Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File:                     FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier:          NtebFo3JdIcVQaEF3T3B/fs18WM7GR64ESImoD809tQ=
Subject key identifier:   10:F3:CB:C1:79:87:80:02:69:04:92:23:9C:49:BA:69:DC:25:78:FA
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer:       /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial:       0198D5F188E95B00E02AB748162796107173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number:          71
Signing time:             Sat 23 Aug 2025 08:00:32 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:32 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:32 +0000
Files and hashes:         1: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: VlZ7q9juJO7Y4PrWruUvPa+cAwjBBbYNZ/JjOqYJ0cs=)
                          2: RyU-tKT6g5iQNEPXbzsjbHBM1_k.roa (hash: 2sFbg6PGW25XBrpSEBIs6U3UJCsY2lOFHoiV3xMg67c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:88:e9:5b:00:e0:2a:b7:48:16:27:96:10:71:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
        Validity
            Not Before: Aug 23 08:00:32 2025 GMT
            Not After : Aug 24 08:00:32 2025 GMT
        Subject: CN=10f3cbc179878002690492239c49ba69dc2578fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:66:40:e2:ad:af:48:1c:a3:a3:03:bd:93:
                    eb:c0:96:00:ac:3f:3c:ce:95:0d:2d:72:4e:7a:43:
                    65:5e:e1:7f:5f:7e:69:e3:7b:37:c1:6a:6b:cf:ba:
                    3c:0d:29:79:42:09:47:08:00:15:16:84:12:ac:7a:
                    65:89:43:d4:a8:b2:2b:fe:04:88:68:33:9b:db:37:
                    14:ea:0d:dc:a4:b8:a4:49:b4:3c:86:b9:fa:8d:53:
                    6d:2b:44:46:a4:2f:c4:dd:f0:90:4c:df:14:e6:8f:
                    1c:22:55:06:48:b2:ba:fe:eb:21:8e:1d:4e:7f:19:
                    41:e0:86:65:e7:b5:e6:33:30:03:71:32:ae:33:f6:
                    71:e6:f7:85:27:9a:6b:a4:27:89:ae:5a:dc:94:83:
                    ae:bf:67:13:01:0f:1b:4e:d9:6b:77:f1:6d:c7:bb:
                    9b:c0:2a:84:d4:24:29:57:57:03:9e:4f:b1:e4:47:
                    54:65:26:0c:87:8f:0f:da:03:93:7f:67:c4:80:b4:
                    1f:6a:45:2e:3f:6e:2d:5a:36:98:cb:8e:56:46:94:
                    af:ff:1e:1f:c7:9f:a9:1c:62:96:a6:be:0c:33:ac:
                    c4:99:64:49:96:f6:4f:62:d3:de:d5:ea:84:df:d8:
                    16:c1:d0:11:5d:68:9f:b6:fd:f8:95:5a:14:e9:d4:
                    cc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F3:CB:C1:79:87:80:02:69:04:92:23:9C:49:BA:69:DC:25:78:FA
            X509v3 Authority Key Identifier:
                keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:67:f8:fa:43:cc:f3:b6:18:1b:e3:4a:1b:60:87:44:f6:1b:
         4a:4c:25:29:86:26:f6:17:94:c7:65:6d:ef:2d:ca:8e:98:41:
         01:c6:55:21:e8:c8:a6:38:66:b8:c6:1e:50:c8:f6:6e:0e:45:
         48:ee:b0:ab:27:91:95:51:08:f6:19:a5:72:71:a2:3d:7c:c1:
         8c:1c:30:9d:94:a3:ff:6b:94:30:4a:d2:93:e7:fc:ff:f4:7a:
         eb:8f:64:57:6e:d3:af:e9:82:b1:9f:eb:1f:10:8b:67:65:ec:
         c1:2f:21:2c:14:8b:8a:30:cf:90:b8:11:30:b3:27:9e:30:3d:
         d5:09:e0:9c:ad:8e:87:08:21:cb:71:00:8f:2e:d2:d5:c5:02:
         7e:a6:38:fa:b6:71:eb:1d:1b:74:d9:a4:46:be:49:28:e0:48:
         b7:e2:33:86:a4:be:21:4a:52:4e:67:8c:76:46:ec:5d:a0:f6:
         37:d4:53:a4:2f:03:5f:c3:c8:cd:27:d3:d8:9e:11:e0:a5:2b:
         d0:2d:c8:e8:d7:14:60:85:04:2f:04:0d:99:5a:ce:52:34:0d:
         42:0f:38:b7:9b:c2:bf:d2:48:51:e5:8d:69:28:37:81:3f:3e:
         33:17:43:cc:c0:38:b8:4a:79:e9:81:f3:ad:08:9c:54:25:f7:
         79:e6:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:03 2025 by rpki-client