Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File:                     FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier:          HbWndRvfrv7hZj0nKb4P7CXl27Z6O0j+IgfnGAKLtuA=
Subject key identifier:   41:B4:50:F4:D7:C6:5C:B6:78:04:63:F2:D6:A7:04:45:DF:B4:12:DF
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer:       /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial:       019886C3E76B6F9A89B3B5F64AA1D51C44DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number:          0740
Signing time:             Thu 07 Aug 2025 23:00:42 +0000
Manifest this update:     Thu 07 Aug 2025 23:00:42 +0000
Manifest next update:     Fri 08 Aug 2025 23:00:42 +0000
Files and hashes:         1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: PgBa00tS1O+EmLqEwCR3pqgGHQcQv5A5JnKuMNKWY8U=)
                          2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:86:c3:e7:6b:6f:9a:89:b3:b5:f6:4a:a1:d5:1c:44:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
        Validity
            Not Before: Aug  7 23:00:42 2025 GMT
            Not After : Aug  8 23:00:42 2025 GMT
        Subject: CN=41b450f4d7c65cb6780463f2d6a70445dfb412df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b4:77:95:72:bb:82:12:e1:9b:3c:48:b5:2c:
                    41:64:c7:39:9c:f1:23:8f:2a:e2:d5:03:56:1e:f2:
                    75:4b:17:a6:3d:ee:eb:2c:e4:66:c7:d6:c5:e8:c7:
                    3f:a6:e8:ed:44:65:2e:50:cb:75:87:2a:98:4a:8a:
                    ad:40:2d:4e:43:6f:90:34:3f:12:47:58:68:75:5f:
                    79:95:d2:24:2e:fe:8c:80:84:40:2f:07:b2:67:96:
                    4b:54:91:11:f1:fc:2a:a8:a3:cd:d7:c8:56:12:ec:
                    63:aa:d9:dd:74:d2:57:de:7b:e4:6e:3b:1c:01:ef:
                    a8:e5:3e:95:b0:fa:cc:97:f4:3c:0b:cd:2e:17:f0:
                    71:6e:37:66:67:ff:2d:fc:53:25:0a:0c:1a:4e:b2:
                    75:30:c7:3e:f9:3b:4b:f4:24:4b:e9:74:49:20:a4:
                    ef:b7:85:6d:1b:dd:77:a5:2f:03:3f:3c:62:39:b2:
                    23:ae:b3:7a:b2:68:5e:37:30:f9:84:65:5e:e8:70:
                    83:9f:5f:10:c0:f9:eb:f5:43:fd:86:cb:4c:e4:e6:
                    24:31:d5:34:4f:00:01:dc:40:25:2f:42:b8:b1:d1:
                    b3:cb:f8:ff:97:a0:0c:4b:99:5f:4f:b6:ef:8b:e9:
                    26:59:6f:0e:c6:89:aa:78:ad:72:fc:93:15:5f:cd:
                    72:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B4:50:F4:D7:C6:5C:B6:78:04:63:F2:D6:A7:04:45:DF:B4:12:DF
            X509v3 Authority Key Identifier:
                keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:86:46:43:6b:f9:3d:17:c3:a3:1f:03:97:b7:77:b9:79:bb:
         be:ba:9b:fa:4c:16:d7:ea:6d:ec:26:fe:90:68:2a:1e:8c:06:
         c3:98:79:69:68:04:b5:d2:dd:8f:92:42:72:77:38:ff:a4:8c:
         57:dc:23:56:67:9f:77:20:e5:a3:14:68:25:21:40:60:e8:c1:
         9c:1f:db:53:bf:ed:5f:19:8c:3a:a6:68:2e:0b:13:b9:13:18:
         14:d5:48:d5:51:06:47:68:64:fd:56:c7:b7:b7:5e:fa:99:30:
         ea:d2:a3:e1:8c:4e:91:c1:d3:93:f9:b6:9a:12:26:c1:32:40:
         cb:cb:9d:f4:eb:60:21:5c:45:48:7f:f4:1e:3a:79:24:6c:fe:
         e3:f4:de:cf:30:d5:ff:9c:5c:9f:05:48:4a:fb:0f:67:14:04:
         90:20:8f:20:db:9a:af:d6:1a:76:47:a2:9e:15:45:d8:fa:5a:
         f0:57:b5:07:01:99:e1:f5:d2:67:24:01:b9:76:6a:e0:29:60:
         c6:8a:6d:4b:61:18:b8:e2:c6:b1:79:a4:97:de:d4:c6:f9:27:
         58:72:0b:3f:52:54:6c:63:50:96:99:a7:cf:58:3b:1e:94:c9:
         88:3a:0a:5a:e6:fc:a9:62:a0:99:07:3f:a4:f2:3c:83:27:2e:
         46:69:7f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:36:57 2025 by rpki-client