Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File:                     FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier:          1CKyDpSJoC1QwIpKgO1Y29TtdNv0JM7FBCxKmY+eYHA=
Subject key identifier:   0C:F8:64:18:83:1F:37:23:11:30:A2:FC:A7:03:85:5D:9C:B1:9A:F0
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer:       /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial:       0198D58368C21DEF6D4F420B1034FE041E10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number:          110E
Signing time:             Sat 23 Aug 2025 06:00:15 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:15 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:15 +0000
Files and hashes:         1: CpHbUv6AMr2IBRTUslkSn14mbAM.roa (hash: hbGa8sRUPNzKoKWW9t46YLOtfBF6LvE9GQwcI4qQDDE=)
                          2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: UZmUDy3ML2gSou9QdcF/ae/d9657Ep5jSdStTVOeZuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:68:c2:1d:ef:6d:4f:42:0b:10:34:fe:04:1e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
        Validity
            Not Before: Aug 23 06:00:15 2025 GMT
            Not After : Aug 24 06:00:15 2025 GMT
        Subject: CN=0cf86418831f37231130a2fca703855d9cb19af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:43:39:3a:c4:d1:79:85:8b:16:8a:15:7f:
                    9d:d6:cd:b8:b9:d5:60:1a:d8:08:9c:2b:16:4c:45:
                    68:e0:40:28:27:bf:95:e6:73:ac:90:4e:36:65:55:
                    c9:b1:c9:88:05:d8:0a:82:43:2f:81:9f:70:3f:1d:
                    63:9d:e9:05:07:2c:6a:2e:6d:ff:f4:63:d6:29:7f:
                    3b:f6:f2:be:f4:50:f3:f1:3e:74:f1:07:db:f3:6b:
                    c9:20:a0:17:71:a3:b9:b1:93:fc:6b:26:8e:e2:3d:
                    b6:11:07:f9:ad:7c:e2:94:2f:25:e1:99:29:b5:dc:
                    30:39:e9:d5:d3:5f:3a:b0:67:44:d6:58:00:4b:ba:
                    a6:30:ec:82:6e:ac:fc:9b:46:08:9c:94:a2:a0:80:
                    1a:d4:52:48:76:67:3f:09:b2:82:33:e9:35:66:ed:
                    78:bf:a4:95:fa:48:a7:d4:63:45:47:59:47:7c:7c:
                    60:4c:4d:ee:8b:ed:0c:73:b2:d4:00:7d:e5:8b:86:
                    ae:e5:15:12:3b:c1:4e:75:3d:20:50:b0:fb:39:db:
                    2f:4d:e1:29:ad:87:ba:eb:e2:ea:57:0b:31:4e:b2:
                    80:21:ed:d6:99:05:c3:e0:45:2d:fc:90:dd:48:d0:
                    c7:85:85:e8:6a:fa:8c:19:d1:d7:01:0b:e6:c7:ea:
                    e5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F8:64:18:83:1F:37:23:11:30:A2:FC:A7:03:85:5D:9C:B1:9A:F0
            X509v3 Authority Key Identifier:
                keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f6:a1:4a:3f:7b:a7:d3:ee:95:c2:fc:00:46:7e:5a:7c:0a:
         46:2d:d6:0a:9a:92:e1:3e:f3:a2:43:fd:ae:d0:ec:b0:af:1b:
         9c:76:07:e7:2f:02:ca:82:19:6c:a7:9b:64:f1:f4:9c:7a:03:
         27:57:db:69:3e:06:9e:f4:9c:c3:fd:6b:5f:c1:f9:42:9a:c4:
         dd:ab:31:f4:3e:0f:a7:b3:62:da:14:40:d2:d4:cc:5a:b4:9d:
         bf:9d:05:b8:50:6c:fa:91:b8:b1:9e:e2:b8:db:25:ee:d6:be:
         6b:93:ac:9a:92:08:e0:ad:31:38:bd:e3:87:eb:3a:d3:90:26:
         da:a7:78:36:eb:5b:eb:ff:51:83:c0:50:9e:f8:b2:c6:82:ac:
         1b:a2:a3:ee:ed:5b:d7:f3:01:2c:66:22:ec:b8:f1:5f:50:a5:
         69:f5:94:98:9c:ad:72:52:7f:a7:12:ca:80:f5:28:fd:93:ed:
         40:f0:39:19:0b:9c:38:29:e8:9e:eb:0b:1c:f0:63:56:63:65:
         1e:d1:14:fc:6d:5f:d1:47:65:55:22:f5:bb:88:68:fe:b2:55:
         9e:49:31:d2:76:fb:b6:af:81:b1:3b:e2:13:09:fd:9f:e2:c2:
         70:11:09:9a:4f:4f:67:fa:0b:e3:5f:f9:a4:48:51:c3:c0:6f:
         9b:45:89:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:36 2025 by rpki-client