Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
File:                     Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft (raw, json)
Hash identifier:          QBZ099c4FJu9nM2hO4SL7eI4JaVebj94zxXlp4tzrIs=
Subject key identifier:   23:11:2F:A6:63:B0:88:15:45:C6:89:D2:E9:E1:75:C2:19:70:63:63
Authority key identifier: 16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1
Certificate issuer:       /CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
Certificate serial:       019A71B97E3EE146323ACA3518D84EC0D3AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
Manifest number:          171B
Signing time:             Tue 11 Nov 2025 07:02:53 +0000
Manifest this update:     Tue 11 Nov 2025 07:02:53 +0000
Manifest next update:     Wed 12 Nov 2025 07:02:53 +0000
Files and hashes:         1: Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl (hash: PwarP8BTRXtTvkByfIgQw0WL47MEixSno9W2kEanC0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b9:7e:3e:e1:46:32:3a:ca:35:18:d8:4e:c0:d3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
        Validity
            Not Before: Nov 11 07:02:53 2025 GMT
            Not After : Nov 12 07:02:53 2025 GMT
        Subject: CN=23112fa663b0881545c689d2e9e175c219706363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:08:aa:58:5a:e9:43:99:5e:15:5a:3b:dd:
                    b7:c0:01:c2:49:7f:79:44:cb:21:18:06:2c:af:e0:
                    e9:fa:93:69:28:a5:67:5e:a2:48:2d:d0:c4:1b:48:
                    68:1f:2d:fc:94:1c:a1:6c:bc:36:4e:74:6c:fe:c9:
                    78:80:e9:9c:30:b2:5f:43:b2:c2:c3:51:37:dc:77:
                    62:f6:c9:7f:9c:fb:05:a4:f4:10:fb:9b:9f:6d:a0:
                    af:e8:f8:b5:dd:b7:27:a1:af:82:d0:00:b2:bd:08:
                    97:a1:ce:df:52:5b:2a:ce:ed:ed:06:bd:59:f0:7d:
                    52:86:01:b0:f0:9f:d3:bd:81:b2:f3:f4:e2:e8:5e:
                    0a:38:72:91:aa:68:69:14:e6:e8:94:c4:2f:c1:20:
                    67:b9:44:ed:86:fc:49:0c:9f:7e:a5:b8:f9:5e:7e:
                    ea:a5:e4:5c:25:97:5f:2a:0d:34:05:ab:8a:45:25:
                    12:97:f1:47:53:be:96:8a:c2:23:25:af:90:f0:a2:
                    86:07:f9:58:39:49:e3:bf:a0:91:14:43:6b:48:a3:
                    ac:31:54:e6:5a:84:aa:90:c6:ea:e6:33:b8:bd:b1:
                    47:cd:6d:60:15:a0:31:20:b8:07:35:ee:8a:9e:07:
                    d8:4b:0b:db:05:d8:d0:49:c2:77:f5:df:d7:44:1b:
                    87:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:11:2F:A6:63:B0:88:15:45:C6:89:D2:E9:E1:75:C2:19:70:63:63
            X509v3 Authority Key Identifier:
                keyid:16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:21:66:c1:ad:36:99:92:b4:6b:b3:ac:65:77:d6:8b:c9:ab:
         ef:00:15:09:90:59:49:4c:ef:08:24:69:a3:a0:38:f7:4c:c1:
         c8:35:1c:56:b5:e3:e4:9c:df:5d:65:e1:4a:63:f9:bc:5e:f8:
         02:71:25:44:9b:f2:6d:69:e7:5a:6d:88:02:49:d3:0a:e8:c1:
         ef:b1:7b:7e:f6:bd:8e:42:1b:31:04:5d:77:2f:87:c0:ad:8d:
         07:32:08:28:28:f2:c5:3a:ab:9a:40:09:e4:71:5b:dc:b0:e8:
         46:96:f4:b3:ae:ba:17:c8:90:54:ec:17:91:a1:b2:51:55:ca:
         80:69:94:ed:ce:4a:e2:73:35:36:ae:64:ca:5e:d8:a1:e1:f9:
         40:f8:74:2c:84:7a:03:a8:5e:1a:68:cd:ee:93:ab:45:54:2a:
         7a:2b:3f:21:62:ba:ac:23:0f:b7:38:2d:40:f0:3f:a3:01:30:
         8c:be:e6:53:1d:99:09:9d:d3:38:09:22:56:4b:29:ef:25:c0:
         e6:11:27:0c:7d:1d:72:fa:69:6d:0e:6f:64:03:87:31:21:24:
         f1:f0:b3:42:91:55:06:ba:ce:65:82:e6:5f:76:88:09:2a:c6:
         7c:88:09:01:67:c1:36:e8:ab:dc:ec:34:78:a6:2a:4d:67:ca:
         58:5c:6f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:46 2025 by rpki-client