Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
File:                     F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json)
Hash identifier:          AHcJ27Nu24UAChRMhNPvbG3DHDz5o2Lk5Gmk4ivgRDc=
Subject key identifier:   74:25:78:BA:87:50:B8:13:6B:E3:A5:E4:90:53:07:79:4E:15:0C:10
Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
Certificate issuer:       /CN=17e568417f59a21129fb2487f5e57bc171631f7b
Certificate serial:       0198499BF58BABD742E2B3D300A946727645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 02:00:14 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:14 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:14 +0000
Files and hashes:         1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: hlQijvXuys1uPLF4E+f81LFWQ6cj0OZJaCy7vTWKOvQ=)
                          2: MrFlnTciZWg6d5AqneKivrwpXHY.roa (hash: FLxls8UmKZo8IiJFx4AFIzBNESyxcnNxQs1Lj9129+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 02:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9b:f5:8b:ab:d7:42:e2:b3:d3:00:a9:46:72:76:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b
        Validity
            Not Before: Jul 27 02:00:14 2025 GMT
            Not After : Jul 28 02:00:14 2025 GMT
        Subject: CN=742578ba8750b8136be3a5e4905307794e150c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:7a:76:21:8c:d9:05:70:96:13:ee:d2:e3:
                    7c:3b:05:b8:d9:9e:46:86:b3:c4:25:f0:72:aa:3a:
                    79:a8:21:87:ea:8e:c8:26:00:fc:df:a9:6d:8e:6a:
                    f9:47:b4:f8:4c:80:ca:2b:43:56:63:a8:57:b3:56:
                    a7:fe:a4:6a:ea:58:a4:4b:f5:c6:f5:71:b1:27:9b:
                    c6:c0:27:59:20:87:06:95:da:4f:61:fb:36:6f:fd:
                    70:b9:9d:0d:05:d9:05:73:80:cb:05:d4:a0:4a:b2:
                    35:29:af:35:c5:a9:eb:20:c3:8e:b5:88:f0:e0:07:
                    d7:20:08:44:e6:1b:fe:38:7c:bc:1c:57:76:b1:03:
                    c7:81:d7:61:6f:be:a8:4f:0b:c8:3a:36:d3:bd:1b:
                    a9:f2:e8:6d:a4:0f:98:57:8a:e0:8e:1f:82:30:e9:
                    9f:d5:42:d2:b4:0e:17:bc:74:00:7c:22:2b:15:b8:
                    aa:97:59:ff:e1:ad:ce:bd:a0:84:78:0c:dd:ff:7c:
                    3d:eb:ed:fc:c7:08:31:b6:29:d5:88:17:6e:98:bd:
                    61:fe:93:49:6b:c2:9e:5e:c0:b8:52:e3:67:c1:5b:
                    16:63:06:50:af:96:f8:04:08:29:e1:c4:76:5e:92:
                    48:5d:c5:6d:06:59:21:f1:e7:9a:8d:72:8d:c0:0d:
                    2b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:25:78:BA:87:50:B8:13:6B:E3:A5:E4:90:53:07:79:4E:15:0C:10
            X509v3 Authority Key Identifier:
                keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:64:f4:c9:ce:7b:f7:86:93:15:da:3c:2d:ef:80:f1:8b:d4:
         a0:f6:3a:72:34:48:54:37:29:38:3e:89:65:fc:7d:aa:be:45:
         ea:13:2a:c8:f0:fc:75:af:81:ab:3b:7b:b7:5b:82:27:61:12:
         f7:63:bc:2a:39:33:fe:38:74:1b:f2:bc:20:e0:dd:5a:7f:56:
         1f:03:6f:19:24:1a:01:12:87:e1:99:1b:6b:1c:09:83:bc:4b:
         b8:35:4d:cd:6a:00:5b:54:8e:c5:6a:5c:cc:0d:9d:bf:f9:e6:
         8f:94:2b:bc:01:5b:9d:74:7c:d5:68:ee:34:01:eb:5b:dd:3c:
         38:c3:37:dc:db:f4:00:42:14:d3:f9:4b:fa:f3:43:2e:53:cb:
         28:42:b0:e0:93:f7:0a:e6:47:e7:80:be:a0:33:c2:60:53:a9:
         2f:91:27:ff:8e:a4:e8:68:d2:23:ec:11:14:3a:74:54:6b:7a:
         2b:9f:82:66:ca:8d:bf:eb:f6:57:e2:7e:2e:79:aa:d6:f1:93:
         75:b8:4c:c3:63:41:58:dc:b9:53:86:f3:44:3e:10:32:3d:d7:
         c9:23:b4:3d:b2:90:fa:0f:6d:b9:4b:6f:7d:1a:6a:36:df:03:
         39:fd:a0:6f:c5:ed:25:9e:f9:3d:9b:5d:85:2e:b6:6b:b2:33:
         d5:e1:80:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:38 2025 by rpki-client