Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft
File:                     FQGDYj_BbcdMt3VGLDbTEBakCsE.mft (raw, json)
Hash identifier:          NjpMtvAwjxz3pnJWOZA0XPNd52hC+kI61q1CzyI0XVo=
Subject key identifier:   78:09:F5:08:21:03:06:30:8D:CD:B5:64:8E:5E:89:00:3C:D3:98:98
Authority key identifier: 15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1
Certificate issuer:       /CN=150183623fc16dc74cb775462c36d31016a40ac1
Certificate serial:       0198304C05DAE9B23921E31EAE89842E100F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft
Manifest number:          0EF1
Signing time:             Tue 22 Jul 2025 04:02:25 +0000
Manifest this update:     Tue 22 Jul 2025 04:02:25 +0000
Manifest next update:     Wed 23 Jul 2025 04:02:25 +0000
Files and hashes:         1: FQGDYj_BbcdMt3VGLDbTEBakCsE.crl (hash: z01VzRGBJkA6wb0Nany2RbSJNcktts3QZz6Sz4p/dD4=)
                          2: M-829mykxAsFBnvMzjRJ2az4Msk.roa (hash: HjgE9KqQQBakENsS5sf5myByB0D5zVgXxicLuU0gQik=)
                          3: eB9BFoLu8JL0Dy2yhrXWXgheQKQ.roa (hash: FsN+2Y4G/rvaX7dL6GAqq/hTsh+KJzrWsz0jO+iKnjU=)
                          4: pV07ftXW1Wln0tDiied_VI4i2rk.roa (hash: wqeU+FINExvsn79jDOgUE2HAofbRbv1RU1d3T94TItc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 04:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:30:4c:05:da:e9:b2:39:21:e3:1e:ae:89:84:2e:10:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=150183623fc16dc74cb775462c36d31016a40ac1
        Validity
            Not Before: Jul 22 04:02:25 2025 GMT
            Not After : Jul 23 04:02:25 2025 GMT
        Subject: CN=7809f508210306308dcdb5648e5e89003cd39898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:c6:13:fd:24:d8:82:0b:60:e5:50:79:14:
                    a7:7f:09:37:bb:c9:b5:73:50:9e:71:8f:c7:c2:81:
                    45:87:10:37:96:78:11:41:c1:8c:4a:92:8a:11:32:
                    fc:3a:46:96:7d:02:ca:87:56:0c:c9:44:ca:5f:67:
                    c6:1c:06:9f:d4:ae:8d:f3:24:75:8b:a8:d6:91:97:
                    dd:81:73:e1:7b:a1:89:df:fe:70:eb:83:ab:88:66:
                    6f:ca:c5:bd:a4:5c:fc:37:b9:34:2e:f5:29:c2:09:
                    36:86:07:cc:26:bf:98:3a:22:38:34:57:0b:f1:41:
                    32:1e:13:3b:7e:c1:17:4d:72:98:70:e0:cf:54:12:
                    81:80:5e:a9:eb:c3:8c:29:f2:3f:2e:89:6c:b2:59:
                    f3:b3:eb:94:1c:a9:e3:4c:fc:75:9d:48:15:73:a2:
                    1d:24:5f:ca:49:2f:f5:c5:4e:b3:fc:92:a9:ca:26:
                    91:20:15:32:af:ec:48:11:0d:eb:0f:2b:5a:68:e5:
                    05:53:5f:80:7a:5b:00:ab:03:bf:c4:16:7d:9a:b2:
                    84:45:e7:9a:2b:70:3a:a0:7a:d9:db:12:8a:9e:d9:
                    a7:a1:24:f8:3b:7c:d0:1b:59:74:f3:1a:cc:e1:f8:
                    14:bb:8a:74:0f:dd:11:97:7a:e8:96:be:78:ce:27:
                    f4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:09:F5:08:21:03:06:30:8D:CD:B5:64:8E:5E:89:00:3C:D3:98:98
            X509v3 Authority Key Identifier:
                keyid:15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:fa:23:3c:e5:30:ea:4b:fc:af:3b:70:7f:a4:3a:30:ec:ac:
         f4:75:21:f2:8e:43:ac:f4:95:83:d9:fa:b8:f6:f3:f5:99:45:
         cd:fd:45:9c:85:b1:98:10:3c:0a:2e:ab:b2:16:69:28:aa:a0:
         29:60:e1:ac:48:4f:39:31:35:0a:f0:28:19:3a:18:c8:d8:08:
         da:42:02:f9:7d:e2:e7:b4:16:13:87:0f:d0:d8:f6:ea:95:92:
         b4:16:49:b6:fe:cf:b0:6c:e0:6e:a4:0b:28:ab:d9:f7:61:f7:
         a0:fe:9b:ab:1f:d6:3d:29:e0:34:78:10:c8:a4:64:d3:9b:d7:
         d8:21:0e:bc:09:59:ac:6c:f6:21:75:1f:98:1e:e6:93:5a:21:
         dc:cd:2c:a4:bf:b0:c6:8a:18:7c:84:07:52:94:8a:f0:f1:b2:
         f2:42:9d:42:7b:e5:ad:ab:6d:1c:94:a4:f9:b8:38:8e:12:f7:
         21:89:3a:c2:2a:6f:82:94:5d:9d:b4:4f:42:de:e4:6f:e0:f1:
         00:ea:74:0d:1a:14:95:5d:d5:73:7c:a3:73:6d:f3:4a:36:55:
         78:da:c2:37:fc:d5:1d:f1:fe:2c:4f:41:c4:70:0f:73:d1:87:
         e7:a4:e0:8a:ce:e5:3f:04:3a:f7:3b:56:07:18:88:38:94:2c:
         c3:a2:29:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:48:22 2025 by rpki-client