Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File:                     _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier:          SeYB1FciK7bxfs9COACeeOAVwTS8SRN4vqIoS5p1/sg=
Subject key identifier:   B7:05:0B:5B:56:5B:9C:74:DA:E9:47:F1:C8:D2:B0:64:EA:2E:94:AE
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer:       /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial:       0198D99959B7DA0945DA575E40B7E70022C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number:          0152
Signing time:             Sun 24 Aug 2025 01:02:42 +0000
Manifest this update:     Sun 24 Aug 2025 01:02:42 +0000
Manifest next update:     Mon 25 Aug 2025 01:02:42 +0000
Files and hashes:         1: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: t/hd0UsRMUG7HeFVsY/qMcMnk3spS0SlBv5+rnj2Hcs=)
                          2: d3aJ-4s3b0XQhPZWIMC7alyfBOU.roa (hash: lUrFbjaMQOBwh3PKz+J4c1ZHgMiiHoAtuygvxP3srTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:99:59:b7:da:09:45:da:57:5e:40:b7:e7:00:22:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
        Validity
            Not Before: Aug 24 01:02:42 2025 GMT
            Not After : Aug 25 01:02:42 2025 GMT
        Subject: CN=b7050b5b565b9c74dae947f1c8d2b064ea2e94ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2a:d1:10:db:20:20:33:71:ba:94:65:f6:52:
                    40:84:48:83:a3:ae:c1:e7:66:90:d7:e7:62:82:88:
                    f5:62:5b:2b:05:dc:36:89:be:cc:65:cf:9d:32:fe:
                    bd:95:f8:ca:d7:3a:15:f5:4d:f6:4e:19:dd:06:d7:
                    e9:e6:96:e2:9c:bf:e0:8a:12:42:8b:d8:a5:e1:34:
                    eb:ed:b1:42:7e:48:37:e9:3c:17:29:d8:de:42:2f:
                    c3:06:94:26:65:df:e9:e2:78:13:43:03:8f:65:9c:
                    fd:0e:fa:e2:94:c0:65:cb:f3:fd:f1:d7:b1:df:54:
                    40:f9:d9:95:b3:26:eb:9e:2e:81:ed:73:2d:62:3a:
                    70:07:27:9b:e1:56:11:76:ab:b5:b0:3c:c2:49:29:
                    47:68:0b:e3:d0:71:72:7c:79:c6:15:a3:2c:bf:4b:
                    8e:87:4a:be:25:08:43:73:64:01:c1:8a:7d:96:92:
                    02:96:7b:f2:ee:19:ec:9f:42:ee:61:41:fa:79:af:
                    c3:8d:54:eb:35:12:27:cc:bc:74:0c:01:bf:3f:61:
                    20:ba:51:7d:89:0a:cd:8a:de:aa:63:66:6e:d9:9e:
                    29:f1:11:d2:ce:f0:27:33:90:48:1b:fa:44:b2:8b:
                    02:10:5e:ad:e8:fb:cb:96:9c:c3:a8:7b:7a:dd:74:
                    26:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:05:0B:5B:56:5B:9C:74:DA:E9:47:F1:C8:D2:B0:64:EA:2E:94:AE
            X509v3 Authority Key Identifier:
                keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:36:ab:10:b3:20:ed:4d:3e:97:72:0a:2e:f0:d5:5c:43:a2:
         3d:1a:84:41:52:1d:a3:20:8d:1d:d6:12:a4:26:8e:55:6e:e3:
         f4:b7:98:e0:ab:23:bd:37:06:2d:14:e4:0a:ed:93:dd:07:6d:
         c1:f0:29:9d:32:e1:46:7d:cf:48:8b:29:a7:2e:37:e8:15:35:
         4d:11:0d:e3:29:9d:d0:22:02:8e:41:65:19:2f:7d:30:4c:d6:
         94:00:71:c4:12:49:a2:c5:f1:b0:7b:a6:08:9e:77:0f:9e:1f:
         6e:10:84:eb:cd:27:bb:0f:61:fb:29:5f:64:e4:a2:c6:fc:96:
         52:b0:2e:ee:b1:74:56:ff:15:15:55:ba:a2:f6:2d:92:00:2a:
         14:d6:89:81:0e:cc:95:0d:a9:a0:a4:7d:e7:c2:86:e6:94:c1:
         e0:70:c5:00:ef:d3:63:e7:fb:21:90:a5:13:a6:62:a0:a6:6a:
         36:62:26:b7:55:de:bd:02:1b:75:cd:58:38:13:33:57:86:5b:
         10:4e:ab:96:13:31:26:6d:e7:72:8b:65:10:12:2b:05:34:bd:
         8b:0d:76:dd:33:8d:84:bc:26:3e:c6:f0:46:5b:2b:97:ea:68:
         b1:4d:0c:0d:0f:53:db:89:21:4c:c2:25:d5:20:74:79:69:61:
         22:69:45:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:32:32 2025 by rpki-client