Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File:                     F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier:          Mm6DUDUoUjEe+7ElG+Bydl+Dv30RiOv4v6gN9ekQ39Q=
Subject key identifier:   8D:10:4F:C0:E9:30:08:F3:A5:10:33:17:D5:8F:15:1E:24:9E:67:E2
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer:       /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial:       01987E6627F425418B3F2F78E4835ED62C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number:          14B4
Signing time:             Wed 06 Aug 2025 08:01:20 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:20 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:20 +0000
Files and hashes:         1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: bw3o/DrX6VC+NlASY5Cv2GlHA/yWXyMdfRQvieqx1yc=)
                          2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=)
                          3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:27:f4:25:41:8b:3f:2f:78:e4:83:5e:d6:2c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
        Validity
            Not Before: Aug  6 08:01:20 2025 GMT
            Not After : Aug  7 08:01:20 2025 GMT
        Subject: CN=8d104fc0e93008f3a5103317d58f151e249e67e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:95:47:1c:bc:42:58:d9:4f:6b:6f:47:e4:
                    a1:d2:3e:19:90:6c:8c:27:c0:10:b2:ec:fa:e9:99:
                    8b:f1:dc:47:c7:ba:6e:2b:10:b6:4f:fb:58:ab:53:
                    c4:66:20:15:36:fe:e4:22:bb:1d:fa:22:4c:8f:10:
                    8a:c7:93:02:d5:36:f5:88:6a:f6:5e:2d:47:8c:3d:
                    0b:8d:e7:a2:f3:84:94:73:a1:e4:ff:c9:12:e8:43:
                    f6:d5:38:da:0c:47:29:37:d3:f8:d1:ce:a2:f3:72:
                    cf:55:4d:04:c4:35:0c:39:29:90:af:64:cf:55:53:
                    47:04:25:d4:93:2a:55:30:f8:bf:91:db:da:b8:4f:
                    51:ea:f5:74:94:c4:b8:dd:a7:c2:7c:b5:32:47:71:
                    87:19:84:4a:b8:19:38:cc:b7:db:b8:44:2e:c7:78:
                    b4:3a:a4:70:85:08:0e:31:e5:e0:40:7d:7c:a7:41:
                    ec:94:c2:a0:ac:21:a8:18:c1:ed:a4:89:a9:e9:41:
                    9a:72:4b:37:d1:e4:e6:be:08:b4:65:26:04:19:56:
                    36:15:51:bd:4a:01:82:13:68:15:23:c5:d4:0f:cb:
                    24:93:0b:88:b6:38:35:2b:37:73:d0:d8:9a:16:9c:
                    29:6d:95:c9:bc:bf:0f:8c:b4:ca:91:84:03:42:80:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:10:4F:C0:E9:30:08:F3:A5:10:33:17:D5:8F:15:1E:24:9E:67:E2
            X509v3 Authority Key Identifier:
                keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:95:c0:e9:68:ef:c1:56:73:6f:4c:f2:74:6f:b1:81:90:2b:
         a6:6b:09:e0:f2:38:77:e5:19:d5:e1:55:69:c0:bc:aa:eb:ac:
         0b:08:2a:89:71:ed:92:5d:35:13:59:2f:18:8a:2b:47:de:cf:
         9d:0f:1d:12:c6:60:2c:21:83:b0:a4:fe:4a:80:23:31:fe:e9:
         fc:2a:45:ed:3a:e6:15:44:cf:ae:ee:41:91:bb:76:00:30:3c:
         77:fe:a2:2d:ca:e7:1a:13:93:7f:f2:7d:fd:f2:93:f8:b9:b1:
         ef:51:d7:96:f2:bd:2d:d2:a1:96:a4:6d:1a:cd:c7:b3:84:80:
         46:7f:44:74:9c:f8:c1:0d:22:be:8c:8e:94:95:7f:90:b2:f4:
         e5:0f:bd:1b:fb:aa:f3:0f:55:e9:bb:d3:9e:35:62:47:fb:26:
         c5:05:a7:e9:72:db:d2:69:39:d8:01:54:57:5f:9c:39:8a:f3:
         da:08:17:6a:77:78:c9:7a:aa:39:f9:54:b8:45:99:04:f8:48:
         3e:a1:3a:6a:aa:02:02:f2:6a:28:ec:d7:5a:b3:e7:e2:c4:fa:
         b1:9a:4e:f5:9c:3f:06:c1:20:b6:b0:21:e6:2c:1f:a1:5a:65:
         20:b8:67:2b:8b:b7:37:a1:f4:4d:3a:4e:2a:dc:25:08:24:24:
         20:5c:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:28:06 2025 by rpki-client