Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File:                     FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier:          nTDvRkwxeZJsk8Hwwyx5brc7vUdtcT1UKn4H2jicFOo=
Subject key identifier:   02:22:EE:BB:D0:76:DA:67:C9:7D:C2:80:E1:72:2F:EC:6E:F9:55:FC
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer:       /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial:       01987306B31951BE1F3A7262E72C0BDDD4C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number:          0E8A
Signing time:             Mon 04 Aug 2025 03:01:15 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:15 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:15 +0000
Files and hashes:         1: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: bn8YzfhQnuL8khEnikKccoFrsvf/TyXIICXpJo0ruC8=)
                          2: f0fm_m6mqyncGFPg2zPkibsoBcI.roa (hash: R5AqcJr/crlHYVpexq/9b2IVn+Dod1jCAKFqkiICDJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:b3:19:51:be:1f:3a:72:62:e7:2c:0b:dd:d4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
        Validity
            Not Before: Aug  4 03:01:15 2025 GMT
            Not After : Aug  5 03:01:15 2025 GMT
        Subject: CN=0222eebbd076da67c97dc280e1722fec6ef955fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2b:f3:53:33:75:cc:8e:66:2a:33:4b:01:c6:
                    a2:30:fa:8b:53:13:12:2f:b2:66:d4:ae:46:40:62:
                    69:63:2b:0b:35:86:30:ad:49:25:a2:05:32:88:9a:
                    da:c8:f1:43:99:ef:02:23:10:fa:69:15:0a:0b:82:
                    05:be:13:20:69:92:95:34:84:fd:8e:ad:f2:93:77:
                    2b:8b:31:57:a5:ac:71:b5:2a:39:10:bd:4d:4a:4c:
                    a3:05:6d:69:6e:d9:5f:41:ca:59:65:8e:80:1b:b2:
                    1a:1a:9a:02:32:a8:fd:cb:39:77:d4:e1:2a:ad:96:
                    ac:b4:f7:02:ad:10:ae:4d:b5:53:0d:77:e0:cf:dc:
                    6f:1f:8f:e0:ee:f4:84:8e:ae:98:2c:79:33:8f:e5:
                    ca:b2:61:f5:66:2a:ff:5a:d4:bd:88:16:44:c1:2e:
                    43:22:a1:6c:e5:84:28:0d:f8:0d:c9:3f:f3:4f:af:
                    45:3e:62:6a:ff:0d:9b:ed:95:c5:1e:2c:32:37:00:
                    4b:53:20:08:0c:8c:09:e3:d3:a2:66:8f:4c:06:8d:
                    9a:95:44:16:21:0e:a5:4f:8a:8b:5b:c8:8b:50:60:
                    d0:49:f5:94:a7:f3:05:e8:d0:8a:0d:4b:90:45:1d:
                    0a:4d:94:ee:40:5a:02:b6:12:62:6c:fc:74:75:b1:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:22:EE:BB:D0:76:DA:67:C9:7D:C2:80:E1:72:2F:EC:6E:F9:55:FC
            X509v3 Authority Key Identifier:
                keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:af:8b:2c:80:fc:5c:6f:ad:49:87:24:46:10:d2:25:ac:7e:
         b0:dd:fc:57:aa:60:45:72:b8:26:07:79:4d:83:2d:12:62:74:
         ec:1e:43:d5:5f:ad:e9:07:1a:1b:f5:7e:23:6d:2b:29:92:ca:
         ca:46:a7:55:8f:2b:5c:24:2c:60:c5:e3:75:b9:da:fd:10:50:
         83:ca:e2:0e:c7:19:46:a4:86:10:17:99:60:99:70:1a:5b:d9:
         bb:28:71:d0:34:5a:38:ff:a5:7a:de:92:32:ea:6b:c4:88:6c:
         94:fb:24:cc:44:bd:1f:4a:53:f9:df:3d:4f:92:10:9c:d0:98:
         1e:a8:1c:81:94:ae:ce:4e:6b:6f:81:a7:46:b7:cd:cb:66:35:
         60:fd:47:21:47:1a:b8:60:d8:00:f5:9b:c5:ad:51:46:21:c2:
         16:07:60:02:03:3a:e5:06:66:b5:4a:5b:9d:8a:11:22:d5:77:
         55:67:11:0f:d7:3c:52:58:b2:f0:e3:2c:bf:eb:81:11:e4:b5:
         39:65:74:d3:ee:37:fa:4b:86:fd:32:05:16:cb:e3:f4:90:17:
         0a:8f:3d:1b:45:d8:15:b9:9d:26:d6:f2:28:4e:49:51:26:ca:
         74:cf:aa:15:5d:cc:43:06:1b:de:0b:23:ba:42:d0:0c:13:80:
         77:8c:b7:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBrMZUb4fOnJi5ywL3dTFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MjJlOTY3OGZiMGQ0MTRkMmRkZmJkMjQyMGM0Yzc0ODI2
M2YzNGIwHhcNMjUwODA0MDMwMTE1WhcNMjUwODA1MDMwMTE1WjAzMTEwLwYDVQQD
EygwMjIyZWViYmQwNzZkYTY3Yzk3ZGMyODBlMTcyMmZlYzZlZjk1NWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCvzUzN1zI5mKjNLAcaiMPqLUxMS
L7Jm1K5GQGJpYysLNYYwrUklogUyiJrayPFDme8CIxD6aRUKC4IFvhMgaZKVNIT9
jq3yk3crizFXpaxxtSo5EL1NSkyjBW1pbtlfQcpZZY6AG7IaGpoCMqj9yzl31OEq
rZastPcCrRCuTbVTDXfgz9xvH4/g7vSEjq6YLHkzj+XKsmH1Zir/WtS9iBZEwS5D
IqFs5YQoDfgNyT/zT69FPmJq/w2b7ZXFHiwyNwBLUyAIDIwJ49OiZo9MBo2alUQW
IQ6lT4qLW8iLUGDQSfWUp/MF6NCKDUuQRR0KTZTuQFoCthJibPx0dbGk6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIi7rvQdtpnyX3CgOFyL+xu+VX8MB8GA1UdIwQY
MBaAFBci6WePsNQU0t370kIMTHSCY/NLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hNmUxYjUtZTc4MS00MDE4LTk2MGIt
ODhjOTUxY2VlNzg0LzEvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hNmUxYjUtZTc4MS00MDE4LTk2MGItODhjOTUxY2VlNzg0
LzEvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6+LLID8
XG+tSYckRhDSJax+sN38V6pgRXK4Jgd5TYMtEmJ07B5D1V+t6QcaG/V+I20rKZLK
ykanVY8rXCQsYMXjdbna/RBQg8riDscZRqSGEBeZYJlwGlvZuyhx0DRaOP+let6S
MuprxIhslPskzES9H0pT+d89T5IQnNCYHqgcgZSuzk5rb4GnRrfNy2Y1YP1HIUca
uGDYAPWbxa1RRiHCFgdgAgM65QZmtUpbnYoRItV3VWcRD9c8Uliy8OMsv+uBEeS1
OWV00+43+kuG/TIFFsvj9JAXCo89G0XYFbmdJtbyKE5JUSbKdM+qFV3MQwYb3gsj
ukLQDBOAd4y3TQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:59 2025 by rpki-client