Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
File:                     FycuwT2kL1s2HxB0xnUcw1RZPn8.mft (raw, json)
Hash identifier:          k/yZ8zOqapvnMVSdHx/XWpuec7d8ZLf52o6b5yWhEOg=
Subject key identifier:   20:85:01:B2:BC:A3:19:BB:69:4F:9A:54:76:3B:78:2D:EC:35:3C:38
Authority key identifier: 17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
Certificate issuer:       /CN=17272ec13da42f5b361f1074c6751cc354593e7f
Certificate serial:       019840998D8E3F97AFD0C5C5A0F393F698E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
Manifest number:          14F3
Signing time:             Fri 25 Jul 2025 08:01:01 +0000
Manifest this update:     Fri 25 Jul 2025 08:01:01 +0000
Manifest next update:     Sat 26 Jul 2025 08:01:01 +0000
Files and hashes:         1: FycuwT2kL1s2HxB0xnUcw1RZPn8.crl (hash: ENqRtEn8yDa6d7Bn0E7KRyhu+3+/YTJwr4nubABj724=)
                          2: hni5Zm6l0tWgRkMPSWNQcz9bJXs.roa (hash: 5m+4OOvVIAL5ATC+IriCV/aH5fa2JcS0703gOVQtJWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:40:99:8d:8e:3f:97:af:d0:c5:c5:a0:f3:93:f6:98:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17272ec13da42f5b361f1074c6751cc354593e7f
        Validity
            Not Before: Jul 25 08:01:01 2025 GMT
            Not After : Jul 26 08:01:01 2025 GMT
        Subject: CN=208501b2bca319bb694f9a54763b782dec353c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:13:fa:33:5b:e1:c4:04:ef:5b:32:79:4d:
                    cd:0f:7e:82:86:5d:ef:45:7f:f6:11:08:82:54:56:
                    4c:5c:e4:0c:00:5a:1b:38:4c:25:1f:03:49:79:90:
                    da:f7:2c:f9:d4:b8:9f:6e:00:0e:91:97:ab:ca:65:
                    65:47:3c:e6:bf:c4:a0:70:46:2b:e2:1e:62:42:8c:
                    10:84:5c:5e:49:20:9a:de:b6:4f:e3:d8:18:c4:37:
                    eb:a4:44:65:b4:5a:88:ed:6d:08:97:ae:46:a4:d7:
                    c7:5c:b7:97:58:c2:fd:7e:83:6d:55:ee:86:c8:5f:
                    73:e7:c7:44:55:4b:5c:13:5b:a5:ba:88:27:c5:66:
                    e0:0f:51:f8:c1:e1:3b:5f:d9:4f:f2:98:63:fb:ac:
                    86:5d:d4:8a:f6:44:f8:a2:6e:a7:2d:a3:10:e9:42:
                    f8:6b:0c:6b:40:6d:93:a4:84:05:bb:99:d4:74:fd:
                    4e:39:89:c8:85:bd:3e:cc:13:7f:12:2f:22:15:9b:
                    41:76:20:c6:7b:e5:35:fb:8d:29:23:28:f8:e5:e9:
                    34:4b:ca:97:5b:f5:1a:eb:e9:e8:89:c2:5a:9f:0e:
                    1c:00:95:73:8a:1c:a9:43:a4:dc:20:7d:8e:91:2f:
                    ad:f4:86:e2:45:6f:85:87:ee:c8:f5:24:e9:01:82:
                    34:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:85:01:B2:BC:A3:19:BB:69:4F:9A:54:76:3B:78:2D:EC:35:3C:38
            X509v3 Authority Key Identifier:
                keyid:17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c0:f0:67:c7:7f:ae:1f:ea:25:30:77:96:c0:b4:e9:a1:b7:
         22:f1:04:ed:4b:5d:88:9f:3f:fe:20:c4:f3:1e:f5:1f:dc:67:
         98:29:c5:81:4f:6a:3e:db:70:51:74:99:77:ae:ab:d0:fa:1f:
         89:fa:2d:9a:79:1e:e0:26:30:37:b0:f8:48:15:28:a8:ca:bc:
         d2:91:e9:f3:27:be:73:fe:d2:fe:a7:4b:75:18:8e:e2:65:1b:
         32:5b:5f:00:b5:a0:6d:b9:30:88:15:87:44:20:a6:3d:90:78:
         c0:8e:7a:50:01:8a:b9:3f:ac:7f:29:b1:12:02:5d:31:c3:74:
         7a:ef:8b:58:4d:e5:e4:05:ab:8c:68:78:5d:03:9d:63:0e:ae:
         7b:48:c9:0a:9e:d3:6a:83:6b:cd:22:81:af:fb:be:0b:5b:c9:
         87:73:26:3a:92:80:5d:d1:10:31:61:9e:a2:f2:f4:df:0f:0c:
         0f:6a:74:d6:f9:8d:33:12:05:b5:6b:e4:3b:44:a6:01:0a:4a:
         a7:aa:d2:e2:3c:29:27:8d:9b:cf:1b:f6:fb:9a:5a:cf:8d:00:
         68:28:ee:f8:69:f9:36:38:fb:44:f9:64:14:25:e8:be:01:34:
         62:53:38:ee:bb:8a:68:97:b1:26:44:ef:a1:eb:ef:61:ec:5a:
         db:e3:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:57:24 2025 by rpki-client