Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File:                     FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier:          yvx852X+no87zcZmreqEkEJwQn60Nzp31JSj73I69fU=
Subject key identifier:   BB:FE:6E:1C:AC:44:B7:06:21:C4:AE:71:3B:EF:8E:61:C3:71:36:59
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer:       /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial:       0198D5BBD56146455A441C09AF46D937C15E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 07:01:53 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:53 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:53 +0000
Files and hashes:         1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: W8Emf6XZcJedjt77sFw+LNxXfXZ/dpQUjPiS/ViSCpQ=)
                          2: rXJZFmG2fExX2PgdhmMI1znr1Ys.roa (hash: jLirKW8uoxxjWyg59lIt3L6simlxOfJjoRXDdsPT8aQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:d5:61:46:45:5a:44:1c:09:af:46:d9:37:c1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
        Validity
            Not Before: Aug 23 07:01:53 2025 GMT
            Not After : Aug 24 07:01:53 2025 GMT
        Subject: CN=bbfe6e1cac44b70621c4ae713bef8e61c3713659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9e:13:38:eb:33:75:a2:85:9c:5d:a8:6b:e3:
                    fa:6f:33:ae:d7:0f:8d:be:4d:49:3c:7a:10:01:0b:
                    e7:1d:78:78:f7:99:c5:69:f7:db:73:34:c9:7e:36:
                    72:bf:c9:a4:62:1a:a0:de:61:95:91:f0:d9:d2:7d:
                    76:e3:f7:b8:62:70:60:46:d8:c1:d0:a6:ba:c7:36:
                    df:cd:80:b8:09:0f:b7:a0:52:11:37:d7:65:58:12:
                    75:29:8d:cf:24:48:c5:e0:bb:b4:9c:6c:56:99:18:
                    44:10:10:7d:27:98:d3:14:17:02:b5:17:5d:22:a4:
                    26:1c:fe:ce:4e:43:a5:9d:63:a1:0b:b6:3d:90:22:
                    af:72:4a:f3:cd:ec:c7:f9:64:2a:50:55:3f:fc:a5:
                    af:75:1e:8b:98:10:44:c8:bc:97:75:9f:5b:db:79:
                    b3:d5:38:10:02:0c:19:23:4b:34:14:a4:7b:68:93:
                    c9:1b:56:96:c6:62:00:a1:0f:f7:48:b6:8b:d3:be:
                    5a:d3:2e:bb:3e:94:80:79:36:a2:77:4a:65:4f:ee:
                    9d:62:2f:6c:d4:5c:ef:d4:4e:f1:7f:2d:0b:15:13:
                    fa:10:cb:c7:8a:16:d8:d5:43:b5:c5:e3:85:f6:d3:
                    03:e8:f5:49:bc:46:bd:b8:28:4f:90:f6:8b:39:43:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FE:6E:1C:AC:44:B7:06:21:C4:AE:71:3B:EF:8E:61:C3:71:36:59
            X509v3 Authority Key Identifier:
                keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:11:85:36:70:cb:58:5e:c8:08:ba:bc:1b:86:75:9b:ca:4b:
         78:6a:ba:18:eb:fa:f6:e2:44:5a:73:87:0e:02:ae:5d:d5:ef:
         bf:4b:ef:30:77:f7:3f:ba:b4:47:41:77:6b:47:de:0f:5c:12:
         0a:53:5e:f6:c4:e3:f3:2b:aa:c3:fc:3f:f5:a7:cd:52:8a:b8:
         4f:66:8d:f4:bf:8d:1c:7e:ba:55:c1:03:0d:50:fc:dc:6f:0b:
         dc:0c:0c:cb:73:64:18:1c:47:4f:6f:ef:20:37:a9:59:2e:41:
         96:a9:83:ef:49:db:b6:a7:3c:d0:e0:c3:f3:cc:da:11:22:26:
         0c:a8:3a:b1:eb:e2:f4:4e:7c:e4:0d:08:f8:3a:54:65:4e:03:
         8e:2b:04:69:e7:52:dc:fe:8f:40:83:9d:95:02:ac:a8:96:7a:
         de:6e:73:ef:1f:f9:ab:c7:b1:48:0c:3a:55:35:61:52:50:7e:
         f0:7d:81:19:c8:29:7b:92:90:b8:87:6a:83:bc:30:eb:42:a6:
         fd:19:0c:8d:58:b2:91:16:89:0a:e5:2a:02:64:12:37:1d:5a:
         7d:fa:bd:d6:2c:24:f6:d4:db:68:61:28:63:d7:fd:99:99:09:
         7a:ee:f4:39:9b:f6:a7:da:67:f7:92:b5:7a:fc:0e:de:e2:53:
         b9:96:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:47 2025 by rpki-client