Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
File:                     FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json)
Hash identifier:          KyGaeN+FpDA+9qtIwmMoNzzKqGGcvIoBP0jU+nYYVBs=
Subject key identifier:   4F:04:4F:33:94:79:0A:05:E7:CA:89:43:AB:B1:0A:A9:F4:F7:E2:B2
Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
Certificate issuer:       /CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Certificate serial:       0198D5F1D61BA5581873C482A41EE9F8F739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 08:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:52 +0000
Files and hashes:         1: 74FiFUUCcsV_j506QvqvuUKXA1c.roa (hash: apRm/FJ7fgKknAqYO8bdqiAphQJLpxJucgrm/glKMKk=)
                          2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: PbTGguur2wSoaQ62kuFfkOLQ024Kowo9MBlkx+U44Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:d6:1b:a5:58:18:73:c4:82:a4:1e:e9:f8:f7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a
        Validity
            Not Before: Aug 23 08:00:52 2025 GMT
            Not After : Aug 24 08:00:52 2025 GMT
        Subject: CN=4f044f3394790a05e7ca8943abb10aa9f4f7e2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0f:5b:b5:de:37:6a:4d:d1:a8:95:05:fe:d2:
                    1f:65:01:f0:a7:9d:c3:af:99:1c:06:6a:c9:7c:2c:
                    da:55:26:8a:f0:b8:c8:f9:48:6a:6c:0e:aa:50:79:
                    3f:6e:c7:91:60:7b:f2:b8:6d:4d:98:d1:3c:ba:a5:
                    98:03:33:84:fb:23:48:9f:f0:37:1f:41:31:ed:95:
                    a9:f1:e3:e5:ef:3e:ec:db:dd:72:21:e4:9f:7b:2a:
                    51:d7:62:a8:1a:e8:6b:42:55:1d:09:82:ae:e4:fb:
                    de:40:9f:a1:9f:22:c3:f3:cc:98:a1:6d:9e:94:92:
                    bd:f3:61:5e:3c:03:70:3c:4d:bb:c0:e4:74:00:b6:
                    75:ef:13:3f:8c:fe:eb:56:25:23:54:e2:ec:90:24:
                    3b:45:55:48:1f:b8:44:2b:71:cd:08:43:fd:43:02:
                    64:48:a0:14:5a:5b:15:ce:80:2b:18:8f:d4:76:32:
                    73:74:69:69:bd:90:46:29:7e:59:3c:30:52:17:af:
                    e4:7f:28:f1:e1:83:42:27:8d:a5:c5:7f:5c:fb:65:
                    2f:15:5e:0e:5c:d1:98:62:1d:61:03:a3:d1:22:f4:
                    4f:be:1f:e0:89:2f:63:fe:a9:bf:83:be:8c:2d:4c:
                    8a:02:0c:18:44:bd:c7:63:f6:41:84:d8:74:26:c6:
                    64:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:04:4F:33:94:79:0A:05:E7:CA:89:43:AB:B1:0A:A9:F4:F7:E2:B2
            X509v3 Authority Key Identifier:
                keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:08:ba:4a:cb:b1:75:78:52:90:1b:92:47:7a:bb:05:c6:3f:
         84:1e:7a:1c:eb:07:b9:5d:35:b0:47:a8:3c:35:d1:59:79:92:
         e4:b2:20:59:29:94:b8:c6:8a:ae:f0:4b:f0:0b:cb:03:e5:dc:
         85:6c:15:b8:e7:58:fe:5c:4c:83:35:11:78:4f:38:fa:62:11:
         b1:74:71:b7:c6:b5:27:7a:f8:96:9b:ed:7f:ca:95:a0:85:cd:
         5f:2c:17:4f:87:bc:3e:0a:4f:28:f7:76:e2:6c:59:fe:db:2c:
         81:7d:a3:68:33:98:23:5f:aa:09:89:34:26:bf:e9:7c:a9:6b:
         98:24:c8:61:d8:c5:da:9a:19:9a:79:f1:17:bc:b5:66:c9:78:
         ac:9d:fc:63:bb:f7:3f:a2:a1:1c:b9:ea:57:96:13:29:76:51:
         85:4f:4b:08:92:da:01:b1:c3:33:b2:98:fa:23:a7:0e:26:e5:
         38:7c:f7:6a:1a:d5:e9:3d:1c:8f:c5:30:83:3e:59:7a:42:20:
         f3:09:56:8e:67:c4:d1:00:8f:95:74:9d:6d:91:49:54:f9:a5:
         aa:fb:f2:d7:2e:13:60:14:8d:f4:24:78:bd:c8:59:7d:df:4e:
         b4:0c:38:04:28:1d:1e:a5:2b:9b:94:43:65:10:4c:1b:ab:b7:
         ed:90:4c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:44:20 2025 by rpki-client