Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
File:                     FxnQvARM2qI0GAnQAPD8Th3ts0U.mft (raw, json)
Hash identifier:          HDJwo4fdzl34vxeUYc7bXOYVjMmWa+cOa2NGkkIf6Ww=
Subject key identifier:   61:8A:87:8A:C9:CA:25:0A:51:38:37:7C:A3:FA:B1:47:23:79:39:C8
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Certificate issuer:       /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial:       0198D697FB687386C9D15A426628378DC9BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 11:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:21 +0000
Files and hashes:         1: FxnQvARM2qI0GAnQAPD8Th3ts0U.crl (hash: Bxr04IA/L+09QmEYZzovRscHTTr3NMQSo0mlMciyE3I=)
                          2: qrHcalRy_JXYvUIS1tkkzHH6ZPM.roa (hash: B5LhQQeMhbxhyP/euiUVZeJTjZ4f803srjRMUk59y8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:97:fb:68:73:86:c9:d1:5a:42:66:28:37:8d:c9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
        Validity
            Not Before: Aug 23 11:02:21 2025 GMT
            Not After : Aug 24 11:02:21 2025 GMT
        Subject: CN=618a878ac9ca250a5138377ca3fab147237939c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:5e:bb:2b:67:a2:b4:83:ee:05:f3:e0:75:
                    a6:76:b8:e5:f8:fb:ba:16:63:15:51:24:92:33:21:
                    55:9f:2d:4a:fa:59:cf:eb:43:ba:bb:40:2b:ef:de:
                    6d:d5:f4:23:b4:f3:19:02:41:6e:63:aa:c6:d5:d5:
                    f4:09:69:7f:d3:a0:bd:69:41:81:96:6e:15:04:a6:
                    a2:a8:b4:7b:cb:36:c8:ed:24:ca:de:1d:6d:99:35:
                    4c:f3:ab:af:ef:af:65:85:30:5e:77:10:b1:40:64:
                    b1:a1:e3:45:19:ea:a3:a6:20:f7:b5:47:4c:7b:e5:
                    68:3e:f8:53:90:21:51:53:f3:0d:ee:ae:35:fd:2b:
                    f6:5c:e3:66:83:e9:ad:a1:6c:71:19:e3:ae:f2:54:
                    f0:21:70:1a:4e:15:b9:43:d1:86:61:29:d9:91:b0:
                    25:45:cb:aa:1b:56:d7:1b:0f:9c:59:35:66:c7:e3:
                    ed:7f:49:1d:73:e4:58:82:cd:73:c2:6f:a3:c5:ae:
                    86:89:29:b2:3b:c5:dd:38:ed:ae:c8:d7:67:6f:4d:
                    dc:13:75:12:88:7e:83:56:94:f5:44:56:a3:f0:bd:
                    ac:dc:6b:b6:6e:5b:80:a3:6a:bc:29:8f:de:3b:14:
                    d2:d9:08:a7:7d:50:1b:51:88:73:9d:4a:25:48:e3:
                    26:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8A:87:8A:C9:CA:25:0A:51:38:37:7C:A3:FA:B1:47:23:79:39:C8
            X509v3 Authority Key Identifier:
                keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:4a:1c:56:69:c4:e3:e7:e8:58:e0:82:a4:7a:4c:78:6a:43:
         de:ac:d0:7a:b3:51:92:51:20:2f:ed:ad:93:7a:de:9b:97:00:
         d7:49:5b:88:9d:27:ad:e2:5a:32:88:ca:92:8f:ad:f6:39:b2:
         10:e3:38:27:a6:51:c2:9d:79:5e:29:d7:2e:13:14:fc:8a:9a:
         c9:c9:86:e1:81:f8:c1:3f:81:31:08:b1:8a:25:d2:c5:2f:8f:
         48:4c:0a:3d:3b:8f:2c:ce:46:00:57:1e:fd:d3:4c:80:eb:1c:
         de:07:8d:02:8b:36:b8:15:d0:e2:9c:23:59:a1:79:76:d7:b0:
         1f:c5:4f:52:b9:be:21:eb:dd:f8:70:b8:d5:da:c3:41:79:a4:
         34:7f:7b:3e:93:2a:0e:b8:b3:49:d4:02:af:65:83:fb:0e:c5:
         0c:10:0a:bb:33:67:29:f0:e8:71:06:07:d0:7c:e9:65:7e:9f:
         84:bc:4f:36:00:e3:e3:f3:87:e3:ca:2a:4b:ef:ca:c2:4e:68:
         49:43:d6:56:11:63:ba:35:43:96:20:b9:46:d0:19:83:a9:4d:
         b3:00:b0:4d:f7:8c:0f:48:d4:b8:90:a7:58:24:4e:99:f9:4e:
         02:03:f7:b2:e3:d1:f2:ac:f9:88:7b:3e:ef:b3:9d:e4:00:2a:
         d5:40:82:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:44 2025 by rpki-client