Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
File:                     Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft (raw, json)
Hash identifier:          Ph16ucI4HTUZWijmxcYF78A2q4RuEuJt+Ws7hehg9PM=
Subject key identifier:   EC:E6:0C:18:7F:45:E8:9A:32:E2:49:04:0C:08:AB:C8:AC:7F:7F:BC
Authority key identifier: 16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E
Certificate issuer:       /CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
Certificate serial:       0198A04D7EAF0FE55EBF4C2A53B8636474C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
Manifest number:          02F9
Signing time:             Tue 12 Aug 2025 22:01:29 +0000
Manifest this update:     Tue 12 Aug 2025 22:01:29 +0000
Manifest next update:     Wed 13 Aug 2025 22:01:29 +0000
Files and hashes:         1: Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl (hash: kqZ+ezBVupWLPn0AkFAuSDNTqsXZxKfkdjQONXaZTNs=)
                          2: slKuYhirMr_9AdtUijDzLipBRL0.roa (hash: /qHjp8kupLORl1OCxD3SUcgezP/zyet0u8Wb2x+yJAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4d:7e:af:0f:e5:5e:bf:4c:2a:53:b8:63:64:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
        Validity
            Not Before: Aug 12 22:01:29 2025 GMT
            Not After : Aug 13 22:01:29 2025 GMT
        Subject: CN=ece60c187f45e89a32e249040c08abc8ac7f7fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:e5:de:9b:f5:f2:58:8e:07:c2:78:35:3b:
                    90:6d:89:9a:6c:9b:ea:cf:3e:7b:7d:d4:a6:e6:98:
                    8c:3d:b7:0c:4e:d0:13:15:ac:ef:c0:e8:a4:da:39:
                    6a:42:19:7a:2c:2d:a4:d7:e6:2b:2a:49:ac:ec:3a:
                    98:72:aa:f0:f6:8c:48:c7:db:2a:09:8c:28:1c:2c:
                    60:d6:75:7f:89:b8:b6:e3:77:b7:cb:eb:75:39:92:
                    be:e6:9c:c0:a7:28:67:9d:df:d7:41:e6:65:2a:63:
                    ac:13:3b:2a:4f:ef:dd:e3:76:75:44:17:fd:f6:d9:
                    d2:68:9b:77:a1:7a:c3:36:70:9c:6e:81:fd:06:ed:
                    44:a5:4d:3d:cf:bc:3b:87:3b:ad:5a:08:71:46:8f:
                    62:cd:cf:26:2c:8f:c1:4d:5f:4a:25:94:b7:76:4c:
                    63:07:b6:d2:3a:6b:b7:e7:f7:31:56:c7:b8:c4:d5:
                    b0:39:8c:6e:d2:87:c7:48:9e:24:11:a1:f4:dc:18:
                    b2:d0:37:00:a1:30:4b:6a:e1:4d:49:04:42:39:5f:
                    5c:7b:31:6e:6c:9e:de:a3:ca:ad:3e:81:b0:82:78:
                    af:9a:57:26:76:33:d3:b5:cd:7a:ba:f4:c9:88:dd:
                    ae:90:e2:3d:57:0e:d0:d6:92:fa:1d:47:07:17:e2:
                    c5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E6:0C:18:7F:45:E8:9A:32:E2:49:04:0C:08:AB:C8:AC:7F:7F:BC
            X509v3 Authority Key Identifier:
                keyid:16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:4e:94:e9:db:4a:2a:2c:5d:25:c6:34:ae:14:b6:ac:8d:3e:
         2c:67:ab:12:a3:db:51:52:4e:55:db:10:be:c5:f6:37:ff:b5:
         19:d1:7c:0e:52:a4:17:af:92:85:b5:6f:c6:1e:7e:c0:41:57:
         0e:da:c2:2a:b8:d2:a3:df:a9:61:8d:27:8e:58:01:57:4a:c9:
         43:ed:51:96:b7:b6:ee:d7:4e:99:78:32:02:65:a0:64:01:15:
         2f:a6:0e:bc:67:9f:63:13:ea:8a:a4:0d:d8:92:40:71:e8:c2:
         c9:de:54:4c:24:c7:fd:0b:43:ea:29:81:b8:8e:08:0e:2c:01:
         d5:4e:c6:3d:cf:93:ba:9d:19:0e:db:bd:38:c3:db:44:f8:27:
         1e:d1:22:8e:5e:ed:e1:8d:c7:6c:af:d2:8a:f2:67:36:45:9c:
         b9:a2:13:f1:05:9d:3e:7a:3b:f5:01:a7:5c:3c:65:0a:45:90:
         3a:52:bb:14:c0:17:39:f1:23:48:67:4f:19:c8:6a:2f:96:66:
         0e:7e:0b:27:90:65:71:66:e8:b8:22:f4:d9:c7:65:0b:f2:2c:
         b5:b2:e8:96:33:36:14:67:01:f0:03:62:28:bd:24:b0:07:db:
         b5:3b:fd:c4:79:e7:ef:10:92:03:94:7f:5a:74:0b:34:60:80:
         8f:de:77:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:38:10 2025 by rpki-client