Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
File:                     Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft (raw, json)
Hash identifier:          2gG7y0QB9RIktT2vlAxS0IMPLdQRaR22U2/CchO1vck=
Subject key identifier:   5F:F4:78:2E:6B:25:08:1A:CC:F1:73:D3:CA:0B:2E:2B:B0:82:67:B9
Authority key identifier: 16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6
Certificate issuer:       /CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
Certificate serial:       0198D4E09C1C672D9E653FC7358FE5BB5E51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
Manifest number:          042C
Signing time:             Sat 23 Aug 2025 03:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:26 +0000
Files and hashes:         1: Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl (hash: 4aP2GJvCsbAC8oNfWW2pzi+USF/usL2eAxWURfNjG2o=)
                          2: KN3Pqvfy1GqF2HSIy087TZo7Qs0.roa (hash: oGzQ0+1tlhBDajtg9SkNTia0clrGxHNnBRyqbyuthV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:9c:1c:67:2d:9e:65:3f:c7:35:8f:e5:bb:5e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
        Validity
            Not Before: Aug 23 03:02:26 2025 GMT
            Not After : Aug 24 03:02:26 2025 GMT
        Subject: CN=5ff4782e6b25081accf173d3ca0b2e2bb08267b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bb:99:a8:36:d4:5e:54:95:4a:5b:34:4d:b1:
                    23:6e:78:51:ae:c8:ee:6b:33:54:1d:54:39:8e:69:
                    05:12:06:22:cc:d1:11:dd:75:85:e7:63:0a:2d:66:
                    70:ce:b2:e5:69:d6:5a:d0:21:4c:a5:25:52:7a:d5:
                    a7:54:82:18:d8:db:fd:ed:60:f3:7a:2c:d0:71:69:
                    1f:38:0b:84:9e:1c:65:c5:ae:e0:59:81:fd:d6:ed:
                    8b:cf:a5:58:a0:e2:10:9d:19:92:ba:16:b7:0e:ab:
                    44:b2:b9:d7:54:4b:85:97:79:c6:d8:bc:ab:7d:ee:
                    8d:1d:dc:60:83:66:d5:8d:ca:45:6e:75:9c:df:ac:
                    3d:ac:83:7a:9c:5a:b2:e7:ee:40:04:00:ef:fb:48:
                    5e:3b:6a:46:bf:ce:f3:8e:71:ab:36:33:24:ca:8f:
                    3d:db:d5:7f:b1:6d:da:a3:fe:f5:42:9c:f7:97:d4:
                    71:42:ae:e5:6d:6b:0b:39:15:7c:c6:78:7f:b8:99:
                    71:61:a6:7f:12:79:ca:46:8c:0a:23:88:4f:70:da:
                    dc:e5:4e:74:0a:f6:a1:9e:25:2a:65:99:b8:52:e3:
                    56:ed:2a:c1:9b:8b:b3:8f:5e:b2:f6:df:68:f8:59:
                    ed:ef:f7:73:94:61:af:75:66:42:cc:4f:5b:bf:2e:
                    8e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F4:78:2E:6B:25:08:1A:CC:F1:73:D3:CA:0B:2E:2B:B0:82:67:B9
            X509v3 Authority Key Identifier:
                keyid:16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b3:ad:ef:8d:b4:fc:f9:df:17:0a:2c:b8:ea:4d:41:b9:b4:
         21:57:09:2e:44:f8:11:2f:01:f2:77:25:93:85:84:10:5d:6a:
         c5:aa:1e:89:62:0e:36:66:71:38:88:32:67:cf:50:4b:8e:08:
         9d:1c:1d:ad:dd:81:79:60:55:77:d3:4a:c7:6a:45:1e:7d:bb:
         a1:c7:25:43:88:15:3f:ad:d0:35:87:85:d4:ff:a1:23:0d:4a:
         48:fc:5f:89:6a:f5:ad:38:db:16:ba:00:56:00:1a:5a:39:c5:
         0b:9c:9b:b9:99:93:ef:28:8c:23:cf:93:13:7f:79:a8:76:2e:
         01:4a:f7:ce:cc:9d:5c:55:8d:5a:b8:5b:0b:2a:cb:97:b5:ba:
         71:33:30:ba:4c:2e:0d:69:2c:e0:50:ca:3d:6e:32:ef:c5:42:
         3e:38:37:cf:3f:8e:be:9b:1b:2a:85:f6:ac:a5:c8:ec:24:54:
         4e:11:70:5a:14:d7:b9:de:29:db:38:d3:2f:35:2f:d1:44:36:
         b3:0b:ea:66:1c:96:3c:ca:6e:07:28:91:10:75:05:f6:df:ee:
         4a:5b:26:8d:73:64:fa:22:61:ac:d2:d9:a3:6e:b3:51:d9:d8:
         95:5a:aa:41:cc:9f:43:43:c8:ba:fd:1b:3b:1c:95:ec:81:d1:
         de:b0:fa:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:58 2025 by rpki-client