Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
File:                     F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft (raw, json)
Hash identifier:          twrrtBFvPVcY2/It6gXXlAr8jVJHcv52M289w8ZcloI=
Subject key identifier:   2A:4D:D3:8D:D7:6E:35:76:81:D1:87:1F:1F:73:B1:F5:7F:93:B0:68
Authority key identifier: 17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03
Certificate issuer:       /CN=17ec31441691b859b347fd17217a5e5d1b0be303
Certificate serial:       019874BE5C14EDF52B1FA0518D822CD16691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
Manifest number:          0744
Signing time:             Mon 04 Aug 2025 11:01:29 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:29 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:29 +0000
Files and hashes:         1: F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl (hash: MzpKPP3n+Gng/7vqfmiV1qtP2kuHtJUy/qM9x1msMu8=)
                          2: ln-QKhvlXAjUZIdfkRE5U6oCsi8.roa (hash: gwe72yNPdMd17mqjkFbILfyleB7233AKjzKUNQmZ/xM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:5c:14:ed:f5:2b:1f:a0:51:8d:82:2c:d1:66:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec31441691b859b347fd17217a5e5d1b0be303
        Validity
            Not Before: Aug  4 11:01:29 2025 GMT
            Not After : Aug  5 11:01:29 2025 GMT
        Subject: CN=2a4dd38dd76e357681d1871f1f73b1f57f93b068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:eb:88:6e:3c:33:a5:a1:19:9c:40:49:79:
                    7a:6e:7a:bb:6a:0c:35:09:ec:0f:f6:c5:04:67:0f:
                    8d:06:e5:35:2d:cf:60:4a:45:44:31:a5:79:87:30:
                    47:05:19:96:9e:4d:ef:cd:fb:bd:08:eb:d5:e1:d4:
                    e6:db:59:37:04:78:bf:22:e9:b3:80:2f:bf:bb:7a:
                    a2:e0:a9:ff:70:5b:1e:0a:1d:a7:1f:c1:3c:c1:f6:
                    9b:fa:1a:55:90:be:b7:0b:d3:00:37:bf:be:55:57:
                    09:63:cc:a8:07:7a:ee:f1:80:21:e6:99:4c:ff:82:
                    0f:71:1b:1e:4f:2e:5d:74:f9:08:2e:f0:a7:fe:17:
                    dd:94:c5:be:9c:5a:31:c5:3c:32:21:71:5b:9f:87:
                    d1:63:d5:ec:53:dd:27:33:80:b7:dc:47:3d:4d:ee:
                    2c:c4:48:65:72:cf:e5:1d:ff:e4:fc:ce:4a:8d:93:
                    a3:1a:b6:88:2d:d5:2f:75:82:e2:a6:22:ec:5a:66:
                    b8:ce:e6:6d:81:d8:00:aa:af:58:51:0d:69:66:d8:
                    99:13:a6:d1:63:95:28:ff:bc:6c:c0:be:e2:82:6f:
                    6d:7b:ba:34:92:77:5f:05:dc:64:ad:b7:93:a6:86:
                    fb:97:aa:d1:a4:01:a5:d2:f0:3c:44:cb:b0:17:dc:
                    7c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4D:D3:8D:D7:6E:35:76:81:D1:87:1F:1F:73:B1:F5:7F:93:B0:68
            X509v3 Authority Key Identifier:
                keyid:17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:93:02:6f:af:f1:64:19:d2:e8:6a:63:54:33:1a:cf:64:ad:
         4a:63:cd:9b:e7:57:77:be:8d:25:c4:0f:54:6e:72:af:a5:e7:
         bc:06:62:30:c3:00:ef:4a:99:eb:ce:b4:b5:43:2b:c7:5b:b6:
         eb:40:23:ca:57:3a:6a:df:1d:26:fe:b6:6c:08:51:04:de:ba:
         dd:ae:0e:35:75:fd:c4:04:05:eb:b8:75:d7:7d:97:b0:92:b2:
         22:6b:a2:de:0b:b5:ef:d6:bd:c4:1e:9a:16:94:0a:25:e2:82:
         c6:03:91:51:5c:9d:0d:bb:66:62:e6:a8:90:8f:04:d4:f1:ad:
         d3:4a:92:63:7f:a1:0b:ea:83:57:9e:d4:93:94:80:97:2b:e3:
         86:49:e7:56:7a:2f:3b:96:75:db:e2:b5:b8:a8:6d:d6:a3:31:
         c3:a3:73:01:70:57:04:98:88:29:35:71:ca:8b:35:5e:03:98:
         77:49:3f:a8:ed:22:71:23:03:b4:da:38:59:09:c4:3a:86:f2:
         4e:bd:a9:ca:8a:c5:17:69:95:ed:76:4f:d3:01:f3:4b:57:1b:
         11:e1:6b:08:08:3a:b2:39:7c:00:dd:23:7b:d0:9b:14:57:cf:
         8a:a6:72:bb:c4:71:35:6d:43:12:2a:73:a7:3e:ea:46:09:ca:
         b7:07:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:32 2025 by rpki-client