Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
File:                     Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft (raw, json)
Hash identifier:          nCIN2l/si6fZiufHFD9gvai57FKVAtOKy73skjgtiBo=
Subject key identifier:   6B:78:D5:D5:01:43:33:5C:91:15:83:27:57:DB:BB:38:58:76:FB:ED
Authority key identifier: 16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
Certificate issuer:       /CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Certificate serial:       019893DB3B101909308DEDD818D064420A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
Manifest number:          0AEF
Signing time:             Sun 10 Aug 2025 12:01:14 +0000
Manifest this update:     Sun 10 Aug 2025 12:01:14 +0000
Manifest next update:     Mon 11 Aug 2025 12:01:14 +0000
Files and hashes:         1: Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl (hash: CMYX08Uj59Mu/GQVXw0y3Pqa2WxEyE12va14Zp2bjFI=)
                          2: KhY12QXPgZGvijy8NVkM5-EZS4E.roa (hash: CzHA8lyjc+xI7dPqpc2iJoeImIrTVoVteRcgbm8dNIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:db:3b:10:19:09:30:8d:ed:d8:18:d0:64:42:0a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
        Validity
            Not Before: Aug 10 12:01:14 2025 GMT
            Not After : Aug 11 12:01:14 2025 GMT
        Subject: CN=6b78d5d50143335c9115832757dbbb385876fbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:29:3c:aa:da:92:3d:a0:a7:1d:eb:8e:9e:
                    88:3a:1b:f4:7e:83:7b:81:4c:64:55:65:af:66:61:
                    95:b3:fd:1d:dd:85:e4:49:9a:77:a9:aa:5f:51:8a:
                    a5:54:d3:48:9b:17:3e:49:16:8c:b1:d3:86:a6:dc:
                    a8:dc:a8:26:fd:9b:45:96:9c:c0:ed:7d:c7:ef:92:
                    02:0c:f5:a1:94:fe:f5:21:75:c7:a4:d4:9b:5f:f6:
                    84:e1:48:42:f1:c6:1f:72:ad:f6:de:06:94:22:a8:
                    ee:68:95:1b:2a:60:47:70:32:c0:8d:57:c8:35:67:
                    6b:f5:96:8d:79:df:48:9c:6f:42:e4:56:45:3b:cf:
                    4a:29:ca:82:ce:0f:72:1d:8c:bd:b2:09:b6:ed:8c:
                    e4:a4:bd:76:c7:99:a7:57:35:17:78:1c:9a:0c:ce:
                    b9:f7:02:d0:cd:a6:64:68:c6:80:01:cc:05:43:7d:
                    7d:6d:74:e6:31:61:e0:fc:9c:85:da:45:48:db:be:
                    8f:f0:88:ec:e8:bd:c0:6c:7c:d1:19:6b:d9:60:d2:
                    2b:45:47:f4:ac:42:09:cb:e7:43:8f:9b:50:3d:be:
                    6c:56:bb:ae:18:8d:84:8a:15:6e:cd:97:fc:54:bf:
                    5c:86:af:c7:b7:5a:65:6e:11:17:84:71:63:ff:2f:
                    7f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:78:D5:D5:01:43:33:5C:91:15:83:27:57:DB:BB:38:58:76:FB:ED
            X509v3 Authority Key Identifier:
                keyid:16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:37:b2:20:27:e3:c5:ce:db:a6:d4:44:73:2c:b8:bb:fe:5b:
         76:a6:0f:65:25:d6:77:cc:23:5b:2d:d8:6f:b8:cd:fb:58:46:
         d5:51:83:f5:56:e0:ce:39:99:25:97:07:fd:7b:35:f9:7e:1f:
         25:19:07:07:90:32:92:87:a5:fd:ef:2d:18:a3:a3:8c:ed:4a:
         77:12:46:92:9f:5a:03:fd:2d:48:f1:78:25:25:c0:9e:20:82:
         46:a5:c5:82:4c:44:79:89:57:73:d5:89:7f:12:19:d9:74:ee:
         73:63:7a:eb:f7:da:c3:47:54:7f:2c:60:4c:6c:76:94:c2:2f:
         9d:75:b8:30:0c:da:81:fe:11:a7:cd:28:38:9a:3f:ec:e4:47:
         c2:d9:3a:54:b2:82:62:a8:49:db:f6:ad:a5:aa:30:4e:fe:a0:
         38:17:71:f2:17:b6:37:30:01:93:07:e2:12:f9:0c:2e:e8:2e:
         18:4b:3c:d4:68:02:9a:68:99:f7:01:b1:d3:e3:ed:ef:5a:5b:
         79:08:9e:3d:c7:17:7d:bd:0d:5a:82:56:66:5d:2b:35:26:9d:
         9c:27:83:be:c5:2a:90:87:dc:11:4f:ba:9d:57:9c:da:d9:99:
         30:66:c4:c8:72:fe:fc:83:59:f2:19:34:bb:67:8b:fd:40:e0:
         9d:b7:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:48:14 2025 by rpki-client