Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File:                     F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier:          1kbzGg5iJavMhb1z4YUGkD+D8lbYde4irx6vMlQT5H8=
Subject key identifier:   F9:E2:88:9C:28:54:89:D7:AB:42:57:3B:EF:DA:C9:F4:FA:27:47:E8
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer:       /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial:       0198D66074454B705CF015E732B588E1DB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number:          104D
Signing time:             Sat 23 Aug 2025 10:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:42 +0000
Files and hashes:         1: A-cG9_VLTkbphCfs69AUhiirqHg.roa (hash: t1BknoTJdcFpSWtNoZoHuIOq9kUcPBsqmM7WgqQbhUw=)
                          2: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: jQBoVPfvq6nt1DFOR8/ilSyvSGy8pjpEnLUEiJk+RCs=)
                          3: jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa (hash: gfvmY5Jw7/jL3ve93eYFDmKDfaFU9R+FgRyjOHRXXxo=)
                          4: nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa (hash: PxAEcSL4+pjTKWciNNPj/S1u+RcprIkbVvq5ujpcIuY=)
                          5: wNwz-CEyZ2UgBaszV0ucixDH2J8.roa (hash: 7MrpT4CLu6mRCHE7ngg+YWwTFHL1zoVwcmT3KvmQWLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:74:45:4b:70:5c:f0:15:e7:32:b5:88:e1:db:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: Aug 23 10:01:42 2025 GMT
            Not After : Aug 24 10:01:42 2025 GMT
        Subject: CN=f9e2889c285489d7ab42573befdac9f4fa2747e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:a9:d3:fb:a5:f8:cd:1b:c1:22:44:6f:83:
                    4d:a5:df:40:57:a2:df:22:ce:e1:3d:53:2e:05:63:
                    dc:9b:a0:b0:03:3b:30:4c:29:1a:85:0b:4d:62:fb:
                    89:16:37:3c:32:cf:e7:db:4e:92:ea:39:6f:61:71:
                    e4:b5:c2:ac:df:33:45:98:f8:5b:11:46:ad:55:e3:
                    e3:4d:10:71:fb:b7:6d:7c:a8:de:74:d5:4c:68:40:
                    87:fd:78:92:06:d2:8a:c3:94:32:2d:04:14:cc:df:
                    c2:60:27:ba:63:cb:be:c9:1d:2c:d1:7c:b0:45:66:
                    52:bb:21:f1:96:0c:da:91:18:29:3c:7a:14:c9:68:
                    bb:35:d7:ea:55:85:7f:a9:33:5d:7b:2c:b6:5b:bf:
                    30:37:df:46:31:34:d0:b7:80:6e:d6:aa:14:80:43:
                    9e:e4:76:50:33:3a:51:57:5d:1b:86:d3:0d:f1:57:
                    09:8d:a5:d9:62:de:d9:4b:ac:11:68:8d:9c:78:24:
                    65:bb:c7:54:b2:99:16:54:35:5b:ef:e9:f3:45:39:
                    fb:58:65:30:75:c8:87:85:37:2e:66:c4:9f:e0:d2:
                    b2:bf:e2:26:52:70:c5:65:25:23:2a:9a:d2:b0:80:
                    e7:52:ed:30:bd:9d:77:8f:ce:84:7c:e5:cf:a7:bb:
                    9d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E2:88:9C:28:54:89:D7:AB:42:57:3B:EF:DA:C9:F4:FA:27:47:E8
            X509v3 Authority Key Identifier:
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e9:30:a6:7d:f2:f3:c7:cd:a0:dd:4b:f6:11:ed:08:d0:11:
         d6:d9:bf:b5:01:f3:84:5b:f6:e3:d2:38:d1:7a:3c:e5:21:39:
         9f:2d:b4:69:16:35:05:7a:b1:88:6f:17:11:a2:9d:45:97:62:
         21:c0:78:17:bd:07:12:fb:ba:8c:3e:72:50:66:3f:b3:fc:6e:
         2b:c3:4c:58:e3:92:a7:fe:6d:c4:de:91:77:f3:23:31:0a:05:
         3d:a7:97:f3:31:dc:7f:77:0a:ed:83:2c:00:2e:8d:1f:e1:25:
         b4:6b:ca:87:ff:17:29:41:d3:98:56:79:c4:69:59:ed:45:a2:
         5c:0c:05:3a:47:95:fb:44:5c:18:dc:59:85:cb:e2:0d:40:72:
         ef:65:e1:b9:bb:97:31:22:80:30:ea:aa:06:31:75:41:d5:31:
         ac:d3:e8:75:f8:2d:69:fb:f7:2b:74:a0:fd:b9:e3:d1:15:5a:
         c6:b0:03:49:bf:ad:56:31:74:24:fc:27:2e:5e:73:79:f6:14:
         87:ef:d7:a5:f7:c1:0c:43:ac:27:b9:1a:69:55:5f:be:78:49:
         fb:f6:b1:06:65:85:7b:fa:b8:79:01:ca:5b:41:ca:7e:a3:0e:
         1a:a6:10:56:3a:d8:cc:a4:3e:9a:f0:46:3f:5a:d7:da:b5:37:
         d3:25:5d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:05 2025 by rpki-client