Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File:                     FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier:          5tCnH3yt6hyqQpJ86tgVTVlNk8paH7XzmoJT4mXQfIk=
Subject key identifier:   C5:96:5E:AC:86:B4:93:39:4D:64:22:F6:05:9F:57:69:29:C6:BE:92
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer:       /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial:       0198D5BB8F4E2392401D00C6C0CE276576C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 07:01:35 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:35 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:35 +0000
Files and hashes:         1: 2A_3tfsfLBfsIjkj25Wq_P7GURU.roa (hash: 4w2SNRAXRMcEZVSqmqD0dMjfx/4HpwrZYp/R521drvc=)
                          2: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: RSgySCrxRY//+yeUmDYVxxnGNi00Ob8AJMFk4sdjqNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:8f:4e:23:92:40:1d:00:c6:c0:ce:27:65:76:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
        Validity
            Not Before: Aug 23 07:01:35 2025 GMT
            Not After : Aug 24 07:01:35 2025 GMT
        Subject: CN=c5965eac86b493394d6422f6059f576929c6be92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:73:43:bc:dd:c3:c9:dd:03:1b:a3:96:64:
                    06:d4:a9:9e:ca:cc:7e:5f:fb:0f:a6:1a:9b:40:5b:
                    b1:f2:98:d8:3b:c6:2c:33:f9:91:4f:5a:01:74:dc:
                    40:4c:a0:4a:f2:39:e6:34:ca:76:2f:4d:78:b0:cc:
                    58:26:c2:fe:30:b8:92:d0:52:6c:6a:e6:83:6a:a0:
                    6c:09:37:b7:78:0f:05:54:82:44:d1:7a:9d:f8:5d:
                    c7:79:41:e5:d0:75:83:f9:dd:53:80:a7:e9:5c:32:
                    d4:f9:67:ef:87:09:9e:be:dc:4d:64:ce:5e:dd:12:
                    fc:c8:70:4e:3e:ab:4a:05:29:84:f9:d2:02:c9:bb:
                    69:2d:b6:b5:91:92:e3:91:cd:85:c1:cf:c1:17:62:
                    18:7b:db:5e:da:56:74:28:05:1c:e2:43:f9:f8:63:
                    4b:fd:ba:99:10:f1:48:2c:3c:62:ee:ba:65:2e:85:
                    64:a5:fc:a6:14:b2:bb:4a:a9:85:fa:95:64:4d:e0:
                    82:6f:ee:bf:30:51:7e:cf:7a:c4:03:3a:7f:ff:a1:
                    2c:ca:a6:f7:4d:73:e1:d2:78:69:fa:53:fa:ca:97:
                    f9:b4:35:e5:8b:72:9e:50:be:de:28:40:8b:7e:71:
                    3e:aa:3b:b2:a3:30:f9:42:86:98:8c:00:00:2d:04:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:96:5E:AC:86:B4:93:39:4D:64:22:F6:05:9F:57:69:29:C6:BE:92
            X509v3 Authority Key Identifier:
                keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f5:b1:9f:dd:08:02:b7:06:7b:86:68:2e:d6:58:71:42:b3:
         cb:31:6b:80:b9:42:53:bf:90:64:a1:1c:76:4e:d5:8c:5b:48:
         9e:6d:28:dd:92:10:97:c2:f8:19:ed:32:25:23:41:be:f9:fe:
         c3:f7:3b:73:74:7b:22:ef:b1:a8:e7:06:d8:9e:d2:b7:2f:a5:
         f7:f3:b1:d3:b5:bb:66:7a:fa:73:62:53:bd:14:97:dc:5f:f9:
         f1:32:3c:01:61:d5:23:54:74:29:dc:77:3b:34:24:8c:88:78:
         5e:af:99:17:4c:02:e3:e6:bd:a2:d7:fe:bf:35:37:92:93:70:
         08:40:57:b9:48:2d:c1:68:71:f5:64:cd:fe:47:b3:1c:54:d3:
         18:76:53:af:a2:31:43:24:00:de:aa:f6:f7:97:dd:32:80:44:
         0d:5b:35:69:54:3d:9b:b1:58:4f:0f:1c:be:c7:d7:e8:16:34:
         93:c1:7a:04:08:33:46:51:af:8a:3d:11:82:ce:99:87:36:b1:
         4e:82:1c:bc:aa:79:71:fd:cc:1f:e8:6d:0b:5f:af:8a:38:a0:
         57:ea:f7:d4:00:ce:df:f9:fb:18:24:af:35:d8:59:a2:62:df:
         c4:c2:a3:a1:52:13:1d:89:c7:75:6f:c6:8c:1b:31:61:5a:c7:
         d4:86:64:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:24:09 2025 by rpki-client