Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
File:                     fcSs7cuGzd_tf23oyt_KAEabvI4.mft (raw, json)
Hash identifier:          Vx8JvwKONX0Ap3IKgzR/sb8WxdwIbXFVcSWouvKQk1c=
Subject key identifier:   7C:C5:AE:C9:F7:14:C4:C8:14:F4:71:D7:0A:7A:37:7F:60:B5:4C:F1
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       019932A3B848B41F23E42542A863958DE64F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
Manifest number:          168A
Signing time:             Wed 10 Sep 2025 08:00:14 +0000
Manifest this update:     Wed 10 Sep 2025 08:00:14 +0000
Manifest next update:     Thu 11 Sep 2025 08:00:14 +0000
Files and hashes:         1: L3jfVXtRL6_lD6BNoqXy7sEXYVs.roa (hash: bCWcb1OjgRUbcmEWxo5WVJLuY5Wam3mN/c101nJS4g4=)
                          2: aNZOgbC2ct7oBfvfODiPTTzSje4.roa (hash: REnD2uLHHDzM+UgqTv+vmaX5vz4XYKoCVVSGMH/Czts=)
                          3: fcSs7cuGzd_tf23oyt_KAEabvI4.crl (hash: QwiimKsd0g1vDdJ/++QnAZ+t+y/YwTV95dxn3mMHslM=)
                          4: iIZa86cRoXzfTgl30QJoI1SOvPY.roa (hash: 8zjLfzmaOcWmBNRerK1/Wq9anwq2ilShQCg9MYrO3HM=)
                          5: xw83wudCk127kiXHqSwTaIW46z8.roa (hash: NELCxFUdkV28jyteAlY6BEFqr7FQW+26sZ4az/+ppAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:32:a3:b8:48:b4:1f:23:e4:25:42:a8:63:95:8d:e6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: Sep 10 08:00:14 2025 GMT
            Not After : Sep 11 08:00:14 2025 GMT
        Subject: CN=7cc5aec9f714c4c814f471d70a7a377f60b54cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5c:19:b5:3a:92:99:1b:35:f2:53:fa:a3:00:
                    e1:6c:7b:00:b7:0b:03:06:27:5d:52:e9:60:ac:06:
                    4a:de:e4:c2:10:7b:e1:14:9f:dd:1b:48:cc:c7:7b:
                    7d:1d:f4:8c:bf:cd:3c:63:f3:da:8c:1d:eb:b9:3b:
                    27:03:f2:e1:ca:27:59:0d:98:e3:a1:cf:cc:be:ff:
                    a4:3d:ea:ca:39:f5:01:58:b7:d9:02:92:d6:8c:65:
                    12:f5:62:7c:5b:ca:8f:a0:5f:a3:b3:ba:bb:90:fd:
                    0c:c7:13:77:17:26:d2:9d:8c:34:c8:ad:a8:cb:79:
                    46:7a:9c:a6:69:60:08:86:ef:63:c9:2b:6e:82:7c:
                    6c:95:8d:19:61:60:1f:10:55:a7:42:e9:b2:cc:65:
                    88:8d:e7:28:4b:44:37:13:41:60:76:e8:92:de:a0:
                    bc:c3:dd:1d:d5:b3:e1:cf:43:53:96:17:70:17:d5:
                    13:ec:2a:21:0f:10:93:12:84:ff:c5:01:0d:01:6c:
                    7c:8a:18:e7:c9:2a:e8:59:29:5c:56:56:4b:ce:54:
                    95:29:c3:ef:87:cb:00:98:c8:1a:04:a4:69:9c:61:
                    b7:af:f9:3d:1d:f2:60:ea:82:d9:ce:24:ff:5b:17:
                    89:11:c9:76:7c:f3:ef:36:0d:e5:6f:87:78:20:3c:
                    8e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C5:AE:C9:F7:14:C4:C8:14:F4:71:D7:0A:7A:37:7F:60:B5:4C:F1
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:cc:08:0b:3b:9d:81:e6:1a:65:de:58:08:04:d5:9a:ab:30:
         0e:63:2f:a0:1b:11:3d:a4:e7:93:c1:d3:ab:ce:c9:2e:dc:df:
         9e:ea:79:2b:0a:43:34:af:ff:54:14:99:53:27:e9:71:0d:68:
         73:98:18:4d:28:9b:a6:c7:d5:f5:a4:df:58:29:a2:8a:8a:e6:
         ea:8b:bc:45:7a:07:67:11:b9:4f:d5:bc:3f:3a:62:8f:da:80:
         c9:5d:6b:2c:26:5b:65:c5:75:3f:d7:32:58:66:d4:6b:c7:2e:
         4c:5e:ed:80:08:c9:f0:2b:6c:85:4c:7a:3b:fc:c0:11:2d:82:
         ab:fe:8b:2a:09:43:ea:e4:50:7c:07:d0:81:89:62:4a:fc:f3:
         3e:ba:17:72:c4:3d:13:3a:7a:90:f7:7a:32:f1:0d:02:f5:1b:
         79:d1:27:63:20:1d:6d:fa:06:f9:c7:0a:22:89:a9:34:b9:a4:
         a3:4f:8e:e3:68:45:87:26:7f:e8:bc:dc:4c:3d:0c:cb:20:ec:
         7e:47:2d:a7:f1:90:8f:c4:cf:60:af:5b:da:bc:db:ca:d5:63:
         62:8e:9c:f8:dd:26:14:78:6a:69:6d:d5:52:7b:8b:f3:93:25:
         89:9f:7b:fd:87:34:30:bd:4c:a4:c7:ba:71:1e:f4:3d:6d:3c:
         b1:0b:bd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:10:51 2025 by rpki-client