Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
File:                     FYlivF2icS8gj8ixXr3CRq9Mvs8.mft (raw, json)
Hash identifier:          obnK5oLu3WEemaSNk8pwb0ZBE38ktZXso8XGDcC+m7k=
Subject key identifier:   02:9A:B0:F0:41:64:AD:27:6F:86:74:B2:7B:51:41:75:01:7A:40:7C
Authority key identifier: 15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
Certificate issuer:       /CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Certificate serial:       0198D54DE84077344183E71C9824CF5AE3A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 05:01:49 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:49 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:49 +0000
Files and hashes:         1: 7yUkmk2a1THyX00hTlndTIVmtLc.roa (hash: aTNg1uSoSZtKZaAe8w+QZyL4kY8mBpAFfSDQeH8QdZ0=)
                          2: FYlivF2icS8gj8ixXr3CRq9Mvs8.crl (hash: zxEmNJFdoHUbfb+wb7y4EKkpcuc4ye9TVUYF5zBqRQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:e8:40:77:34:41:83:e7:1c:98:24:cf:5a:e3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
        Validity
            Not Before: Aug 23 05:01:49 2025 GMT
            Not After : Aug 24 05:01:49 2025 GMT
        Subject: CN=029ab0f04164ad276f8674b27b514175017a407c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:51:21:98:5d:c3:df:f2:46:9c:e0:b9:35:69:
                    00:8e:fd:64:45:10:a6:c1:4e:63:18:20:c7:68:21:
                    b0:95:55:61:eb:3c:80:6f:0a:c4:6f:ac:f4:dd:6a:
                    2e:ac:d1:83:fe:26:07:ed:d1:c3:8f:b9:f3:cd:dd:
                    b2:b3:a3:36:bd:fa:e6:8a:bd:4e:ea:90:e1:aa:f3:
                    41:13:f4:57:e7:98:22:75:9b:84:d9:4e:a9:16:87:
                    c7:5b:11:f1:11:2e:f0:7a:02:54:24:f9:10:b3:b4:
                    70:85:52:d0:90:eb:b2:c8:a1:f4:2d:54:7e:63:bb:
                    82:02:3d:2e:96:c2:0a:e0:aa:7f:b2:3a:d8:24:27:
                    2a:9c:7f:a0:d9:31:3d:c5:0d:78:8b:d8:87:9e:27:
                    43:7c:a2:7e:5b:1f:c1:64:03:42:9c:ad:dc:d9:5a:
                    f3:d6:fc:61:b8:b6:13:49:12:ea:8e:cd:b0:7d:a1:
                    fe:74:f1:6e:94:76:61:b7:a6:3e:8c:7c:9a:a8:68:
                    85:2e:74:b1:a0:e0:19:6b:0f:e6:b7:9e:e4:44:b9:
                    0e:a1:87:2c:80:82:2f:82:44:67:f3:f3:07:42:f1:
                    2e:68:f4:a8:3a:61:58:93:24:27:3f:0c:5e:8a:c1:
                    64:f2:c4:72:51:62:60:90:ab:aa:26:00:04:c5:de:
                    50:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9A:B0:F0:41:64:AD:27:6F:86:74:B2:7B:51:41:75:01:7A:40:7C
            X509v3 Authority Key Identifier:
                keyid:15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:13:9c:63:42:5c:20:03:4b:b5:af:9b:9b:36:60:e3:46:94:
         2e:44:81:20:0b:ac:4c:e9:5b:32:e7:66:40:b5:96:e8:e2:7c:
         5c:05:61:53:64:0d:4e:bb:a2:23:0b:e0:e5:c7:34:36:2c:4b:
         77:8a:4a:be:30:63:b2:60:61:21:95:21:e6:cf:ee:ee:01:47:
         f6:05:7a:c6:56:d1:90:ed:f3:5a:b4:e3:8b:6f:ba:55:3b:e7:
         07:ee:f8:16:c2:4e:70:08:eb:45:5f:87:7b:84:49:96:46:5b:
         a8:d2:b8:60:9f:6b:a1:8d:cb:b7:19:ca:10:f2:84:f4:d3:26:
         45:aa:41:ad:4c:76:f4:e3:de:12:03:57:6e:d6:0f:43:20:a5:
         e1:09:5b:9f:11:78:83:41:17:4a:dd:3c:c7:29:e6:58:35:e9:
         05:81:f3:10:82:22:96:f2:54:1d:d8:2f:6d:68:d1:f2:e4:fb:
         3d:01:3e:4f:97:34:93:41:9f:e6:08:50:07:be:8f:6e:04:13:
         ca:0e:3a:aa:70:70:30:ef:ab:6a:f2:ef:56:75:50:9c:7a:9c:
         36:da:e7:c4:76:ea:27:ab:bb:5a:dd:5e:ae:ea:e7:5c:c9:59:
         62:9d:98:e5:8c:87:98:f5:9c:da:db:39:ee:86:5e:97:e5:f8:
         8c:6b:29:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:18 2025 by rpki-client