Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
File:                     Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft (raw, json)
Hash identifier:          2RBLmaz6VnM+7T4gvIwoRgZ6mRyG89diuOZAtgi6E48=
Subject key identifier:   C0:60:AE:78:DD:63:1A:92:95:7F:CE:DF:9F:5D:BD:3B:8F:62:A4:60
Authority key identifier: 16:0C:F1:DA:AF:F1:DC:B2:76:5C:DC:4F:78:E8:70:4E:4E:2B:9A:DA
Certificate issuer:       /CN=160cf1daaff1dcb2765cdc4f78e8704e4e2b9ada
Certificate serial:       01984A0A6D3F386E36BDDDF2857F21992CF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
Manifest number:          0C94
Signing time:             Sun 27 Jul 2025 04:00:53 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:53 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:53 +0000
Files and hashes:         1: Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl (hash: qD52dQxzGExYV99rII1FGwnQNgRT0YNRfDzyymXN5k0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:6d:3f:38:6e:36:bd:dd:f2:85:7f:21:99:2c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160cf1daaff1dcb2765cdc4f78e8704e4e2b9ada
        Validity
            Not Before: Jul 27 04:00:53 2025 GMT
            Not After : Jul 28 04:00:53 2025 GMT
        Subject: CN=c060ae78dd631a92957fcedf9f5dbd3b8f62a460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:be:b7:95:82:96:6f:01:5c:cc:4a:5d:c9:cc:
                    a2:6d:d5:30:3a:6f:41:4a:86:42:b3:48:12:6c:3e:
                    bb:c2:5d:fe:f3:7e:f0:2a:0b:08:a8:28:d0:fd:51:
                    fe:58:31:d4:a2:ab:07:ab:99:64:60:24:91:4a:ad:
                    d6:d0:f5:25:9f:5d:e8:c7:67:d3:0b:da:cc:58:6d:
                    34:48:54:34:b6:12:b5:d4:98:b7:d1:14:ed:d4:97:
                    3c:e4:bf:a0:86:85:76:e0:dc:81:d4:58:b2:c3:06:
                    3a:51:e7:21:46:d5:a6:5a:08:b6:b1:3d:c4:5f:4f:
                    98:5f:2b:28:8c:42:99:e6:37:3e:89:09:51:f1:44:
                    b9:ab:d5:96:cb:90:a0:21:4d:d6:9e:dc:26:ea:f6:
                    a1:c5:b5:08:a9:1b:f9:97:08:ef:d8:9e:be:8b:24:
                    a8:d3:57:45:9c:60:18:ee:9d:c4:16:9b:6f:5e:a7:
                    1d:d4:ab:bf:44:6f:8d:2a:53:81:24:8b:5d:7e:a2:
                    03:07:0d:9a:d2:09:b5:75:a2:55:c4:f1:fc:d4:d2:
                    01:80:ce:66:79:30:08:20:d8:d4:ca:70:b1:fe:c0:
                    a5:a3:cb:c3:d2:24:18:c4:31:67:28:7c:80:41:f7:
                    04:8f:32:80:22:cd:b0:4c:5a:a5:61:c2:b5:f4:36:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:60:AE:78:DD:63:1A:92:95:7F:CE:DF:9F:5D:BD:3B:8F:62:A4:60
            X509v3 Authority Key Identifier:
                keyid:16:0C:F1:DA:AF:F1:DC:B2:76:5C:DC:4F:78:E8:70:4E:4E:2B:9A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1b:99:0e:4f:fd:7d:86:c4:25:56:35:74:bb:1b:2c:90:4f:
         fe:aa:70:05:89:ef:c7:80:b2:f4:e8:1d:65:d4:71:00:3d:b4:
         f2:62:c8:56:4c:02:62:85:24:74:1a:25:19:70:f7:2e:20:13:
         87:26:95:c3:c1:91:33:8e:2c:86:44:5b:75:b3:ac:76:98:7d:
         01:b3:cd:4e:1f:8d:58:d1:a6:45:4e:eb:2c:67:0f:c5:21:0e:
         c0:74:2b:bd:52:03:b9:27:fb:05:8a:fe:e1:97:6d:06:b4:d8:
         66:4b:c6:0d:17:0b:2d:4d:a4:07:da:95:d9:22:d0:a8:54:99:
         4c:02:ef:c0:3c:e5:55:38:29:50:dd:d6:08:cf:4e:df:6c:5b:
         02:b3:5f:32:c9:07:60:b6:12:21:74:a2:b7:ff:fc:47:16:a2:
         07:89:63:4c:fc:fb:00:8f:36:92:cc:d9:38:76:24:80:ff:58:
         bd:e9:57:46:11:35:be:48:98:89:e2:46:c2:7c:34:cc:3d:54:
         97:26:8f:23:d5:27:57:09:dd:37:cc:6f:37:4a:ab:c7:c8:52:
         60:4e:e6:a3:28:86:9c:a6:30:30:ff:4b:b3:4d:a3:3d:05:28:
         b7:77:36:06:ed:aa:70:ce:e0:18:b8:c9:4e:eb:3e:86:e3:27:
         ad:83:51:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:32:55 2025 by rpki-client