Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
File:                     fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft (raw, json)
Hash identifier:          gb9fEMkY1vfeXuDF39yI4X1/qPExGXGnwdDZBQnm2Yk=
Subject key identifier:   61:7C:77:A6:B5:E0:A2:28:FF:08:1D:04:B1:83:7A:20:DF:4C:F2:BD
Authority key identifier: 7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
Certificate issuer:       /CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Certificate serial:       0198D8513BEAE53337F853895463055D13DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 19:04:19 +0000
Manifest this update:     Sat 23 Aug 2025 19:04:19 +0000
Manifest next update:     Sun 24 Aug 2025 19:04:19 +0000
Files and hashes:         1: SpkdakB2OdIuVE348-y165owlz0.roa (hash: BnmPz2hkeMhPxWlEoJOTembsWZqO80f/J+3uznzMlq8=)
                          2: fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl (hash: E6fA5rkzL3qNGfvI1Pwqeg7MIGtWokSJ44OP4qGYzKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:51:3b:ea:e5:33:37:f8:53:89:54:63:05:5d:13:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
        Validity
            Not Before: Aug 23 19:04:19 2025 GMT
            Not After : Aug 24 19:04:19 2025 GMT
        Subject: CN=617c77a6b5e0a228ff081d04b1837a20df4cf2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:62:a6:99:fe:00:5d:11:b6:78:65:12:77:
                    fa:87:57:ae:c1:96:5b:58:63:f5:be:5f:98:33:d9:
                    3b:b3:e8:9d:06:15:1f:e1:82:38:a7:17:e9:5c:dd:
                    a1:1e:d5:38:c8:d2:45:cb:46:3f:52:66:f0:01:0e:
                    ad:3d:9d:8f:f1:91:99:5d:55:06:8b:9b:9b:15:64:
                    18:46:0e:4b:c3:2b:77:09:11:92:7b:83:e6:92:58:
                    18:d7:58:ee:2e:f6:ae:79:71:d1:33:df:88:80:00:
                    fb:92:e3:d1:37:07:cc:18:a0:97:b5:7f:f2:3c:1e:
                    26:93:b8:db:18:c1:37:6c:96:8a:c9:63:08:51:81:
                    31:c8:b1:24:ac:84:7c:5e:40:e7:66:09:8b:7c:50:
                    29:ae:cc:7e:b9:3c:00:8d:b0:9d:e6:67:27:dd:7d:
                    8b:6c:4e:75:fc:28:e7:aa:a8:5e:75:83:e8:35:28:
                    95:76:fb:fb:01:97:0f:be:0e:d7:08:07:cd:aa:a3:
                    ef:6a:fa:ef:5c:24:ff:7a:2f:33:44:4f:21:e6:6b:
                    24:9f:72:37:83:90:e2:92:67:8b:11:cd:33:72:01:
                    2a:71:6f:6d:68:93:fb:26:f9:6a:cc:d2:02:84:82:
                    71:d4:0b:7e:aa:2f:0b:aa:c9:f3:1b:1b:00:67:f4:
                    3c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7C:77:A6:B5:E0:A2:28:FF:08:1D:04:B1:83:7A:20:DF:4C:F2:BD
            X509v3 Authority Key Identifier:
                keyid:7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:45:64:d9:70:66:79:bc:27:a0:6d:5d:f9:dd:f0:17:85:73:
         3f:62:6e:9b:6f:51:70:ca:19:cb:8e:88:52:bc:f7:ec:a3:e8:
         80:49:1f:42:42:09:e8:cc:74:5c:15:f6:6c:6b:79:2d:f9:ae:
         21:5a:4f:ec:55:0c:78:eb:7a:ac:2e:17:01:b3:05:4e:05:53:
         09:b7:e3:69:1f:0a:2c:c3:53:63:0f:87:6a:8f:d1:2a:1b:7a:
         6e:18:5f:ac:f2:3c:b9:71:76:d5:b9:67:0c:70:39:1e:93:20:
         fb:1e:dd:6b:b8:ff:ac:24:80:b6:fa:98:98:a7:a4:cb:47:d9:
         32:9f:b4:a4:c5:18:73:32:da:f6:5b:79:f5:3c:28:b7:e5:5a:
         9c:77:34:e2:83:87:f6:66:bc:a2:46:c6:03:85:f7:a5:74:db:
         6e:9b:7b:39:9a:6c:6d:ed:7a:7d:2b:6b:ad:54:a9:ea:bc:ba:
         09:73:8f:53:08:38:ae:16:26:34:16:2e:20:d5:84:b9:65:e9:
         cf:60:dd:c0:b7:30:11:79:d7:d4:62:db:20:4c:f4:bd:71:35:
         e2:b1:86:ea:03:ef:4b:97:8c:28:f4:ce:c7:a0:24:52:fb:64:
         ec:05:c9:36:ad:cc:79:7d:42:24:da:ab:fe:b4:f4:57:d9:be:
         3c:77:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:31:42 2025 by rpki-client