Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
File:                     1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json)
Hash identifier:          FX3xNx6qMJdYXfTKNVgmwZlOhD1OGHlRZfH283PQS0M=
Subject key identifier:   FC:A7:E8:C0:00:7F:7B:75:81:4B:31:3E:CE:0E:75:C0:81:49:8D:DB
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Certificate issuer:       /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial:       019872CF1693735185CD5C2568E3704BA312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
Manifest number:          161B
Signing time:             Mon 04 Aug 2025 02:00:30 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:30 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:30 +0000
Files and hashes:         1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: 3ATZP2SwpJpPy2CchjI2A9/brqPf0u9jhcxGslDsZgU=)
                          2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=)
                          3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=)
                          4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=)
                          5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=)
                          6: WjTYhnjd8JZNKcEGGyvScBW7ujg.roa (hash: xm9/rrII6hlVm8eUope1QTZ7F33LVLrGkQUEXzf0iIk=)
                          7: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=)
                          8: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=)
                          9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=)
                          10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:16:93:73:51:85:cd:5c:25:68:e3:70:4b:a3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
        Validity
            Not Before: Aug  4 02:00:30 2025 GMT
            Not After : Aug  5 02:00:30 2025 GMT
        Subject: CN=fca7e8c0007f7b75814b313ece0e75c081498ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:69:9e:1a:8c:4f:b8:cd:a8:f9:08:eb:6a:
                    ca:a1:5c:c9:58:06:d2:13:3b:b9:ab:4e:ce:b7:38:
                    b6:7c:6f:b2:1c:81:08:0a:be:22:f8:40:c2:86:ec:
                    da:29:6a:84:3e:98:cf:13:ec:f8:22:60:4f:a5:46:
                    71:4f:6e:6e:88:65:53:88:3c:65:fe:da:c5:28:f8:
                    81:ce:31:cd:b9:c5:37:f6:79:d6:05:9d:5b:71:b6:
                    fd:1c:90:a7:06:41:3c:32:14:5d:31:68:58:98:bb:
                    14:08:d1:6e:b3:00:7e:c0:38:66:c2:35:55:f7:ad:
                    a2:39:62:f3:1c:fe:7b:f0:ce:d3:b6:f2:7c:cb:77:
                    10:b9:b4:b3:00:55:a6:ec:90:0a:99:bb:6e:1f:45:
                    55:85:48:c1:a3:8e:38:23:8d:f6:c3:9f:75:15:2e:
                    00:3c:75:12:65:bf:e2:39:c4:fa:8c:89:88:e8:8d:
                    82:4b:27:49:64:8c:11:87:f5:12:87:1d:6f:52:01:
                    8d:26:80:99:f6:29:e6:f8:57:8a:42:a8:84:59:97:
                    7e:d5:ad:9f:b9:a3:62:2a:8a:ae:61:c6:97:6c:e6:
                    59:db:2d:d6:45:5f:11:6a:5a:67:58:03:25:eb:60:
                    ef:3b:f6:99:09:38:0b:b8:56:b7:f8:be:9d:07:b1:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A7:E8:C0:00:7F:7B:75:81:4B:31:3E:CE:0E:75:C0:81:49:8D:DB
            X509v3 Authority Key Identifier:
                keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:26:3d:a6:50:c1:c0:a9:ca:7b:28:9a:15:e2:ea:07:a8:54:
         05:b4:a3:87:d6:81:9c:c2:df:cd:50:01:59:46:bc:e0:4a:0b:
         41:0e:35:73:57:dc:68:82:5f:21:82:61:2c:02:2f:ef:20:f2:
         75:46:1a:5d:af:4e:d0:55:ff:9d:5e:f6:34:e3:81:25:5a:85:
         f6:46:5c:6a:11:05:5d:17:d4:57:3f:6e:12:45:3d:aa:c5:e8:
         23:02:42:48:53:1b:b8:91:ef:d0:c6:44:4f:91:54:d6:fc:ec:
         54:fc:5b:ce:97:0d:21:33:4f:f0:f3:75:66:9d:8a:5a:32:26:
         30:db:f1:94:48:74:63:bb:95:35:66:e8:03:d0:83:26:2d:90:
         81:6c:ac:57:04:ec:c7:0a:47:24:e8:cd:b6:0f:cb:ec:71:e4:
         ba:b0:a7:f5:ad:f4:49:3d:4f:97:ee:90:67:43:12:0a:e9:80:
         3d:86:a9:96:d1:de:76:5b:2e:e4:b5:78:8f:d3:01:76:25:ba:
         5f:07:fd:d6:36:53:1a:9a:3e:b9:0b:72:4e:d7:5c:b9:d9:78:
         69:52:ef:ff:f4:12:a2:64:fd:5b:48:1f:47:7a:c8:df:88:57:
         d0:fd:9b:2e:a8:f9:80:ae:db:33:6e:53:39:68:f5:30:f1:72:
         8d:24:fb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:58 2025 by rpki-client