Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File:                     Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier:          3f3pZgMzkm3qb4AV9gTOMLZJ05gGWkg08lnN8EQZ+Yk=
Subject key identifier:   68:6E:00:74:0E:6D:60:6F:00:6E:57:0A:92:89:32:29:87:69:54:95
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer:       /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial:       0198917E880C7F24AB825F8F54D99532E963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number:          146C
Signing time:             Sun 10 Aug 2025 01:00:45 +0000
Manifest this update:     Sun 10 Aug 2025 01:00:45 +0000
Manifest next update:     Mon 11 Aug 2025 01:00:45 +0000
Files and hashes:         1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: xRvp+Ydo8NWf/twqeXd+bsUSwDksmhKtwmYPRsq6Voo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:7e:88:0c:7f:24:ab:82:5f:8f:54:d9:95:32:e9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
        Validity
            Not Before: Aug 10 01:00:45 2025 GMT
            Not After : Aug 11 01:00:45 2025 GMT
        Subject: CN=686e00740e6d606f006e570a9289322987695495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:34:fe:08:d7:23:9f:5c:df:fe:6a:70:b3:74:
                    af:98:d5:51:54:df:6e:8c:99:72:38:1d:da:ff:9e:
                    70:ed:02:6f:42:c1:56:c9:e6:11:50:1a:92:c4:db:
                    d1:d6:2d:00:b8:82:94:ee:e3:c0:ae:02:14:e8:d6:
                    d0:ca:bf:38:96:1c:b3:62:98:90:24:ae:33:1d:72:
                    72:e6:bf:f2:b9:0c:89:7c:cd:21:8d:5c:9f:3a:9f:
                    db:07:8a:98:0c:20:88:93:33:13:9b:03:cd:26:52:
                    e9:ef:86:0b:99:2a:73:e2:5f:fe:c1:70:48:8c:52:
                    99:81:9f:c5:e7:a3:4c:6f:6f:24:ec:2c:85:f7:32:
                    e2:4c:e9:9e:09:42:f7:4c:c4:46:b8:1e:36:0b:e5:
                    0e:b0:84:a2:61:07:c7:c7:6d:9a:f9:35:9a:2f:eb:
                    8f:95:eb:f8:b5:89:f1:28:28:e2:2d:7f:24:ed:7b:
                    d5:6a:d7:69:62:0a:96:68:74:41:de:37:dc:04:5d:
                    ff:74:61:cd:06:e0:84:f7:a4:d1:d3:27:e1:41:b5:
                    3f:37:20:63:a4:9b:29:f3:5f:0e:da:b9:c1:43:a5:
                    02:08:a6:6d:bc:1a:66:ff:70:9f:35:50:9f:ce:f2:
                    8a:7d:17:4d:74:d0:19:d2:4d:2f:fc:53:24:9f:3c:
                    4e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6E:00:74:0E:6D:60:6F:00:6E:57:0A:92:89:32:29:87:69:54:95
            X509v3 Authority Key Identifier:
                keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:02:56:19:1e:e7:64:43:28:a8:a8:fd:a2:b1:93:17:c6:a7:
         1a:c8:03:18:ca:62:e2:d9:ef:c1:79:df:09:ee:94:02:5f:3b:
         0e:c9:3e:5f:81:33:0e:cf:f3:50:7e:14:56:5b:c1:9c:82:bc:
         4e:ce:fd:f5:ab:2c:c8:b3:36:62:94:52:5d:f4:5a:27:ef:ce:
         f8:9d:d4:e8:a1:50:9a:ab:35:10:d0:96:33:80:43:5e:07:10:
         31:9b:50:05:ea:8f:8f:d8:13:80:fe:e6:dc:83:ad:66:91:04:
         40:16:61:c7:02:e1:4e:66:9a:bd:00:1d:3a:31:83:4f:09:fd:
         e9:67:f9:c9:21:fe:63:fb:58:ec:2a:11:4c:b2:4d:ef:da:a7:
         af:10:2e:fa:5e:f2:fb:28:ea:a3:ea:88:24:d7:31:fd:f9:24:
         04:a3:b9:0f:38:3b:59:51:4e:5f:9b:7f:b4:d9:4d:e8:c3:e5:
         f3:c0:45:fd:d4:97:b9:26:9c:02:a2:7f:ed:9c:0e:11:f9:58:
         5c:2c:1b:dd:a0:fe:1e:3d:ad:8c:01:c6:ca:bd:ef:d3:f3:7a:
         df:48:55:88:24:d6:88:16:66:01:ae:18:5e:aa:d8:3c:09:de:
         a9:55:92:26:b1:d0:05:07:22:0a:1e:a9:12:89:3e:55:7b:23:
         b6:e2:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:36:31 2025 by rpki-client