Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
File:                     fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft (raw, json)
Hash identifier:          LC308x5x1UI13Y5GgKSGj/eCumfZHosRcOJj0J2G1ro=
Subject key identifier:   2D:CD:97:E4:F4:3A:79:CF:C8:29:8E:0E:9E:61:5D:0B:16:87:C6:63
Authority key identifier: 7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
Certificate issuer:       /CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Certificate serial:       0198526837F9A874A49A427BA5F626039F95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
Manifest number:          07FB
Signing time:             Mon 28 Jul 2025 19:00:18 +0000
Manifest this update:     Mon 28 Jul 2025 19:00:18 +0000
Manifest next update:     Tue 29 Jul 2025 19:00:18 +0000
Files and hashes:         1: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl (hash: r7AyaZZ4Q+kswEi5IWtNsk9rEfsdHfX1eHrPodIYidE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 19:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:68:37:f9:a8:74:a4:9a:42:7b:a5:f6:26:03:9f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
        Validity
            Not Before: Jul 28 19:00:18 2025 GMT
            Not After : Jul 29 19:00:18 2025 GMT
        Subject: CN=2dcd97e4f43a79cfc8298e0e9e615d0b1687c663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:e3:ed:a3:3b:57:be:fc:61:07:68:dd:28:
                    67:55:83:6b:b4:05:24:82:6c:89:1f:ca:8e:b6:a9:
                    b9:7f:72:16:23:3e:c3:6b:3a:10:b7:3e:61:af:a1:
                    a9:f2:24:7b:0d:d4:09:78:c4:81:8d:0f:4c:90:c8:
                    83:c8:3a:7c:82:04:78:af:7d:18:53:0d:f8:5e:24:
                    ed:3f:a3:ad:94:1a:bc:7a:dd:e5:33:0e:29:08:8e:
                    71:a8:aa:a7:51:82:a3:96:bd:60:2e:b5:91:e0:56:
                    fa:bf:69:c4:31:37:1f:b9:41:f1:ae:8b:83:4c:24:
                    0f:a2:ca:5c:0a:2c:d7:00:2f:4d:6d:31:9d:02:43:
                    e1:17:ca:f7:79:26:14:02:b8:b8:19:7b:41:85:99:
                    96:57:2f:d4:ef:b1:fa:83:21:49:bc:35:f7:2a:d3:
                    ed:62:80:81:16:a6:02:2f:26:7b:73:d3:67:17:b7:
                    80:0f:26:33:3a:10:21:9d:e7:e9:e3:f9:a6:6c:61:
                    54:2e:ed:f6:c7:3d:76:6c:33:5b:b6:11:ae:d8:bd:
                    f4:2b:80:43:10:31:8f:e5:da:7a:ab:ec:f1:ce:85:
                    9a:59:52:6f:6a:52:b4:fc:5e:4f:39:0c:e7:77:5c:
                    1e:50:e6:82:48:d4:2e:7a:8b:1f:41:80:0d:77:1c:
                    a6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CD:97:E4:F4:3A:79:CF:C8:29:8E:0E:9E:61:5D:0B:16:87:C6:63
            X509v3 Authority Key Identifier:
