Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
File:                     FqX_fn4arzjlmWnWCYBKOz8Fvog.mft (raw, json)
Hash identifier:          wyB3o6VioPPSPAiiIvLcQP7QygpryrkqvoVbicZqpx4=
Subject key identifier:   E1:74:2B:BE:72:BB:7C:A5:21:CC:4B:0F:0F:CD:17:06:DC:D7:7B:7F
Authority key identifier: 16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
Certificate issuer:       /CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Certificate serial:       019845F642B279110F37953335CBE19BA166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
Manifest number:          0446
Signing time:             Sat 26 Jul 2025 09:00:23 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:23 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:23 +0000
Files and hashes:         1: FqX_fn4arzjlmWnWCYBKOz8Fvog.crl (hash: /XdribyiHv7kvJXjduQa9xlC7mIdto9Z5cM+6OLESZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:42:b2:79:11:0f:37:95:33:35:cb:e1:9b:a1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
        Validity
            Not Before: Jul 26 09:00:23 2025 GMT
            Not After : Jul 27 09:00:23 2025 GMT
        Subject: CN=e1742bbe72bb7ca521cc4b0f0fcd1706dcd77b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:58:cc:1a:7c:6e:f3:90:32:d8:3e:6f:4b:
                    ab:70:ba:ca:cf:ba:51:10:55:e7:38:59:8e:8f:13:
                    94:d5:62:3e:ef:c8:61:b5:24:26:c8:a3:54:0c:e7:
                    a4:40:90:af:14:2e:99:dc:ad:78:e8:24:a2:d0:2e:
                    e1:bd:54:8f:ae:03:75:0e:73:c7:8f:6e:98:96:ae:
                    8c:dd:39:b0:84:ba:fa:51:9b:98:0d:da:9a:cf:df:
                    7d:76:eb:53:9c:ee:3b:9c:56:a3:74:a1:71:4b:53:
                    da:79:d5:a1:4c:27:26:13:6d:c7:e1:0e:6b:4e:ab:
                    0b:de:d7:a8:3f:b3:ec:b0:28:ae:e6:5d:c0:22:f9:
                    dd:f3:28:ec:c8:c2:d0:e0:b6:81:c9:88:9a:88:3e:
                    1e:6b:e3:08:3f:ef:b2:6b:85:11:6a:5e:e8:8f:6b:
                    ae:c9:1c:74:96:10:85:4f:d0:83:b5:c3:0b:bf:5a:
                    07:55:14:07:02:cb:c8:22:12:56:1e:6b:57:78:e0:
                    22:54:38:57:4a:86:fc:a0:11:7f:d6:85:e5:b2:7b:
                    2f:b3:18:5e:c2:df:47:cb:fd:f6:9a:d1:ab:95:46:
                    d2:8f:8a:f5:57:b7:01:d2:45:22:42:5b:b0:bb:43:
                    d1:c2:be:f2:8c:d3:ed:eb:5a:4d:18:0c:2c:eb:98:
                    87:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:74:2B:BE:72:BB:7C:A5:21:CC:4B:0F:0F:CD:17:06:DC:D7:7B:7F
            X509v3 Authority Key Identifier:
                keyid:16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:64:1b:f2:3a:bc:e4:95:6c:3f:4e:dd:f7:43:b9:ff:60:e6:
         c4:9d:ee:cd:cf:70:a9:e0:fd:02:4c:e9:d4:c8:9f:b0:a8:3f:
         40:91:8e:0b:25:89:36:d2:66:ad:50:2b:7e:ac:36:d3:8b:72:
         f3:2d:14:77:14:2b:dd:ca:7e:f5:11:42:2c:bf:85:00:ef:ef:
         c7:d4:e9:96:ed:1c:96:dd:df:9f:9e:24:3b:30:89:5e:9e:c7:
         46:5d:89:2c:50:b4:66:c0:7b:ec:72:7c:a7:02:6a:1a:71:62:
         d4:ca:94:9c:d4:d8:2f:a8:0c:64:34:56:b6:be:5c:60:84:75:
         ed:73:9e:ab:d7:9b:15:7d:a1:eb:11:db:d9:17:c5:bf:a2:eb:
         02:8c:78:dc:78:60:74:f6:ae:51:1f:9f:99:bd:09:86:2c:5b:
         63:77:e9:f7:bf:37:36:a4:d6:0a:21:b1:16:e3:dc:76:c1:12:
         eb:7b:f0:c0:e5:94:db:19:7c:7a:50:3e:5e:ef:a8:af:17:52:
         18:30:ff:8f:74:71:b9:73:77:b7:38:d9:ef:d6:04:99:0a:4d:
         3f:a4:98:ff:ef:30:c1:8a:b9:18:99:7b:ea:e8:bf:af:57:9b:
         f9:60:af:b6:cb:02:71:a7:a5:c5:d7:66:67:e3:ad:ce:85:d8:
         20:15:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:11:46 2025 by rpki-client