Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
File:                     fNFi3seCCbwDrdCBUn1Usn6E0m4.mft (raw, json)
Hash identifier:          cnzH28/Da+Zb2nL71ZeA/NDd9x77FqG22LefCFfW8ZI=
Subject key identifier:   48:FA:CA:B5:29:50:F8:8C:DF:83:78:21:D7:E0:7A:B5:55:D6:6A:9E
Authority key identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
Certificate issuer:       /CN=7cd162dec78209bc03add081527d54b27e84d26e
Certificate serial:       0198D54E54FE62ACA5A5AF649F0972EBC3B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 05:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:17 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:17 +0000
Files and hashes:         1: fNFi3seCCbwDrdCBUn1Usn6E0m4.crl (hash: bz52Kp8b6A4F9qPUdtGTEnSizq7I7J1dfdm31qkCvvE=)
                          2: p62St_0MRIeBUvHxqOmIuKO2S0g.roa (hash: V3Cr5hnF6tOsq5Vm2VEjfSqOP5RKmdhFpUZAhs7o/b4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:54:fe:62:ac:a5:a5:af:64:9f:09:72:eb:c3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd162dec78209bc03add081527d54b27e84d26e
        Validity
            Not Before: Aug 23 05:02:17 2025 GMT
            Not After : Aug 24 05:02:17 2025 GMT
        Subject: CN=48facab52950f88cdf837821d7e07ab555d66a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:64:d4:41:f8:74:73:29:e6:fe:61:de:90:63:
                    3e:1c:9b:9e:0e:9f:95:04:0b:19:30:00:da:80:33:
                    0d:99:e2:6c:84:d2:a5:2a:59:42:b5:bc:d4:80:38:
                    58:f7:f6:73:c3:37:05:49:f3:8b:ef:5c:74:a8:16:
                    1e:1c:8e:27:83:87:f8:05:6f:cc:21:e0:47:cb:82:
                    67:e8:9c:a1:e8:e3:d1:ac:34:6b:e8:92:c3:22:8f:
                    9f:46:8b:99:40:39:49:c6:0d:0c:1c:bb:a6:0f:24:
                    ae:9d:fa:06:35:67:d5:43:5d:0c:26:ac:3c:19:a8:
                    28:79:17:db:4a:b6:81:91:6f:b9:e8:eb:3b:47:e6:
                    c0:fb:76:b6:89:b5:08:a5:87:1a:49:03:aa:b5:a3:
                    2a:11:ca:e6:3b:3a:33:d5:a5:2a:98:e5:2f:6e:15:
                    1e:45:6e:21:27:c5:c6:4e:35:bf:58:bb:04:65:ef:
                    bb:39:91:51:25:b1:f7:7d:bc:eb:10:77:74:e8:30:
                    6e:77:7b:36:59:31:4b:ee:43:55:c3:ba:f2:b0:75:
                    f5:e0:23:11:2f:3b:f1:02:8d:11:0e:57:3e:2f:0d:
                    fd:ee:8e:46:6b:71:16:d3:11:da:28:5b:63:1d:d9:
                    6d:13:4e:1e:c1:10:0a:35:5f:a7:76:79:17:17:8c:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FA:CA:B5:29:50:F8:8C:DF:83:78:21:D7:E0:7A:B5:55:D6:6A:9E
            X509v3 Authority Key Identifier:
                keyid:7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:00:6f:07:3c:3a:4b:a8:f6:5a:9c:3c:a0:20:01:4a:b3:d8:
         90:1d:a8:79:ad:2e:28:28:93:b8:a9:96:33:45:66:4f:48:6e:
         18:4c:8e:db:81:7f:ea:fd:39:2e:33:09:4d:83:39:76:a3:ff:
         69:15:41:5e:60:77:ac:97:31:b2:96:3c:48:27:31:06:c6:b3:
         e0:08:c6:2b:7f:36:51:a9:0b:3d:ac:9f:09:48:f0:d5:a4:7b:
         d5:5c:92:d1:67:1a:29:85:5a:e1:3b:e9:8e:53:a4:8c:3d:7d:
         43:83:71:c3:46:00:84:38:15:45:75:ad:f2:4b:f1:09:0c:c3:
         d5:79:22:af:bc:e8:fd:55:5b:a6:41:53:55:b9:aa:f7:a9:b1:
         06:a0:98:d5:4c:64:63:bc:80:2c:35:91:89:26:2c:06:b8:51:
         1a:db:76:a1:af:23:b4:91:53:81:0b:5c:27:db:0b:9c:3b:34:
         ed:9b:fb:05:10:a0:54:51:fe:19:81:58:8b:36:70:b4:d8:96:
         7e:da:be:bf:60:cf:2e:12:d4:65:1b:d0:a5:99:f0:57:c8:ed:
         4c:45:f0:69:b2:62:a8:8e:80:4c:8d:3d:24:10:18:b3:d2:95:
         60:e0:f7:4e:60:4e:da:f7:90:b9:2c:3c:58:f9:e9:cc:6b:a1:
         18:7a:ec:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:08 2025 by rpki-client