                keyid:7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:86:db:53:1f:57:62:2b:78:69:ae:85:2a:20:e0:8b:31:41:
         bf:4c:12:7d:95:04:f2:e8:db:40:2d:77:51:e0:3b:ea:79:06:
         1f:7a:6f:9f:0e:b2:ee:cd:12:76:4e:fa:74:5e:ad:37:8f:7b:
         23:33:7f:5d:4c:24:fc:64:07:cd:39:a2:ff:df:02:62:21:6a:
         f9:d0:ea:87:50:15:c6:34:0b:81:dc:0d:43:d0:8e:e4:af:5b:
         58:ff:2f:69:8e:ed:40:8c:33:03:c1:ea:5d:3b:47:b4:47:8d:
         9d:dc:16:ce:d6:64:a0:e2:26:8d:f8:12:35:28:04:d1:7c:29:
         49:52:94:27:9e:9e:c0:5c:07:6d:6f:65:3a:ce:9d:de:00:64:
         3a:3a:c4:9c:35:29:43:e1:92:62:fa:7c:f0:fe:63:9a:54:d7:
         39:56:8c:1d:ea:fa:85:20:0a:9b:b4:8c:08:72:a0:74:e9:34:
         f1:cb:20:74:c9:a9:6b:0c:d3:a5:25:e9:7f:72:2a:b6:51:3d:
         f8:73:7b:24:45:39:1b:50:65:53:67:42:02:56:8d:10:80:ec:
         0f:c6:be:d5:e0:c7:7a:84:e6:ec:93:92:9e:1e:a0:4b:61:cf:
         10:91:ef:77:5a:98:69:d4:3b:cf:27:3b:e7:e3:e0:5c:5e:94:
         fb:c7:7f:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSaDf5qHSkmkJ7pfYmA5+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDkzZjZjODkwNzhkY2VlZjY3YmM5YzA4MTZlOTQ3ZWMx
NWI3YWMwHhcNMjUwNzI4MTkwMDE4WhcNMjUwNzI5MTkwMDE4WjAzMTEwLwYDVQQD
EygyZGNkOTdlNGY0M2E3OWNmYzgyOThlMGU5ZTYxNWQwYjE2ODdjNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplfj7aM7V778YQdo3ShnVYNrtAUk
gmyJH8qOtqm5f3IWIz7DazoQtz5hr6Gp8iR7DdQJeMSBjQ9MkMiDyDp8ggR4r30Y
Uw34XiTtP6OtlBq8et3lMw4pCI5xqKqnUYKjlr1gLrWR4Fb6v2nEMTcfuUHxrouD
TCQPospcCizXAC9NbTGdAkPhF8r3eSYUAri4GXtBhZmWVy/U77H6gyFJvDX3KtPt
YoCBFqYCLyZ7c9NnF7eADyYzOhAhnefp4/mmbGFULu32xz12bDNbthGu2L30K4BD
EDGP5dp6q+zxzoWaWVJvalK0/F5POQznd1weUOaCSNQueosfQYANdxymkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3Nl+T0OnnPyCmODp5hXQsWh8ZjMB8GA1UdIwQY
MBaAFH0JP2yJB43O72e8nAgW6UfsFbesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFrX2JJa0hqYzd2Wjd5Y0NCYnBSLXdWdDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yYWIzNzUtNDU5OC00OWExLWE0YTQt
YzFiNTYyYzU3NzAzLzEvZlFrX2JJa0hqYzd2Wjd5Y0NCYnBSLXdWdDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yYWIzNzUtNDU5OC00OWExLWE0YTQtYzFiNTYyYzU3NzAz
LzEvZlFrX2JJa0hqYzd2Wjd5Y0NCYnBSLXdWdDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbobbUx9X
Yit4aa6FKiDgizFBv0wSfZUE8ujbQC13UeA76nkGH3pvnw6y7s0Sdk76dF6tN497
IzN/XUwk/GQHzTmi/98CYiFq+dDqh1AVxjQLgdwNQ9CO5K9bWP8vaY7tQIwzA8Hq
XTtHtEeNndwWztZkoOImjfgSNSgE0XwpSVKUJ56ewFwHbW9lOs6d3gBkOjrEnDUp
Q+GSYvp88P5jmlTXOVaMHer6hSAKm7SMCHKgdOk08csgdMmpawzTpSXpf3IqtlE9
+HN7JEU5G1BlU2dCAlaNEIDsD8a+1eDHeoTm7JOSnh6gS2HPEJHvd1qYadQ7zyc7
5+PgXF6U+8d/eA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:43:05 2025 by rpki-client