Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File:                     faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier:          X2r1zSemksO+8XgrZxMnR8Aoy1c/muyIBsbd6j22kPU=
Subject key identifier:   28:13:95:27:9B:8E:3F:9A:62:6E:5F:41:5B:7C:DE:2A:A5:53:18:5E
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer:       /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial:       0198556A2CA434746A8758E3990B07363EFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number:          133C
Signing time:             Tue 29 Jul 2025 09:01:18 +0000
Manifest this update:     Tue 29 Jul 2025 09:01:18 +0000
Manifest next update:     Wed 30 Jul 2025 09:01:18 +0000
Files and hashes:         1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: JggqCOtmptiqwDjLQQbYFRFDoGJOGzzcCjgjAOTN904=)
                          2: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (hash: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 09:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:55:6a:2c:a4:34:74:6a:87:58:e3:99:0b:07:36:3e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
        Validity
            Not Before: Jul 29 09:01:18 2025 GMT
            Not After : Jul 30 09:01:18 2025 GMT
        Subject: CN=281395279b8e3f9a626e5f415b7cde2aa553185e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:15:e2:a9:27:c3:3f:b8:b5:44:34:44:df:39:
                    13:6d:22:c9:22:45:3f:bd:61:6b:f8:df:42:81:aa:
                    5c:09:29:67:a1:16:50:ed:1d:47:64:d0:8d:15:2b:
                    04:bf:0b:3b:96:9a:05:14:4f:b1:3e:6a:f5:15:86:
                    20:72:81:1d:c6:a8:6c:75:a6:35:e3:d6:86:41:2d:
                    42:5b:53:49:23:51:21:e9:d1:cf:df:5e:59:35:d6:
                    bb:27:99:7e:05:cb:69:69:1d:1f:c2:d9:bc:58:42:
                    16:7a:36:68:af:77:bc:f7:b0:19:2e:d2:21:93:43:
                    35:29:6f:68:30:65:67:02:b4:80:25:ac:dc:5a:97:
                    7d:46:f4:a0:9e:d6:a8:ab:f1:29:b7:f1:5f:07:b4:
                    6d:bc:f2:0e:7f:e9:bb:79:76:0b:1c:b8:6b:de:bb:
                    7a:b2:84:46:58:28:4e:dd:f4:a8:b0:36:0b:fa:56:
                    ff:f4:08:59:2c:5c:de:f2:bb:a0:88:de:50:36:10:
                    04:07:01:90:00:94:fa:4b:35:b8:de:84:e2:c7:c5:
                    33:58:a3:7c:df:12:bc:5b:37:ef:36:d4:d6:29:7d:
                    4e:29:54:fe:d1:04:02:13:4b:12:ad:e2:a2:68:50:
                    bb:2a:c4:56:07:ff:87:ca:0c:d6:b7:db:e2:fb:85:
                    98:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:13:95:27:9B:8E:3F:9A:62:6E:5F:41:5B:7C:DE:2A:A5:53:18:5E
            X509v3 Authority Key Identifier:
                keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c4:55:32:14:55:e6:6d:c1:f4:e3:9e:39:e0:33:41:af:04:
         2e:02:a8:fa:c8:2c:35:ac:90:a1:de:3d:f3:29:d4:b4:64:13:
         d1:df:1f:6a:d1:2a:9a:8d:92:aa:9e:25:5b:6a:b5:6a:46:aa:
         0c:ee:fa:74:0c:95:e8:ec:8a:48:1d:da:73:3b:a2:5f:49:db:
         bb:15:98:0f:c6:e9:38:e7:d8:70:ef:ff:05:69:ea:8f:c6:7e:
         3e:58:da:48:17:eb:e5:66:3b:07:c0:b4:9a:29:fd:15:cd:2c:
         fb:c9:24:f0:55:4a:d1:b3:cf:5d:a3:7a:02:53:7c:55:e4:6b:
         c8:5e:67:ee:a2:58:52:81:b8:e1:5a:2a:20:00:9e:82:2d:ed:
         c0:54:62:6d:1a:c2:19:c4:c1:80:d4:d1:d4:20:ee:8e:6a:b1:
         29:bf:51:92:19:c0:6f:11:c7:05:2b:bc:da:49:6a:55:7d:0d:
         6b:52:23:88:e1:39:0e:75:48:82:7e:32:99:ed:47:e2:7e:3d:
         10:8b:ca:87:2c:e3:7a:f7:ec:c8:de:6c:e5:e8:ea:0a:d9:ff:
         0b:2e:fa:07:a5:5c:e1:95:ab:35:a0:30:4c:58:aa:26:ce:3a:
         c8:f3:7b:04:40:27:64:a5:3e:ca:bb:4e:72:07:f3:27:9a:50:
         5d:2b:28:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:04:14 2025 by rpki-client