Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
File:                     10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json)
Hash identifier:          fyBHk9wgn/pW4ztiBqHQsUcelmcFMPef0Bw8m9mkJz0=
Subject key identifier:   7C:16:D7:69:A3:BA:C2:F0:AC:6F:7F:9B:73:BB:C5:80:5C:00:1A:12
Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
Certificate issuer:       /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Certificate serial:       01983FBE222C9D655490F43FE225FEDB29A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
Manifest number:          15FA
Signing time:             Fri 25 Jul 2025 04:01:21 +0000
Manifest this update:     Fri 25 Jul 2025 04:01:21 +0000
Manifest next update:     Sat 26 Jul 2025 04:01:21 +0000
Files and hashes:         1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: XT3dOD0mvLguB8EYGqiL3URiCWZJs/TxN+G+5QgYEDs=)
                          2: DIiJmhkGPOYoFSzKU5OJGHxPZv0.roa (hash: wVFQMX+v03An5N7stfoX0LOfftlraoV2nDd1HWqmadg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3f:be:22:2c:9d:65:54:90:f4:3f:e2:25:fe:db:29:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
        Validity
            Not Before: Jul 25 04:01:21 2025 GMT
            Not After : Jul 26 04:01:21 2025 GMT
        Subject: CN=7c16d769a3bac2f0ac6f7f9b73bbc5805c001a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:42:63:b5:ba:91:29:21:d9:7b:27:89:47:9b:
                    50:a2:76:9d:be:14:0c:b1:17:08:e2:0e:a6:ec:cf:
                    e3:40:06:c3:78:a5:55:e1:93:59:98:9c:7b:75:f6:
                    1f:83:14:ec:44:68:53:8c:0b:bf:34:d9:3b:c3:c9:
                    c8:44:b9:a2:ac:80:18:ff:63:0e:2a:05:e2:b5:ba:
                    b4:45:d4:95:a6:3d:f5:49:ab:80:b1:dd:e6:7d:52:
                    4d:42:b8:60:28:a2:71:c5:a9:b2:2e:c5:61:f8:89:
                    69:56:81:af:59:0b:cd:62:f8:e4:54:70:f0:7a:89:
                    98:b6:f4:aa:1c:4a:45:7b:fc:a4:fd:5c:ef:8a:7a:
                    94:a1:c6:30:30:fb:ca:ff:9d:5c:a5:e1:e7:9c:44:
                    d5:4a:57:67:d4:6f:b0:ae:fa:e3:59:b6:6d:e5:22:
                    9f:2b:7a:61:a0:22:0f:a6:05:9c:d6:02:44:0d:e7:
                    fd:43:f9:77:e2:20:41:db:95:40:64:c1:e2:f2:ee:
                    93:76:46:f8:a8:07:22:c7:ce:3e:d8:c4:85:a4:ab:
                    95:3b:6a:ee:31:83:03:80:64:01:40:b4:46:f5:f8:
                    ef:ba:7f:09:bb:4f:94:78:c3:3f:f3:de:df:be:1f:
                    8a:4a:ee:af:b5:02:56:03:9d:3a:da:af:fa:4b:90:
                    b0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:16:D7:69:A3:BA:C2:F0:AC:6F:7F:9B:73:BB:C5:80:5C:00:1A:12
            X509v3 Authority Key Identifier:
                keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2d:93:bb:15:ac:00:e6:3a:f9:9b:4d:72:ff:8e:82:73:5f:
         eb:25:e0:bc:85:17:c6:5c:68:60:5b:1f:a3:54:05:77:e9:83:
         1b:90:42:81:e5:22:83:ae:09:85:f2:e0:fc:f1:b6:ca:fd:40:
         59:4f:4f:d4:f2:64:55:03:35:e3:e3:06:d4:cf:a4:b6:87:26:
         3e:74:1b:ed:c4:d4:ed:b5:11:41:a0:4e:5f:67:53:1a:53:a3:
         62:e4:d7:47:c4:39:84:37:69:77:85:b9:31:82:43:7d:d8:0f:
         5c:3c:fa:5f:7c:c3:75:dc:c4:6f:00:a2:96:ca:59:9d:f2:d1:
         e3:f8:d7:1c:fb:1b:ce:0d:cd:3a:c4:90:9c:d6:71:15:da:58:
         f5:b9:57:77:10:1b:1a:51:da:e0:bd:f2:97:49:b4:84:1d:d2:
         b1:2a:f2:7b:67:dc:3c:06:6b:b0:5f:84:a4:b1:33:85:03:d5:
         8f:c7:0d:4a:59:13:50:27:63:8d:e8:73:9e:c4:c1:86:b6:7e:
         cd:16:92:4c:8a:c0:fa:03:61:62:70:5a:d2:7a:d6:c9:b3:ea:
         0a:d5:ed:d1:3e:34:97:91:ea:75:f2:6c:99:f2:0a:66:96:ba:
         07:1d:87:18:78:34:6a:07:d3:f4:3b:be:d0:68:13:16:16:d0:
         33:38:17:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:48:18 2025 by rpki-client