Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
File:                     FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft (raw, json)
Hash identifier:          FLvyTSw8XXJaY2x9MS6c2M1GPC7yU8gY/gu5iYVt9ns=
Subject key identifier:   A1:AF:D4:51:B0:08:58:05:75:01:1C:90:AB:0B:60:CE:25:15:BC:B7
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Certificate issuer:       /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial:       0198D660409A7FF3FE019CB698BF8B4BFED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 10:01:28 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:28 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:28 +0000
Files and hashes:         1: FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl (hash: breInwB1O5ymc7PB1DnZtIjWJXHt/EDTlGPDxEnARXI=)
                          2: LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa (hash: ZLQQjKLBIHt19Vm7p7ixs8F7wMqUIQn9Y8DFLps+wZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:40:9a:7f:f3:fe:01:9c:b6:98:bf:8b:4b:fe:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
        Validity
            Not Before: Aug 23 10:01:28 2025 GMT
            Not After : Aug 24 10:01:28 2025 GMT
        Subject: CN=a1afd451b008580575011c90ab0b60ce2515bcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:35:cf:f1:c4:a2:d9:cc:c9:83:c4:c2:63:1c:
                    ea:a1:bd:b8:d3:a3:05:8b:74:ff:ea:2c:5d:d8:7a:
                    d2:16:31:72:2d:00:07:c0:4f:21:10:d1:04:0d:6f:
                    58:27:b8:da:47:43:26:b8:ef:35:9f:c0:ee:c3:11:
                    a7:e4:a4:75:2c:a1:f8:af:9f:05:7a:c6:87:b8:77:
                    98:db:67:bd:ea:96:34:ec:9d:39:99:44:5a:5a:9d:
                    85:b8:cd:ea:ea:a1:45:66:85:76:60:3f:09:8f:f3:
                    e8:a4:4e:4e:af:fe:6b:c4:7e:da:f7:49:41:ba:69:
                    a8:a3:0a:6a:8d:6d:3e:14:06:6f:10:95:ac:b3:88:
                    20:cc:57:f5:03:93:03:69:f8:0f:6f:e6:1c:d2:8e:
                    b6:45:9c:f4:98:d2:d6:e9:3e:9d:16:02:67:32:ce:
                    a4:f9:63:eb:ec:eb:f3:47:12:ec:d6:c7:21:72:2d:
                    d9:ec:86:4f:7a:a6:38:ed:ae:e2:44:cb:48:db:7c:
                    6b:4d:e1:f2:df:12:2a:b8:c3:da:39:61:1d:bb:44:
                    2c:a6:e4:47:66:80:b7:b0:ed:5a:d1:cb:d6:82:fa:
                    f9:d5:4b:ff:8c:4f:d0:09:9e:08:24:0a:9b:ef:94:
                    5d:c9:cf:ea:fd:8e:0a:51:0d:ef:6f:41:72:e5:75:
                    9f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AF:D4:51:B0:08:58:05:75:01:1C:90:AB:0B:60:CE:25:15:BC:B7
            X509v3 Authority Key Identifier:
                keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bd:8f:d5:41:f9:88:ef:c0:26:0f:cc:b1:0a:27:95:dd:1f:
         31:ce:fb:69:f1:03:f7:c9:22:ab:2f:a0:bb:22:86:62:fd:a4:
         a6:af:e7:f7:ae:ee:bd:67:8d:b0:62:1b:d5:cf:49:af:43:33:
         f7:e6:5c:da:d0:88:e4:45:3f:43:4f:64:85:81:6c:33:f4:fe:
         5f:03:30:68:93:fc:a4:be:cd:4c:b9:f1:8a:75:9e:6c:d8:84:
         1e:eb:b1:b5:8b:3a:a4:a8:e9:8a:f0:28:0b:57:4c:fc:9b:75:
         ff:15:74:4b:1d:49:e7:d4:f8:ba:fe:44:44:d7:f8:a7:ef:66:
         8c:28:02:df:d8:53:22:24:db:2a:e1:63:ad:16:c4:70:6a:59:
         b0:1c:1b:7b:5b:09:a4:ac:23:97:46:7c:ac:99:72:53:05:98:
         c7:75:6f:e2:ef:01:ce:92:42:88:62:b9:fb:3a:c3:cb:11:bf:
         73:96:2c:fe:7f:01:c7:4f:47:40:33:38:be:17:8c:e9:48:97:
         53:ec:81:54:e5:41:f6:f1:a5:e4:75:7f:0c:19:fc:e6:d0:c8:
         e8:b7:de:65:c9:ae:0a:14:9f:a2:9c:cf:65:fe:d3:87:44:2e:
         01:5d:df:d6:db:24:6f:04:3c:5d:db:88:ec:13:51:cd:7e:8c:
         93:a9:1a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:36:07 2025 by rpki-client