Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft
File:                     F_V0MLEEipI6idbPoqPLO_wvElg.mft (raw, json)
Hash identifier:          5zocbQvKbXoPuEUtCFcmoFcQ1N6+nYGvFkJcO72VuT0=
Subject key identifier:   79:ED:22:FE:CF:52:ED:2E:91:C1:2E:0F:E4:BE:04:E5:6D:C8:77:8A
Authority key identifier: 17:F5:74:30:B1:04:8A:92:3A:89:D6:CF:A2:A3:CB:3B:FC:2F:12:58
Certificate issuer:       /CN=17f57430b1048a923a89d6cfa2a3cb3bfc2f1258
Certificate serial:       0198CACA901AA081643C26161B889FD77674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft
Manifest number:          049C
Signing time:             Thu 21 Aug 2025 04:02:09 +0000
Manifest this update:     Thu 21 Aug 2025 04:02:09 +0000
Manifest next update:     Fri 22 Aug 2025 04:02:09 +0000
Files and hashes:         1: F_V0MLEEipI6idbPoqPLO_wvElg.crl (hash: kbm+eQtGSvHzChtPfwuyyxrKSbxqvG1dEm+RNRJwCfk=)
                          2: k4GHX5CM9ME-YpJS46totU42u_s.roa (hash: 17BXAFjVIDmItCUWC+3KOwfQrh8Ih46jiKww9JPT2jM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Aug 2025 04:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:ca:ca:90:1a:a0:81:64:3c:26:16:1b:88:9f:d7:76:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17f57430b1048a923a89d6cfa2a3cb3bfc2f1258
        Validity
            Not Before: Aug 21 04:02:09 2025 GMT
            Not After : Aug 22 04:02:09 2025 GMT
        Subject: CN=79ed22fecf52ed2e91c12e0fe4be04e56dc8778a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:ee:a3:27:b3:6e:c3:cf:6b:47:2a:fb:29:
                    23:1b:35:78:aa:a6:d7:0f:22:d7:f9:11:5e:e0:ac:
                    b7:c9:0b:06:88:2d:48:57:f7:1b:54:6f:bc:fe:f6:
                    b0:3e:50:76:c8:6c:4a:0a:42:ac:ea:d2:25:01:01:
                    48:c0:95:26:5f:e9:99:62:7b:06:22:20:a2:c4:57:
                    53:d5:fd:fb:d2:59:19:0d:a1:aa:a8:7a:37:58:79:
                    c0:c9:7a:c8:00:33:c9:77:14:4b:f6:96:42:c7:3f:
                    1b:ae:e5:a6:b7:3d:41:77:00:aa:22:b5:40:f8:62:
                    9b:47:89:f6:cd:65:7c:5b:d2:c1:93:91:bd:0c:f8:
                    d2:e3:98:d6:db:2b:36:81:89:c7:da:12:a0:db:2b:
                    73:35:b3:7b:d1:bd:f7:7a:79:57:ae:d3:45:de:7b:
                    1d:fb:28:05:53:24:3c:15:17:c3:4e:06:18:da:0d:
                    ef:d2:68:03:5e:49:53:74:b2:4d:b4:46:49:6b:4c:
                    ee:64:a8:05:11:c7:20:8a:3c:2a:b8:de:3a:d8:95:
                    64:3b:8c:6f:fa:0d:fa:d0:ad:c5:b3:5c:84:9a:79:
                    e0:a7:0f:1a:11:97:9f:42:7d:a4:ef:7a:ff:12:db:
                    fe:e9:0a:0b:ce:29:23:9b:fa:e9:e7:62:d2:79:2e:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:ED:22:FE:CF:52:ED:2E:91:C1:2E:0F:E4:BE:04:E5:6D:C8:77:8A
            X509v3 Authority Key Identifier:
                keyid:17:F5:74:30:B1:04:8A:92:3A:89:D6:CF:A2:A3:CB:3B:FC:2F:12:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:bd:86:39:17:09:78:6f:1e:fa:77:a9:86:60:06:f9:c2:1e:
         d5:0f:f9:c3:bc:bf:66:82:e5:c9:17:cb:d5:f1:da:a2:92:84:
         a8:cf:2c:d6:80:d3:f9:ed:a1:9a:12:6b:ed:d3:a9:84:08:9f:
         26:83:c0:57:40:26:28:4d:43:fc:31:95:80:6a:6b:d2:6a:1a:
         9f:55:14:3a:64:1d:f5:49:eb:0f:e6:df:a7:f1:02:d9:a0:ed:
         ae:a3:26:bc:31:27:fd:87:43:70:73:15:9c:88:40:f9:67:ab:
         7c:fb:72:e7:de:2f:39:af:13:5c:2f:fc:de:88:35:c4:16:9d:
         53:d8:16:b0:5b:7b:5c:17:83:52:b6:3d:78:bc:ae:8c:e9:6e:
         78:03:a8:a5:56:6b:4c:26:27:0b:9f:42:e7:ed:b0:ab:23:2a:
         9c:9d:a3:7d:d8:e1:80:4d:b8:da:1f:a8:b6:55:1e:d8:05:2b:
         5e:a4:fb:69:82:a1:94:fc:23:5c:a0:47:15:a5:66:34:7c:0b:
         42:ff:bf:7d:d0:c3:2b:ae:4f:54:9d:5c:09:9d:37:a8:35:ab:
         b9:c0:37:a0:5b:5f:36:ca:39:10:35:a7:ab:e8:51:92:82:f0:
         6c:6c:45:02:79:8f:67:10:31:2a:1d:c3:bc:e3:c0:28:f3:bd:
         43:31:e2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 12:47:29 2025 by rpki-client