f0:88:02:e5:a6:
         c1:27:6e:cb:4f:28:b6:34:e9:23:21:ea:88:b0:90:99:08:c7:
         cb:d9:fa:4b:59:a5:8a:e0:90:cd:27:57:1f:96:d2:56:4f:92:
         c6:00:cc:21:d7:03:b0:b3:30:f9:0d:de:1c:a6:c3:8b:c0:5e:
         4b:37:2c:8a:e8:47:7e:a2:e7:a4:e3:06:3c:8e:89:30:7e:9b:
         ee:c5:6a:ad:87:f2:c6:95:28:d6:bc:fa:04:2f:8b:f9:93:58:
         b6:bd:71:b3:42:5e:f7:72:a5:33:13:8f:cd:26:4b:41:64:8b:
         76:0f:e2:fd:46:68:85:64:d4:46:bb:17:cc:ad:83:1d:32:d4:
         22:cf:5c:89:5d:d2:52:73:2e:5d:67:e9:83:49:e4:51:85:a7:
         01:9b:e8:2c:be:8f:c6:92:5c:8d:6c:98:25:da:ee:bd:19:81:
         80:c4:d7:f5:e9:05:ee:35:da:60:c3:d5:61:ae:9a:a7:26:5a:
         8c:a2:8a:3d:dd:a7:b9:1f:f9:3b:f5:0c:dc:65:f4:55:e9:46:
         d7:2a:f8:17:ce:a0:d1:df:7f:38:24:c5:34:68:0e:16:5e:ba:
         eb:77:89:5f:0f:ed:87:19:90:92:c4:26:5f:a9:0d:bd:a0:62:
         36:1f:78:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:11 2025 by rpki-client