Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
File:                     flL6ttMgbrYKMduWxy2U_CQsCgg.mft (raw, json)
Hash identifier:          WUiIMeV0/zhCCwKlviFpG2DhqQV+XADE1Ak2CclFO0U=
Subject key identifier:   BC:2D:8F:BD:F5:D5:84:8B:3D:07:74:BC:35:D2:24:63:99:B8:D7:E5
Authority key identifier: 7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
Certificate issuer:       /CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Certificate serial:       01984A0A34D22BF23919E275CFF1FF209C76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
Manifest number:          1600
Signing time:             Sun 27 Jul 2025 04:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:39 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:39 +0000
Files and hashes:         1: flL6ttMgbrYKMduWxy2U_CQsCgg.crl (hash: /ClIKJHcKEKdU3CRYA6v0sp7fZZ2RplAK/dXxeBNZEg=)
                          2: oR70fW7uVwWXm6EKAN8uqrlQkQ4.roa (hash: 0R/vI9KhNQCuJ8a8jzLTXA2DiQsUAT+t0yjMQ7W3gak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:34:d2:2b:f2:39:19:e2:75:cf:f1:ff:20:9c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
        Validity
            Not Before: Jul 27 04:00:39 2025 GMT
            Not After : Jul 28 04:00:39 2025 GMT
        Subject: CN=bc2d8fbdf5d5848b3d0774bc35d2246399b8d7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e9:ec:bd:fe:f2:d5:46:6d:8c:bf:dc:f1:f8:
                    6e:1b:39:3b:c9:29:22:32:a0:95:20:d6:23:2b:74:
                    48:d7:79:7d:99:87:66:2e:c3:e5:5b:50:41:cd:91:
                    1c:90:a1:2a:20:23:14:de:bf:e1:af:88:9d:23:40:
                    e2:89:b0:7a:0d:1a:c1:4a:17:dd:78:e9:45:a2:f5:
                    4c:7e:a8:8a:cb:20:44:b0:60:7f:b1:b7:51:df:88:
                    bb:15:d0:67:b8:c2:6d:9d:1f:89:42:05:0d:e6:da:
                    c0:10:1e:85:b4:3f:09:ae:33:cd:89:50:d0:45:ba:
                    fc:0a:d8:2b:da:4d:a1:b5:93:3f:ad:3f:52:e7:56:
                    39:81:69:7f:0d:b2:0a:64:15:4e:ae:5d:c6:38:69:
                    bf:5f:83:f3:77:bf:dc:e8:78:09:6a:b5:1e:b1:b4:
                    7e:9b:1d:3d:2b:b5:2c:85:a1:fe:15:83:34:3b:14:
                    5c:cc:50:13:99:bf:5c:03:b3:6f:60:86:d4:8f:df:
                    42:63:63:ff:e6:11:f4:34:3d:3d:e8:ce:42:16:d2:
                    fc:0e:a6:56:84:9d:f0:e9:91:cd:45:a2:36:56:e8:
                    34:e5:70:74:05:09:10:47:6d:fa:8c:5b:8c:1f:a1:
                    47:94:72:bb:d5:38:b6:5a:e2:92:0a:0e:7d:86:11:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2D:8F:BD:F5:D5:84:8B:3D:07:74:BC:35:D2:24:63:99:B8:D7:E5
            X509v3 Authority Key Identifier:
                keyid:7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:cd:9f:2f:31:15:db:92:87:b2:a0:fe:8c:e5:c0:6a:dd:81:
         74:7b:a0:c8:16:52:b3:b8:2a:19:25:6f:bb:75:14:23:e4:a7:
         e3:86:a4:85:7e:f7:07:81:b9:6d:9f:ab:91:c4:ea:5d:51:39:
         86:cd:07:03:65:80:77:9a:db:ab:40:7a:99:fd:cc:2b:f7:2c:
         db:02:e3:25:59:19:3c:3b:62:bc:68:a6:fc:f6:78:74:17:e7:
         8d:4a:2e:5d:eb:89:23:f7:b1:59:b1:84:3a:22:e1:d9:2c:e0:
         7e:81:8f:81:29:8a:88:ac:31:83:73:48:86:a9:ef:ed:10:59:
         49:37:c2:83:f7:7e:e9:c3:cb:20:83:0d:20:56:8e:4c:53:6e:
         f1:24:24:9d:ab:f3:cd:fd:98:52:d9:f3:01:a0:ed:5c:55:07:
         c5:0a:6a:ed:62:11:c3:e0:52:2e:8b:89:79:83:09:f0:30:7d:
         05:c0:56:02:e6:11:6a:c5:72:e1:74:ef:a2:e3:d7:52:81:fe:
         e4:09:5a:de:1b:fc:5e:25:a7:dc:0c:4a:8f:e0:2c:63:05:7f:
         4d:52:54:d0:65:59:89:da:21:57:60:21:3f:0f:1d:aa:51:b4:
         9a:94:f1:33:3d:0d:15:7e:90:51:f9:f3:24:65:cc:a5:e8:9e:
         57:ea:7d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:04:32 2025 by rpki-client