Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
File:                     FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json)
Hash identifier:          MPMFC4IAoKkyek7wT++QZyfI1pMozfSYttG8HrKUwZo=
Subject key identifier:   BE:CE:7F:87:D7:E9:B6:2D:19:82:A6:C0:D5:FC:06:11:ED:4F:23:68
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Certificate issuer:       /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial:       0198D51625FB9E8B472EFF7281CC7AC844B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 04:00:55 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:55 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:55 +0000
Files and hashes:         1: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: 3I0/hDrk6Xo7rzccfNKlkw1qKwYEpNoCG/EUX6/i2dU=)
                          2: XHC_hDAqYlIYXrUHwPjCSmuap-w.roa (hash: QCdmiPzQ+fM9D3JEIMjhnM6hVdihEFRjXxcysEmoq04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:25:fb:9e:8b:47:2e:ff:72:81:cc:7a:c8:44:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
        Validity
            Not Before: Aug 23 04:00:55 2025 GMT
            Not After : Aug 24 04:00:55 2025 GMT
        Subject: CN=bece7f87d7e9b62d1982a6c0d5fc0611ed4f2368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:bb:0f:f2:20:42:64:93:ad:8c:ff:ef:5e:
                    89:ff:51:e0:06:7a:eb:0a:6c:8e:4a:41:ff:7c:2a:
                    8b:d4:e6:13:3f:5d:a5:a9:31:f2:11:a2:c3:16:52:
                    95:19:00:84:9b:ea:02:55:c2:79:94:e6:77:1e:5b:
                    74:fb:fb:84:f2:9e:0c:50:a3:76:13:8f:1a:2d:ab:
                    c8:b1:b9:a9:df:6f:b1:71:34:6e:f6:a9:2a:21:48:
                    d0:5f:6d:27:33:fe:47:a8:60:66:d0:ac:eb:80:89:
                    ac:50:a1:89:c1:94:b8:bd:7f:04:38:b1:3f:de:e1:
                    23:1f:e6:09:31:f4:50:ac:00:9b:eb:9e:58:d8:8c:
                    f6:ab:59:46:24:26:ae:15:03:da:1a:84:17:86:6a:
                    e7:a1:cc:36:1b:dd:7c:6b:02:ab:6f:c5:06:eb:2c:
                    59:ef:d4:18:9e:9d:61:aa:7b:14:03:df:c3:0e:58:
                    04:33:16:0c:13:06:26:af:ae:25:7e:32:c1:eb:fb:
                    b6:f0:8c:e5:ec:7c:c2:28:cb:0d:04:8a:7c:f6:be:
                    55:46:47:21:12:4b:f9:c1:4d:00:0f:cc:44:66:9e:
                    ba:a7:5d:0b:85:1a:57:19:74:5f:0f:2b:93:89:6d:
                    85:c6:f2:92:64:63:b6:d6:fe:56:9a:c6:96:24:cf:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CE:7F:87:D7:E9:B6:2D:19:82:A6:C0:D5:FC:06:11:ED:4F:23:68
            X509v3 Authority Key Identifier:
                keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ff:28:f4:63:7f:66:8e:7c:3c:05:ca:3e:a8:7e:c9:f1:d2:
         90:08:dc:9a:2e:10:5f:d1:5a:71:39:39:e4:8a:f0:00:9f:41:
         3c:83:cb:74:68:71:4c:20:dc:2e:d0:40:44:e7:78:64:14:9e:
         9c:d9:28:14:fe:fb:21:42:ae:6f:b9:7a:a9:99:bc:46:ba:4e:
         f7:cb:4b:07:38:d6:8e:1d:f0:ba:77:c1:8f:13:6e:cc:28:60:
         61:10:bc:ec:dd:1a:50:0f:0c:31:78:e2:40:60:bc:05:69:fb:
         8b:a0:84:57:41:a9:83:b1:f6:dc:c3:63:84:07:3c:a0:df:f6:
         1e:9e:ca:ab:d0:7c:65:ad:8d:17:82:c6:fd:72:51:4d:34:2a:
         ba:29:29:11:ae:c3:7f:0b:7e:5e:9f:2d:fd:05:0d:ff:a4:84:
         cf:0a:d5:d2:2e:32:a9:44:41:2e:1a:22:43:53:92:22:b2:02:
         58:0a:a5:c0:45:d3:c9:67:be:28:3e:a9:5f:50:c7:36:52:2c:
         36:1a:63:92:cc:35:04:f2:3e:00:f9:ee:24:25:d1:44:75:4b:
         e8:3c:13:1a:81:07:c2:1f:69:25:95:51:e3:09:12:c2:a9:26:
         bb:2d:12:85:d6:01:26:69:1b:ad:4e:19:6f:67:9a:b4:42:5a:
         16:70:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:30 2025 by rpki-client