Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File:                     FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier:          HUAX8A6vnEC1qE8MRzjFKj/IB46uB7UjEYVpcZTdm04=
Subject key identifier:   7B:D3:6E:66:56:EA:07:6D:4C:6C:06:BC:A6:48:CF:54:DD:B1:CE:28
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer:       /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial:       0197499F50CCA31E5C6523239019C7201496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number:          0DF0
Signing time:             Sat 07 Jun 2025 09:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:06 +0000
Files and hashes:         1: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: gy6NScug8TgwPBWYm+e61SG9P6nJbtUEalaHEe67Ha4=)
                          2: f0fm_m6mqyncGFPg2zPkibsoBcI.roa (hash: R5AqcJr/crlHYVpexq/9b2IVn+Dod1jCAKFqkiICDJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:50:cc:a3:1e:5c:65:23:23:90:19:c7:20:14:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
        Validity
            Not Before: Jun  7 09:01:06 2025 GMT
            Not After : Jun  8 09:01:06 2025 GMT
        Subject: CN=7bd36e6656ea076d4c6c06bca648cf54ddb1ce28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:e1:dc:c2:73:e0:1a:83:71:97:e1:e6:11:
                    d7:ca:4f:9b:58:78:74:27:07:f0:84:c5:7e:90:55:
                    db:17:25:63:78:0d:2a:57:7e:7d:9d:14:df:69:b6:
                    e4:bc:60:88:66:9b:e8:61:1b:0b:47:19:9f:84:97:
                    75:e4:43:ca:10:15:bc:e0:95:8e:fc:3a:0c:dd:e4:
                    8a:d1:1d:ef:ca:f9:18:9b:e9:64:68:5b:0c:32:80:
                    3a:75:55:ef:e6:3c:e1:f1:9c:02:7c:44:67:ee:6d:
                    eb:9d:c9:ac:3a:93:cd:dd:fb:26:e3:0b:ac:88:cc:
                    87:d0:d2:b9:eb:48:13:f8:30:68:81:ed:3f:9f:eb:
                    30:04:3f:d0:d4:ba:1e:86:54:7c:9c:8d:46:a9:39:
                    6f:ed:4a:a7:35:bf:7f:5c:8f:1f:a0:07:1a:b3:c0:
                    77:7d:8f:e5:fc:5d:db:ed:6e:5c:06:f2:61:f9:a6:
                    b8:2e:10:51:fc:e3:e6:90:31:22:70:e0:80:65:d0:
                    5c:ef:ac:63:39:4b:3d:4f:17:d0:91:d6:7c:5e:45:
                    87:a5:71:3c:a6:40:75:f2:6c:55:a7:e2:77:13:ef:
                    ab:75:a5:88:65:f5:2d:71:46:37:35:09:f9:d8:b4:
                    31:25:37:33:95:b1:6e:ba:c8:2b:85:f0:22:9f:fe:
                    20:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D3:6E:66:56:EA:07:6D:4C:6C:06:BC:A6:48:CF:54:DD:B1:CE:28
            X509v3 Authority Key Identifier:
                keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:27:41:05:ae:26:c6:90:d4:0e:cc:97:b8:b0:58:4c:fb:d1:
         5f:7d:ed:16:f9:41:30:96:51:60:90:e9:60:9a:3f:a0:05:d1:
         b6:19:fb:01:2d:b6:2f:43:88:8f:9c:09:af:d4:10:4f:b1:08:
         fd:7b:a1:4b:f7:cc:b5:08:56:6e:ac:73:c2:ad:bf:7e:1f:1e:
         b7:9c:a7:ea:d2:1f:15:24:23:a1:d1:79:fb:d1:f6:78:02:80:
         84:e9:98:c6:2a:2f:e2:b0:27:81:19:1e:ed:3a:c2:77:fe:d3:
         ef:3b:3f:b2:da:d5:27:eb:7e:0f:99:f4:6f:19:24:7a:3e:3a:
         d9:97:97:f9:ff:4b:2d:29:d7:8b:f3:05:b4:2a:d2:eb:12:7f:
         84:2d:8d:30:cb:c0:64:48:8f:14:d5:e6:4c:e9:02:12:d0:40:
         d3:dd:d9:68:d7:e5:99:68:0a:23:3a:14:ab:49:56:62:d5:94:
         13:ad:65:88:79:8e:86:04:92:98:c3:5e:f9:06:0c:2d:83:0a:
         9c:90:56:20:8f:9d:58:33:92:e0:74:1d:b3:0d:c1:18:48:28:
         f2:dc:2d:9b:e9:e8:c0:70:af:e7:3c:59:33:cc:55:30:94:af:
         fd:86:31:a2:2c:ca:05:5b:88:b5:f7:f0:bb:bb:eb:92:eb:2f:
         b3:f4:47:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:58:24 2025 by rpki-client