Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
File:                     FVKrj2cfUIF_SRxB0fHqG13kbms.mft (raw, json)
Hash identifier:          iGQrdktg13kFeIYDyh2rkzi+2YoObwAfxezow273LGY=
Subject key identifier:   A7:FB:B4:49:5B:97:05:64:FB:10:83:16:EA:21:99:A0:38:5E:9F:76
Authority key identifier: 15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
Certificate issuer:       /CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Certificate serial:       01984D42DAF9444257DC668AF0EAAA9E6CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
Manifest number:          15FF
Signing time:             Sun 27 Jul 2025 19:01:23 +0000
Manifest this update:     Sun 27 Jul 2025 19:01:23 +0000
Manifest next update:     Mon 28 Jul 2025 19:01:23 +0000
Files and hashes:         1: FVKrj2cfUIF_SRxB0fHqG13kbms.crl (hash: fczWoMKZjzWHfpOwqBu8BWxTjmpPvC/GT0La4j6Zdmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4d:42:da:f9:44:42:57:dc:66:8a:f0:ea:aa:9e:6c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
        Validity
            Not Before: Jul 27 19:01:23 2025 GMT
            Not After : Jul 28 19:01:23 2025 GMT
        Subject: CN=a7fbb4495b970564fb108316ea2199a0385e9f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:a7:36:b0:ea:57:12:96:61:7b:c7:d8:24:
                    ff:99:d0:44:db:64:88:06:af:61:cd:c1:29:e7:8f:
                    26:53:1c:e2:38:ff:9a:6f:96:c3:8c:db:2c:0d:69:
                    61:ba:94:74:90:c5:c6:2c:65:18:72:0a:de:5b:ed:
                    70:df:e2:fa:2e:a5:d1:ea:eb:eb:27:1e:24:e4:b8:
                    ba:84:b7:dd:4e:fa:73:48:5b:79:b1:16:aa:be:d6:
                    9a:e9:5e:65:5d:00:b5:03:b4:c2:fc:8b:9e:f1:3b:
                    d7:76:40:2a:a5:5f:6e:f6:f6:c5:32:c4:e4:d6:6f:
                    e3:fb:b8:42:7a:0b:b4:b1:a5:99:43:a4:1f:54:88:
                    2d:ee:47:21:92:2f:2d:df:bc:c6:30:4f:54:87:a2:
                    9e:1f:53:b3:94:ce:73:18:e0:57:c5:5d:56:25:66:
                    bf:c5:68:e6:dd:33:53:dd:e2:f3:cf:dc:b5:38:21:
                    6c:91:80:34:db:2e:99:e8:b0:cc:1e:6e:67:2f:ea:
                    c7:6f:e1:ef:ae:24:d5:c4:05:09:5e:2b:54:23:dd:
                    3d:3a:27:25:02:06:1a:72:88:36:2e:d6:ef:58:82:
                    5a:14:f9:3f:11:eb:d0:0c:ce:fe:a5:35:93:51:f9:
                    84:f7:80:ca:0b:a8:b0:66:7b:08:43:b4:90:85:ee:
                    5d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FB:B4:49:5B:97:05:64:FB:10:83:16:EA:21:99:A0:38:5E:9F:76
            X509v3 Authority Key Identifier:
                keyid:15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:36:ce:d3:af:6e:86:e6:2a:12:17:03:bd:c0:66:76:fa:56:
         8c:6e:2d:d3:0a:b5:bd:38:81:cd:cd:16:a3:03:8a:67:2a:5f:
         d1:30:cf:53:9f:91:ba:91:8b:c4:90:ca:40:ad:95:df:35:f0:
         c7:58:29:a9:a3:33:ba:51:84:a3:54:6d:0e:f8:c8:a8:09:da:
         e3:d2:87:81:94:99:17:6b:7e:89:fb:39:ec:07:1f:03:ec:b5:
         18:73:5f:fd:ec:b5:b3:64:f9:60:05:aa:35:5d:ca:b0:8c:ea:
         66:79:04:34:ed:48:7c:f0:61:c4:ee:38:61:db:a1:b1:3c:ef:
         d1:20:45:3b:e7:45:58:18:ec:18:02:87:9f:26:62:eb:96:9c:
         89:93:42:ae:4f:c4:9e:93:de:06:8e:45:7f:d5:57:2a:7b:52:
         ba:33:bd:4f:f9:61:06:f2:28:80:84:01:0a:99:54:db:a6:a2:
         60:01:32:f4:3a:c1:f2:fa:46:05:75:b6:ef:25:45:1f:e2:08:
         35:7b:07:ea:87:b0:99:15:ac:78:73:ce:5d:56:0d:0d:84:8e:
         cd:a9:65:16:2a:f8:2f:6d:72:f1:5e:a5:00:74:5a:2f:c4:73:
         6e:49:54:b0:56:0f:dd:f2:03:8d:bf:7d:65:64:a1:52:63:fc:
         5c:3b:bc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:05:12 2025 by rpki-client