Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
File:                     F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft (raw, json)
Hash identifier:          i0CxYzZS+T+dnbJNHBdd9bhExCamxhiP5dOnL0esRoY=
Subject key identifier:   BA:FC:D9:8A:47:29:61:82:01:A1:83:74:8B:B8:2A:6B:80:56:7A:97
Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
Certificate issuer:       /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Certificate serial:       0198D515A1232FCFE46043CD9D976EE2C342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
Manifest number:          151B
Signing time:             Sat 23 Aug 2025 04:00:21 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:21 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:21 +0000
Files and hashes:         1: 1-JQsoXrJF1cL02AU4m3DYLwbUEg.roa (hash: 79cS9UiptLRApHw1SGPwVnRtKo+MdI4f+PG1mm8Q0Oo=)
                          2: F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl (hash: nFngqidnprWimH10BsmijbXm8/M/7k86HawATfwk9hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:a1:23:2f:cf:e4:60:43:cd:9d:97:6e:e2:c3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
        Validity
            Not Before: Aug 23 04:00:21 2025 GMT
            Not After : Aug 24 04:00:21 2025 GMT
        Subject: CN=bafcd98a4729618201a183748bb82a6b80567a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0c:8e:cb:ec:02:95:86:ad:c6:5d:eb:8d:f0:
                    73:e8:94:37:04:de:dc:93:6a:1d:d1:b5:dd:a0:d6:
                    33:8f:4e:4d:d0:fb:23:d3:29:6f:d0:4d:99:c5:98:
                    90:0f:7c:17:11:6b:b3:d6:f2:47:bf:0c:ee:a1:63:
                    fb:bf:12:6e:33:fd:97:06:21:36:43:c3:98:56:95:
                    4f:8b:f9:59:55:87:06:39:77:78:16:54:d4:c5:84:
                    1e:08:20:f0:e5:a8:3c:3c:e6:90:26:fa:17:60:da:
                    78:e8:e1:fe:df:60:06:7a:a5:ff:70:f8:ac:85:a1:
                    8d:14:f7:3a:6a:27:2b:d5:4c:e6:43:df:9c:50:77:
                    29:a1:b9:7a:63:13:d5:66:f2:3c:52:0e:8b:fa:95:
                    f2:7b:b7:4a:8b:d2:11:40:55:bf:5f:19:19:00:9a:
                    2e:b0:08:84:e3:03:31:27:42:ba:9d:5c:a0:aa:e1:
                    66:5b:11:e1:43:4b:84:c5:dd:9a:37:df:1b:e6:67:
                    49:79:7c:7f:c5:31:9c:a9:78:3e:52:bd:92:1c:00:
                    fe:26:e4:4e:db:4c:9b:26:0e:d3:b5:39:70:61:9a:
                    d8:0e:c5:b5:49:f7:be:0e:70:de:a9:18:80:7e:e7:
                    3c:15:02:ef:4b:21:5b:6d:a9:93:33:1e:47:f1:15:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FC:D9:8A:47:29:61:82:01:A1:83:74:8B:B8:2A:6B:80:56:7A:97
            X509v3 Authority Key Identifier:
                keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5e:c6:e2:22:7a:58:2f:33:05:61:4d:4f:16:ce:7a:48:96:
         4b:eb:12:19:07:0b:17:d2:1c:1b:89:eb:43:fe:27:6f:eb:af:
         65:ff:df:f3:29:7e:ed:b4:1b:70:87:5e:dc:ff:ab:d6:d6:98:
         83:6f:68:9a:fc:c5:fe:9a:f8:d9:81:c9:ec:e8:fa:e2:0d:d5:
         9a:39:e7:47:1a:ad:a8:d2:e0:3a:92:69:51:e8:82:13:df:dc:
         d6:4d:e3:03:6c:ad:01:c1:0e:03:f4:03:6b:ee:41:86:fc:75:
         90:7b:e6:4f:78:25:d2:21:e4:5f:3b:8a:d7:6e:82:60:66:31:
         bb:93:da:19:8f:2e:f6:df:21:00:55:f2:42:7b:12:3e:16:1b:
         81:84:d5:07:67:5a:7d:2d:5d:70:97:51:59:67:a7:0c:df:50:
         12:42:a4:82:97:3b:59:49:7b:aa:65:1d:e4:0a:d1:07:78:7f:
         53:c1:91:de:ab:2c:e4:6d:c4:4e:23:cb:07:6e:47:44:c4:02:
         ae:0e:29:87:1a:72:8c:c0:3d:51:f2:bf:f0:78:2e:a7:4b:3a:
         01:5d:23:bd:1e:54:cf:27:db:33:03:38:fd:21:cd:22:3b:89:
         f5:a6:17:43:51:a2:08:2d:39:ab:40:ed:d4:50:3c:5f:63:e2:
         da:88:9c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:31:59 2025 by rpki-client