Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
File:                     9qiFSCQ7bikKBtKaKzcQS3et5vw.mft (raw, json)
Hash identifier:          PSD0f9cG18R2jZCGLiRSlM1tiqZSEwA/uShMA56q5yo=
Subject key identifier:   88:C3:7E:7A:9A:6B:ED:64:93:EF:3B:1C:4F:8A:E4:ED:0B:20:B1:68
Authority key identifier: F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC
Certificate issuer:       /CN=f6a88548243b6e290a06d29a2b37104b77ade6fc
Certificate serial:       0198D4742BDFBAA9F2D449766E4452A29478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
Manifest number:          016C
Signing time:             Sat 23 Aug 2025 01:03:59 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:59 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:59 +0000
Files and hashes:         1: 9qiFSCQ7bikKBtKaKzcQS3et5vw.crl (hash: tlwvRxqCjq1z06b7gFq9W+5GxsJUFjYlL8mjoS3XFgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:2b:df:ba:a9:f2:d4:49:76:6e:44:52:a2:94:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a88548243b6e290a06d29a2b37104b77ade6fc
        Validity
            Not Before: Aug 23 01:03:59 2025 GMT
            Not After : Aug 24 01:03:59 2025 GMT
        Subject: CN=88c37e7a9a6bed6493ef3b1c4f8ae4ed0b20b168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:69:1f:a2:d6:ed:e6:cd:d2:c6:6a:64:5f:1a:
                    27:31:13:60:49:61:fb:52:b5:56:3b:63:83:b2:08:
                    c3:2c:aa:80:f0:c2:8f:db:ae:f5:d5:06:ea:3d:a5:
                    81:77:be:20:1b:b2:8c:78:96:4d:f2:e7:dc:26:eb:
                    9d:19:1a:45:f5:bd:ae:8d:83:7d:84:0a:60:2e:d4:
                    56:ae:ed:d1:6c:1a:11:f7:71:4a:d0:64:08:66:c9:
                    e3:5b:dc:80:02:e2:dd:e3:26:83:af:44:87:ed:9e:
                    68:99:d0:52:c0:c1:28:0e:aa:d2:d1:f8:aa:95:23:
                    0d:02:1e:dc:6e:27:42:6d:7f:0a:ba:02:c5:33:18:
                    51:14:2a:2d:1b:79:d2:e8:3f:1c:5d:be:1c:5a:85:
                    72:45:85:b0:f2:65:20:cd:dc:94:a7:7e:da:0a:a3:
                    68:78:ec:3b:a6:f0:8e:9a:81:87:a6:3f:2c:7a:3c:
                    38:ef:e3:a3:0e:0e:2f:02:2f:77:63:77:f3:e5:cd:
                    98:78:a3:d1:ad:4d:fa:bf:0b:95:a7:c0:4a:fb:90:
                    5e:f0:b6:c7:10:8b:52:ce:e9:e2:23:f0:9b:be:2c:
                    2c:7f:a4:da:e0:13:4f:37:74:6b:d0:49:9d:a6:3b:
                    a9:b0:d8:86:83:50:8f:cc:00:35:ae:95:60:77:08:
                    90:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C3:7E:7A:9A:6B:ED:64:93:EF:3B:1C:4F:8A:E4:ED:0B:20:B1:68
            X509v3 Authority Key Identifier:
                keyid:F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:44:10:75:96:55:b6:c4:61:cf:83:6a:b4:97:c0:b8:86:df:
         2d:ed:24:be:10:ff:d2:af:44:85:cb:90:04:61:ce:16:a8:18:
         f8:35:d4:8f:cd:b8:0c:79:b5:80:8c:7a:82:a9:ef:41:07:4d:
         d1:df:11:bb:02:a1:03:e5:b7:3b:da:b3:f3:f0:e7:4f:36:7b:
         ab:1c:d8:19:4e:6d:6f:a9:ca:df:f6:f1:58:7f:df:88:62:0f:
         f0:8b:12:6e:a3:85:37:bc:d6:81:6c:c2:99:aa:34:f8:11:eb:
         d7:d2:e1:08:48:41:47:91:e3:29:fb:08:5c:55:50:02:72:4f:
         26:82:68:dc:a5:8f:8d:b0:2a:ce:ba:9b:60:6f:86:4f:d9:7e:
         a8:d9:33:4d:f4:21:49:64:fa:ba:1c:df:f3:92:4a:b6:1b:1a:
         e0:cd:39:f0:a6:f0:95:e4:7c:29:6c:80:cb:33:0d:b4:3f:e0:
         ae:45:f4:19:45:c0:7d:fa:96:c7:80:35:c9:e0:50:04:0f:41:
         bf:1f:ae:07:b5:23:a7:a2:71:32:80:97:73:a3:f1:04:dd:60:
         3f:02:e9:47:2a:69:7d:1a:aa:d8:68:c0:60:d7:90:10:33:71:
         2a:28:1c:90:a3:39:4f:e3:af:c5:41:bc:43:c6:8e:d3:4f:97:
         2b:49:6f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:16 2025 by rpki-client