Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
File:                     Fwpcah2MIGUdVj4_ELujqD344L0.mft (raw, json)
Hash identifier:          WkczCn8MCliutYn21J60SfFSeboboJRx7CjBLMDy7lM=
Subject key identifier:   79:85:B1:6C:66:8C:09:4F:1C:24:6E:25:53:29:28:70:7E:E7:56:C1
Authority key identifier: 17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
Certificate issuer:       /CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Certificate serial:       0198D472AD9268122012479E1BAE719D3723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
Manifest number:          1644
Signing time:             Sat 23 Aug 2025 01:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:21 +0000
Files and hashes:         1: Fwpcah2MIGUdVj4_ELujqD344L0.crl (hash: aAWr7+BEDbUFzc/N5ps4q6pO/2IjMT+ZWt16+aYe/Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:ad:92:68:12:20:12:47:9e:1b:ae:71:9d:37:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
        Validity
            Not Before: Aug 23 01:02:21 2025 GMT
            Not After : Aug 24 01:02:21 2025 GMT
        Subject: CN=7985b16c668c094f1c246e25532928707ee756c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:2b:36:09:9e:69:1d:90:8d:92:9e:93:b2:
                    a6:a6:be:5d:fc:2d:2a:a0:4d:4c:d1:ae:bc:b0:d4:
                    86:79:f5:80:63:31:df:64:29:e7:2d:93:47:2b:75:
                    da:5e:74:a2:13:d3:77:94:81:14:f7:be:e2:47:18:
                    1d:a3:06:6b:cf:07:16:c7:6b:2e:64:ef:94:44:4d:
                    77:f1:a6:38:55:a0:2c:a8:f3:69:66:dd:13:8c:ce:
                    86:99:ab:cd:a5:2f:1f:fb:f4:3e:da:53:60:65:88:
                    64:d5:89:94:b9:cd:6a:ad:dd:79:1b:66:64:a3:fd:
                    11:b4:85:08:3a:ff:71:42:4e:b7:01:81:7d:d6:8c:
                    9c:51:08:2e:2e:48:d4:05:ab:63:1b:b3:74:fe:95:
                    30:4d:87:c4:38:ca:bd:fa:e5:7a:2b:0d:99:cb:e1:
                    bd:5d:5b:99:5c:99:d5:eb:a0:11:58:dc:f8:2c:9c:
                    a4:81:e1:39:07:c2:6f:2c:29:b9:7b:ea:4a:6b:91:
                    99:fa:3e:01:82:c9:b6:c2:80:74:a4:2d:34:8e:98:
                    32:30:22:6c:12:97:c9:20:37:71:0d:d9:e7:40:cd:
                    08:5e:60:fa:4e:7d:ef:59:ed:48:c7:e3:e6:fd:bd:
                    d8:24:26:d2:c6:79:01:7c:33:2a:46:10:f0:d6:c9:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:85:B1:6C:66:8C:09:4F:1C:24:6E:25:53:29:28:70:7E:E7:56:C1
            X509v3 Authority Key Identifier:
                keyid:17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:6b:67:3d:69:aa:3e:bb:8d:a9:16:b3:21:8b:b1:6d:3a:77:
         2c:76:3c:c8:f2:c4:b6:4d:a7:19:99:f0:63:32:ba:68:24:8c:
         5f:fa:93:0f:a9:a8:f7:e4:87:a5:c2:28:2f:a4:7c:d4:d5:62:
         22:ad:5e:b4:26:80:37:57:39:00:f6:8b:ee:f1:cf:9d:b5:7b:
         c4:0a:8d:bf:10:ab:fa:1d:fb:70:d6:e4:7c:72:75:2d:28:25:
         49:43:f7:5a:01:55:3c:5c:2d:20:ea:37:c4:79:42:a2:b0:8f:
         8c:6c:ad:62:66:6e:91:52:fc:7c:2e:21:2f:d3:a4:35:71:23:
         e9:bf:fb:64:af:0d:4f:ff:bf:65:f5:00:48:84:55:02:a9:3b:
         13:40:92:30:f3:60:05:d9:19:98:55:72:28:8f:ce:81:4a:67:
         1a:25:68:a1:2f:a9:3e:3f:24:52:cb:54:70:25:94:44:66:7f:
         c3:b5:d7:67:29:78:72:ea:bb:03:9e:43:09:07:f0:a1:d8:82:
         f8:76:04:fd:45:e3:2c:97:c2:fe:a9:ce:4b:13:18:0d:ba:c8:
         e3:ee:e6:e4:ad:51:04:73:cc:ee:01:d3:c3:26:c3:42:cb:69:
         69:6b:9b:a1:57:51:34:00:4b:4b:06:f1:3f:33:1d:07:7d:40:
         51:83:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:25 2025 by rpki-client