Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File:                     FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier:          U/D0Yie/xfndzyAJ8pkvQ/PZrSoRyWo5kCC4x3D8X6w=
Subject key identifier:   7E:25:3B:4F:0E:89:50:AA:94:22:19:DD:17:2B:5D:C8:1F:2C:E8:40
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer:       /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial:       019849D325D37E696A67B05B573F6C315F33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number:          0F7F
Signing time:             Sun 27 Jul 2025 03:00:31 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:31 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:31 +0000
Files and hashes:         1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: nAawfcH6Ox+JsvqBjx3Fqx8H8OAhbUaszsTWdnR9opU=)
                          2: sdQpr9vBWbo2oFyAIJwywqV94V0.roa (hash: q2Hm5+yXKjxuN/cBMa4LO9usoHIS/gexRqRStEbsYf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:25:d3:7e:69:6a:67:b0:5b:57:3f:6c:31:5f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
        Validity
            Not Before: Jul 27 03:00:31 2025 GMT
            Not After : Jul 28 03:00:31 2025 GMT
        Subject: CN=7e253b4f0e8950aa942219dd172b5dc81f2ce840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:12:72:54:9e:b1:b2:58:7a:39:73:6b:af:
                    bb:4b:72:36:44:a5:63:f9:67:12:7d:4a:68:f3:67:
                    cb:0d:37:bf:3b:00:cd:9e:0d:1a:29:18:45:83:cb:
                    a9:6c:eb:3e:fe:70:85:82:3e:72:32:29:49:ea:8e:
                    2a:77:f1:a8:6c:72:bf:eb:5d:fb:8a:5e:87:33:cc:
                    8b:d4:bd:4a:a3:f8:a9:ac:6d:78:6f:ca:58:75:e0:
                    ce:ec:fe:54:a2:fc:9e:8d:1c:b9:ba:be:09:f5:25:
                    e9:15:5f:41:42:b4:24:8d:fe:f4:99:e9:0c:63:a9:
                    39:22:f1:d4:8c:f4:55:df:cc:94:0e:84:0d:0b:33:
                    3f:43:4a:3d:48:c7:6c:48:f1:c7:0f:ad:4c:92:68:
                    17:67:59:b7:52:e8:84:7e:72:97:08:df:98:10:b4:
                    4e:c2:c4:50:1a:66:bc:a6:91:6e:0f:62:94:b0:52:
                    13:70:a1:a5:58:c0:c0:3c:87:6a:4c:7f:73:3e:66:
                    79:2b:1d:c0:f8:76:46:f4:fa:e2:9b:f9:ae:a9:4b:
                    5a:ec:68:84:34:13:a3:05:8c:10:a4:f0:37:d2:cb:
                    4e:db:29:ef:b8:8b:b3:3a:6c:06:cd:88:13:84:ba:
                    3f:cf:45:d6:24:3a:6f:2f:70:ab:7d:17:58:29:33:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:25:3B:4F:0E:89:50:AA:94:22:19:DD:17:2B:5D:C8:1F:2C:E8:40
            X509v3 Authority Key Identifier:
                keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:68:05:75:68:d9:c4:7d:70:30:9c:f6:46:0e:64:aa:e5:13:
         54:32:cf:1f:82:28:51:6d:66:f3:41:de:fb:cd:80:a8:70:ab:
         6a:7c:90:2d:19:9c:58:af:30:b5:cf:30:4b:c2:4d:4e:75:19:
         32:20:b0:f8:72:f2:01:93:a1:43:85:dc:19:9b:d6:4c:a5:d0:
         45:56:ed:3c:fa:ee:de:4e:a4:8a:0d:6c:82:bc:a1:c1:b3:9c:
         78:89:10:7e:08:65:e3:19:8c:01:f3:59:2e:28:34:e2:11:b6:
         87:a1:c6:bb:a9:6a:ca:ba:88:0c:86:0a:cd:76:f4:e8:2c:8f:
         06:d3:28:a2:41:47:05:3e:d6:54:8b:77:56:3f:5f:f2:b0:6f:
         58:fd:fe:dd:66:09:0e:a1:95:69:c3:27:c2:47:84:2a:94:ce:
         d1:6b:5a:05:bc:ff:2a:4d:4a:d8:95:15:f3:76:4d:73:13:63:
         98:50:ca:98:cd:79:4d:1d:cc:fa:7e:13:c9:1a:ab:6e:8e:bd:
         3b:f4:9f:d5:21:b6:1c:83:fa:6a:24:05:78:8e:61:42:7a:69:
         81:39:f6:9a:0a:c7:4d:ee:af:8c:cf:40:0b:d8:69:49:20:69:
         32:a5:fd:3e:25:f0:4d:48:9a:44:df:86:77:17:05:eb:24:3d:
         43:fc:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:21 2025 by rpki-client