Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File:                     FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier:          Ac3xlzojlZN98R2CRnLWHkoXYR7tRmPwT7qMLhP4R2M=
Subject key identifier:   51:88:FC:A5:CC:FF:DC:7E:71:F3:85:AC:A5:23:A0:90:B7:1D:78:80
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer:       /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial:       01984889301D845EBD2181C21AB533B3082A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number:          0E74
Signing time:             Sat 26 Jul 2025 21:00:06 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:06 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:06 +0000
Files and hashes:         1: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: SDLd7EWy56kmeMuGpNeUQhPiI1ZDr1aA3Jd4byRkb1U=)
                          2: f0fm_m6mqyncGFPg2zPkibsoBcI.roa (hash: R5AqcJr/crlHYVpexq/9b2IVn+Dod1jCAKFqkiICDJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:30:1d:84:5e:bd:21:81:c2:1a:b5:33:b3:08:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
        Validity
            Not Before: Jul 26 21:00:06 2025 GMT
            Not After : Jul 27 21:00:06 2025 GMT
        Subject: CN=5188fca5ccffdc7e71f385aca523a090b71d7880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:0b:5e:3f:5d:ce:d9:f8:04:6c:c6:d9:5e:
                    57:df:84:8c:9f:61:99:f6:9b:2e:46:e7:a9:5c:fe:
                    5f:33:1d:21:c3:74:70:45:71:46:3b:0a:f6:4b:3c:
                    17:53:19:eb:c0:20:7b:dc:4f:87:22:00:d5:75:fe:
                    bd:60:e4:8b:22:e2:f8:79:53:1e:69:af:68:03:60:
                    db:e9:9f:9f:20:23:84:d3:f6:85:38:cf:9f:58:41:
                    b5:f4:fd:d8:3c:60:f8:93:5d:4e:42:8f:36:4e:2a:
                    3d:ce:0c:e3:c8:89:59:a3:70:ee:cd:62:1e:fc:16:
                    91:02:da:8e:74:8d:b5:7d:3c:26:36:8e:a0:c4:ea:
                    45:3e:5e:e8:a0:5a:45:d6:c5:5f:bd:b0:49:b0:bc:
                    25:ca:c6:ed:98:d4:88:01:9a:36:e6:6b:3c:c2:0f:
                    e1:8f:ba:3f:72:a5:be:03:60:fe:c1:26:01:f4:ab:
                    ba:88:a6:c8:d8:fa:79:c5:81:88:30:3e:03:2f:b8:
                    89:d5:a6:b9:d3:c0:f3:82:3c:4c:dd:47:2e:bd:82:
                    6e:d2:17:9c:ba:be:3c:f0:7e:f1:24:42:01:db:34:
                    96:d4:98:38:6b:ee:fd:cd:14:55:4d:e1:22:6d:cc:
                    a6:39:3c:91:dc:b8:ab:2a:e5:d8:f0:de:2e:bd:af:
                    cf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:88:FC:A5:CC:FF:DC:7E:71:F3:85:AC:A5:23:A0:90:B7:1D:78:80
            X509v3 Authority Key Identifier:
                keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:79:51:53:1e:d7:9d:9f:cf:26:53:4c:80:93:3e:9d:60:1d:
         2f:c1:49:d7:b4:a1:36:99:c3:c4:2f:56:95:f1:7e:44:9f:33:
         5a:2f:3f:47:32:50:e2:70:46:df:c5:54:33:44:a3:f0:0f:0e:
         7d:ab:4d:03:27:c1:58:05:28:b4:40:ce:e2:82:ea:8a:2a:a0:
         ef:43:d9:60:c7:38:78:1a:a7:7f:13:84:f5:f2:02:04:7b:db:
         e4:24:e3:6c:ad:42:dd:db:61:63:c6:b9:2f:aa:ac:55:9b:07:
         85:68:da:88:cc:49:92:9c:fd:76:05:85:7e:8b:5a:93:94:16:
         35:5d:38:ac:d9:2b:a5:73:be:41:4b:53:08:30:60:e7:09:6f:
         e0:48:fa:62:60:6e:ee:5b:17:98:a5:8e:d4:cf:97:a2:e9:5b:
         4d:a8:6b:df:7f:55:d1:e9:4d:f8:49:55:18:21:d1:0c:03:d0:
         53:35:2e:39:85:41:a8:47:c0:94:38:cb:5f:8c:21:aa:2e:18:
         1a:68:cf:5f:ff:b3:4e:c7:73:cf:7f:af:4a:01:0d:22:d9:bb:
         ba:b5:03:a2:2b:bb:72:84:66:e4:f1:c2:d2:cf:ed:5d:92:41:
         a0:cc:02:a2:b6:a8:67:0d:20:ab:26:41:66:58:9e:6a:6b:77:
         8d:78:77:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:14:59 2025 by rpki-client