Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
File:                     ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft (raw, json)
Hash identifier:          DesIgBs17sgDiPuvjXOx30Iz8UwQ7Umwvft6iIfD6us=
Subject key identifier:   90:CC:BD:07:F0:B2:BF:49:AB:12:7D:85:06:3D:E0:72:DD:BA:74:69
Authority key identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
Certificate issuer:       /CN=7ed77eafdb387afd17574272c9374c8180370f52
Certificate serial:       01987D1C0E0FFC87DC1EE1816C5D3042C413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
Manifest number:          D0
Signing time:             Wed 06 Aug 2025 02:00:47 +0000
Manifest this update:     Wed 06 Aug 2025 02:00:47 +0000
Manifest next update:     Thu 07 Aug 2025 02:00:47 +0000
Files and hashes:         1: ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl (hash: cg2apkf8FOF0a9vybWureZ1TN4JYVNyPx4dnmg9g0JE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:0e:0f:fc:87:dc:1e:e1:81:6c:5d:30:42:c4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed77eafdb387afd17574272c9374c8180370f52
        Validity
            Not Before: Aug  6 02:00:47 2025 GMT
            Not After : Aug  7 02:00:47 2025 GMT
        Subject: CN=90ccbd07f0b2bf49ab127d85063de072ddba7469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:20:d7:54:35:b0:a3:55:1e:43:d7:32:d8:cb:
                    64:50:1b:b7:c2:14:73:a4:ec:c5:9a:d1:fa:01:fc:
                    b7:b5:85:fc:d6:01:56:50:4a:41:6e:de:e5:37:d0:
                    0f:2a:c1:fb:0f:ac:5f:05:57:da:b4:14:e4:14:a1:
                    61:d4:01:43:97:64:78:5e:78:68:38:27:ca:57:88:
                    32:1f:d1:d0:c3:29:24:11:67:0b:53:6c:a7:04:0e:
                    58:99:7f:9b:72:c6:44:f7:04:de:e0:ea:54:e7:bb:
                    84:d4:c8:d6:fa:ba:4b:36:87:ad:c7:de:55:d8:20:
                    e7:5d:71:9d:12:b5:9d:83:ed:c4:63:49:63:82:e2:
                    4b:f5:81:0b:51:c0:0e:ad:ec:d0:bc:ae:99:a1:4e:
                    8e:f2:d6:22:93:de:4a:b3:dc:2a:68:39:b9:ea:80:
                    ea:6f:cb:dd:ba:f4:f1:e6:72:ca:26:24:7a:dc:b2:
                    3b:4d:cb:3e:3d:7a:ed:64:4f:3d:8a:60:b0:85:ca:
                    e5:25:86:d7:67:d1:ea:8c:9c:41:28:24:54:93:52:
                    1e:59:3f:01:e9:05:39:5e:d3:58:fc:fe:d1:91:ca:
                    6a:f1:a4:bc:63:41:f6:7d:62:29:91:81:2c:ae:b5:
                    aa:72:37:62:de:b5:06:ac:d2:a0:13:ce:15:eb:0a:
                    96:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CC:BD:07:F0:B2:BF:49:AB:12:7D:85:06:3D:E0:72:DD:BA:74:69
            X509v3 Authority Key Identifier:
                keyid:7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:86:f8:7a:40:61:ce:d2:e6:a2:4d:50:9a:d7:70:89:57:01:
         5f:be:ae:1b:44:f6:41:05:ba:ba:f6:cf:ed:3a:ca:3d:01:94:
         ab:f4:c6:1e:44:5d:35:9d:3d:80:59:71:48:8b:b8:51:e8:c7:
         87:0a:cb:16:38:a6:bd:a2:9c:9f:e9:a1:29:9f:a0:e1:84:94:
         e1:2e:36:a7:1e:67:d6:83:53:ce:f1:4e:88:fd:2c:01:9c:92:
         d5:55:ff:48:a9:73:3a:00:fd:21:f6:da:a6:7d:3f:9e:21:1e:
         69:3c:37:82:f8:62:ca:3d:08:13:27:ed:df:70:d1:bd:1e:0e:
         dd:25:f9:af:15:dd:cc:34:72:d3:4a:8f:de:bc:9a:ef:de:db:
         7d:e0:08:87:a1:8c:6a:bb:7b:8a:e5:40:59:f9:3a:8c:66:f2:
         2d:0c:9c:68:7e:e9:a0:38:73:75:b7:57:81:e1:1f:50:65:0f:
         17:ac:bc:03:af:15:de:25:16:27:60:5a:79:fb:b1:0e:4c:3a:
         f9:a9:f6:7b:fc:16:6c:02:6f:2a:a7:d3:19:ca:22:c1:8f:bf:
         a3:34:24:56:34:cb:bd:48:94:2a:4e:76:bd:f9:8a:62:fb:a6:
         62:7b:b9:46:27:d8:de:c3:9a:81:4e:3d:7d:c6:41:01:2b:b1:
         b7:22:83:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:00 2025 by rpki-client