Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          mVkPKqRAO73DzTSmSU1Z9BVQPJMDPj3El/cB8GSUZuE=
Subject key identifier:   02:BC:63:56:DA:DA:FD:37:D2:95:2D:8F:2D:24:60:C2:2F:6D:23:74
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       0198D4732A4F45C9C0CEFCB24E233A0A6ED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          165B
Signing time:             Sat 23 Aug 2025 01:02:53 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:53 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:53 +0000
Files and hashes:         1: 1-NN7sVbgRc7-e06UCxTChEWhBGw.roa (hash: 1nkStuI6UE5AiUo/eeuy7d+ojDXercvaN8swfpqL2XQ=)
                          2: AEVvsnRQYto226XFdaazjy3xWuo.roa (hash: Txnd+U22SzgetuoksqRrs/2RHcGormwyvmHzfxiwQko=)
                          3: FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa (hash: IUL/2jO+KiUhk4ijellQkxSdiTlMw+UUQGTK5Yg/kD0=)
                          4: Gm24Jz4FAwlPLPviHhCETg5MzmE.roa (hash: UUEH5H1Pt5nW5hTKrLZcoRUOcZCQ7CH6xwXFlcJaL+E=)
                          5: aoPilv5n5CJ_hoE4hhIg-yOODEg.roa (hash: mUjFO9yZy5mYwcYcLvHaIain98TW2y4wajIxqcvRaFw=)
                          6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: Q13mBgJhr0K2Vwkii02DrVI6f4u/YAfGR4WyxUCWlEc=)
                          7: nc5KXUWUdck8gbw7m_0IyKBWC5g.roa (hash: i0jN8KLoirBy04xz9xtOlV7fBEKQPtgwb2siK57WV1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:2a:4f:45:c9:c0:ce:fc:b2:4e:23:3a:0a:6e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: Aug 23 01:02:53 2025 GMT
            Not After : Aug 24 01:02:53 2025 GMT
        Subject: CN=02bc6356dadafd37d2952d8f2d2460c22f6d2374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:4f:35:87:71:ab:92:4e:ed:9c:81:bf:00:
                    6d:7c:38:c4:d6:8e:6d:00:29:c3:3d:6f:cf:f1:78:
                    dc:86:77:bf:54:b5:cc:8e:e3:52:71:03:4a:7a:e3:
                    4d:a6:ba:f5:c1:ae:51:d8:9a:7a:9d:15:e6:85:20:
                    1b:d9:8d:b7:26:b2:f7:d9:dd:92:f4:eb:0e:64:36:
                    c2:9e:fe:9b:72:90:c9:21:ab:90:53:90:16:56:2a:
                    1a:e4:54:1b:4a:a7:0e:28:3b:e7:7e:01:4c:c7:21:
                    11:ef:ca:6e:a1:3c:e5:d9:87:59:88:e7:17:87:1f:
                    d0:3d:ca:83:c9:4f:ff:42:ae:c3:51:63:26:47:9c:
                    e3:27:c3:25:0d:95:1d:57:6c:3e:00:5b:90:82:e7:
                    90:d9:49:ff:73:a7:08:b6:a5:5f:a0:bf:59:80:a8:
                    74:a4:98:d8:b2:dd:82:19:5c:e5:a5:7b:fd:15:0a:
                    b1:74:b5:f8:24:58:bb:dd:d0:10:fc:f5:3f:e8:1d:
                    fd:37:3d:39:54:83:14:f5:ba:71:cd:e5:8d:ba:4b:
                    a6:c1:40:91:2b:8b:64:73:e4:86:c8:49:54:9a:3c:
                    35:5e:da:80:26:59:66:99:cf:08:93:2d:82:02:62:
                    b2:f3:8c:e7:95:f2:e9:96:1d:c3:e6:e2:8e:55:1c:
                    07:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BC:63:56:DA:DA:FD:37:D2:95:2D:8F:2D:24:60:C2:2F:6D:23:74
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:dd:ef:48:e1:e9:de:19:da:27:02:ee:79:5e:00:05:9c:33:
         73:cf:d2:b7:7d:76:c1:00:60:10:f8:0a:d1:41:0a:f6:16:cf:
         a0:ce:60:fd:fe:15:6a:dc:49:1c:8f:fa:56:79:dd:40:9c:22:
         65:9f:d4:68:73:c4:d1:f3:6f:01:6c:8f:32:04:bb:e7:21:51:
         af:e1:06:d0:5a:73:ec:56:57:79:f9:d6:6f:70:c7:ae:c1:c9:
         29:b4:25:1d:48:7f:91:98:6d:7d:00:1a:62:b9:b4:9b:ef:b3:
         15:4a:8b:48:25:be:36:17:b8:a6:e5:3b:d2:e5:00:37:9d:88:
         dd:41:a1:ba:7e:7a:b9:a6:08:c3:bf:b6:6a:97:d2:08:cd:95:
         5e:06:b6:41:5f:a1:ad:6c:c9:8a:c5:ed:eb:63:23:85:89:3d:
         20:9f:eb:5c:75:c7:2e:b3:f8:55:41:64:c9:1f:82:c3:c6:c1:
         01:d1:23:ef:e3:b4:ee:26:31:48:18:76:6f:e4:7c:28:bb:9c:
         78:75:d7:e6:d2:6b:a1:40:8b:da:4f:01:3d:05:97:76:df:ad:
         59:06:fe:e7:44:51:7f:49:a4:c2:0d:c9:96:64:0c:71:8f:2b:
         65:29:da:78:a7:9e:19:6e:4c:d6:8f:08:46:90:14:14:09:58:
         9e:b3:a7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:09 2025 by rpki-client