Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
File:                     FmqYZpgAXVfnuS96ONIZu7gP4f8.mft (raw, json)
Hash identifier:          go8TvISlCFO1S9LEX6Gs5QaSplr6DBqRYCGBhH6vI94=
Subject key identifier:   8E:09:9A:D2:37:CF:DE:7A:13:1C:C5:4E:72:C7:A9:C7:6A:EB:FF:8E
Authority key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
Certificate issuer:       /CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Certificate serial:       0197711A89C291E0826B48AA4CD5BDA61383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
Manifest number:          1019
Signing time:             Sun 15 Jun 2025 01:00:53 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:53 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:53 +0000
Files and hashes:         1: FmqYZpgAXVfnuS96ONIZu7gP4f8.crl (hash: V+KL19y7n8zgXu5xLPmyKC5WfhNRB41mvmBpthHyipE=)
                          2: c4nEiNEeJD2vFf8wumBi1yYvs6E.roa (hash: aF0QKy6JcPOas0fgNBBJCKQQxMBB/xZccd3mvICIadY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:89:c2:91:e0:82:6b:48:aa:4c:d5:bd:a6:13:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
        Validity
            Not Before: Jun 15 01:00:53 2025 GMT
            Not After : Jun 16 01:00:53 2025 GMT
        Subject: CN=8e099ad237cfde7a131cc54e72c7a9c76aebff8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:05:f6:ae:7f:68:53:ff:fe:dc:a4:89:84:
                    af:51:a4:31:e6:68:53:09:35:7d:d6:df:8b:8a:af:
                    5b:50:b8:32:54:6c:93:55:3b:7f:12:f4:22:a9:4a:
                    2c:d5:ca:ec:90:68:74:e0:f2:5a:18:f3:3e:42:a2:
                    04:9f:8f:ea:48:14:3c:77:9a:f3:ee:55:87:d6:48:
                    b5:d2:5f:bd:a8:55:4a:7c:04:0f:54:86:35:52:18:
                    c3:31:32:ce:2a:1e:80:77:4e:7a:da:c7:41:50:f4:
                    0b:f5:1b:5a:49:77:a7:a8:ef:02:ae:51:60:a7:3f:
                    e6:1a:e0:9a:03:5c:b6:c9:a0:73:5f:44:cd:cb:ce:
                    6f:69:d1:1b:90:08:27:e2:70:09:fd:66:d9:50:dc:
                    6d:dd:b0:57:4e:99:e0:47:57:50:c0:55:8f:51:bd:
                    9a:67:b0:39:8a:76:fb:0d:22:77:d3:8f:44:6a:5a:
                    0f:ac:d5:5f:dc:fb:1e:ea:6e:bc:0e:06:28:14:8f:
                    f3:c1:08:e0:d1:36:19:48:e6:7c:2a:1b:78:29:15:
                    81:5c:06:5a:ae:c2:a3:97:ac:d7:4b:67:97:77:b2:
                    8b:4e:9f:b1:d2:0e:4c:55:75:e1:52:ae:a9:e8:9e:
                    5a:9d:0b:02:5e:6c:6d:80:45:e7:5b:7c:8b:38:8b:
                    b6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:09:9A:D2:37:CF:DE:7A:13:1C:C5:4E:72:C7:A9:C7:6A:EB:FF:8E
            X509v3 Authority Key Identifier:
                keyid:16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:59:a8:8a:62:c4:f6:fa:14:4b:23:50:a6:2c:58:86:47:57:
         c2:fb:3c:42:27:9d:d6:e0:b0:f2:d7:d6:f7:48:e6:29:42:10:
         2f:a0:59:95:ac:20:f5:b3:1e:6f:34:be:cb:df:2b:02:8d:98:
         1d:5a:2a:e3:be:ad:e6:91:ad:14:f0:69:4a:1b:c2:bc:0c:33:
         48:82:41:29:7b:49:f1:e4:2f:bb:5f:d9:14:f2:ff:f3:3f:6a:
         c1:b8:6f:50:37:9a:52:b0:e1:99:fc:ac:d1:57:1b:8c:b1:d8:
         a9:f4:69:be:1b:93:89:c9:1c:df:ca:d4:eb:e0:5f:c8:ed:dd:
         07:37:68:cc:cb:94:7c:ae:35:14:eb:ab:e2:41:6e:b9:42:20:
         5e:39:b9:4c:79:e9:41:ae:bc:3c:3c:42:69:41:b4:dc:05:b8:
         ca:54:b7:c2:7f:89:87:78:12:ba:62:fd:08:ea:b0:2b:97:39:
         6b:f1:b8:0b:48:e7:5b:9e:72:c9:e8:2a:5d:2f:dc:31:b2:77:
         34:cc:17:82:68:b6:29:b2:e9:31:05:e7:13:c1:d9:0f:58:62:
         46:69:72:a8:8d:26:e3:85:c5:ed:49:12:f3:f6:c5:d7:1a:9e:
         6d:99:88:d4:f9:9a:cb:38:f0:c0:0a:44:d0:8e:9f:1e:ab:6e:
         e6:79:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:17 2025 by rpki-client