Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
File:                     _MymLL50MyhVVIOoV-Uhhj-VO0E.mft (raw, json)
Hash identifier:          fSIT0scR581cAg5ssQA188HmphQTBqKOFIlkLH8+Qzw=
Subject key identifier:   00:70:A8:89:E0:FC:CA:D4:CC:E3:80:ED:EF:54:F3:1A:4E:3C:BF:41
Authority key identifier: FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41
Certificate issuer:       /CN=fccca62cbe743328555483a857e521863f953b41
Certificate serial:       0198D54E3F63CFFC506B1069CAABFD1A3851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 05:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:11 +0000
Files and hashes:         1: SQnsB4pgBnmpIi4TRKO7zpVO0eA.roa (hash: WWdVpcd3MWSz2a/cTGWg0pR5ff1Hobu49xdGhZEZSxE=)
                          2: _MymLL50MyhVVIOoV-Uhhj-VO0E.crl (hash: 4Kwz3/zcL1nvylfAAhLefrViEZMLBwhUcg5HnJn90Mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:3f:63:cf:fc:50:6b:10:69:ca:ab:fd:1a:38:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccca62cbe743328555483a857e521863f953b41
        Validity
            Not Before: Aug 23 05:02:11 2025 GMT
            Not After : Aug 24 05:02:11 2025 GMT
        Subject: CN=0070a889e0fccad4cce380edef54f31a4e3cbf41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:76:9b:4b:fa:c7:8f:7c:47:83:f5:fa:a3:b0:
                    6b:22:18:84:8f:12:c2:7e:33:43:c1:f4:19:45:7b:
                    d5:25:62:b3:f0:c6:4a:df:de:51:be:73:8d:7d:47:
                    09:dd:ce:6b:3b:a2:65:ef:93:74:31:23:37:1b:10:
                    bb:2e:7f:86:23:7b:d5:0e:91:ec:c8:24:41:c1:8f:
                    16:3a:c0:99:8c:d1:46:9c:26:2c:7d:79:f7:68:a1:
                    e3:04:2b:de:a5:57:1c:ed:0f:13:c9:4c:dc:f6:b9:
                    d4:0b:cc:d5:cb:78:6c:33:a4:53:bc:76:65:2e:67:
                    03:e5:e4:c1:b5:01:87:f0:d9:70:45:33:ed:a5:9c:
                    ac:d5:4c:9c:94:c2:d2:e3:57:85:6b:9f:c2:b2:28:
                    ab:fe:b2:f3:4d:6d:4a:33:6f:98:ea:0f:95:89:87:
                    c6:19:3d:f3:ce:e4:bb:ab:b8:6a:9a:4d:8c:42:55:
                    54:50:17:6e:e3:b2:5a:ac:48:c7:ef:d9:fd:37:67:
                    b7:60:f3:74:40:25:09:1a:f8:d7:e6:da:f8:00:59:
                    31:a4:92:0d:0c:8a:0b:35:4a:39:45:ef:f9:34:8c:
                    b3:a0:53:69:9f:19:a7:a5:e6:76:ef:01:96:28:c9:
                    fd:e8:65:1b:34:44:80:d0:03:c9:e7:73:6b:28:7b:
                    57:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:70:A8:89:E0:FC:CA:D4:CC:E3:80:ED:EF:54:F3:1A:4E:3C:BF:41
            X509v3 Authority Key Identifier:
                keyid:FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c2:af:92:64:97:2e:81:04:25:14:a4:10:ba:83:ac:21:bc:
         67:da:ab:a7:71:e9:43:08:0f:f9:e6:eb:77:da:5f:f7:74:fc:
         94:d9:12:40:3d:d1:06:10:d6:4b:b3:83:b4:a9:51:bc:95:4d:
         a0:eb:45:1a:3b:61:ad:18:37:fa:9e:e4:92:2b:6d:f9:0e:e7:
         32:bf:45:f0:75:08:f7:b3:da:f4:eb:89:6a:19:41:3f:14:ee:
         2d:82:12:d0:89:59:2a:50:cb:0f:08:5c:f0:17:92:aa:d9:7d:
         63:9d:0c:b6:f0:1b:fb:d8:59:a7:c3:10:5f:5a:2f:b1:4f:75:
         d3:bd:8e:22:54:db:14:bb:64:17:2b:e6:c0:6a:c0:c4:34:24:
         97:fa:3a:73:ff:43:b0:72:14:22:6a:a1:33:0d:84:48:a0:67:
         d2:68:e1:0c:18:78:f0:54:38:2f:16:42:45:44:5e:4c:72:04:
         4c:98:75:53:a8:c3:b1:a2:61:6b:39:e6:d2:03:bb:8b:3d:96:
         99:22:96:82:dc:8f:6e:d1:9d:04:ef:aa:7a:9e:4e:71:a5:b2:
         65:63:b1:ed:42:1a:1d:ee:50:b5:ab:89:82:09:0a:75:77:39:
         71:3e:d1:67:fe:b1:56:f7:9f:48:96:50:7a:07:74:d2:9f:ff:
         2e:68:be:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:21 2025 by rpki-client