Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
File:                     FyU3YBoxaXQEki2VfnRFD1qcvnM.mft (raw, json)
Hash identifier:          oxYS9R3heEf7zxTJwgYDlfoFJwN5tZPCjaAUTj6UsQ8=
Subject key identifier:   DB:08:59:1E:F1:AA:0A:F6:7F:CB:8E:94:BA:A5:0D:8D:DC:54:3A:98
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Certificate issuer:       /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial:       01987D1C13D089EBB68D03F15F1326D6552A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
Manifest number:          108C
Signing time:             Wed 06 Aug 2025 02:00:48 +0000
Manifest this update:     Wed 06 Aug 2025 02:00:48 +0000
Manifest next update:     Thu 07 Aug 2025 02:00:48 +0000
Files and hashes:         1: FyU3YBoxaXQEki2VfnRFD1qcvnM.crl (hash: gOZ7ZEJT0R4hYP25d4srAcnpx3JzUuW7ZY3BFkKN4iU=)
                          2: T7TBRzeJX6tbdWoccYUlzQavEvE.roa (hash: GbQhCrhDJnuTs6aD5dp/vwgXjm1RN1g0gqgdS90d0Rg=)
                          3: c053duW9yVX04hvH9uI3J-eIkE4.roa (hash: XRTPmRVBWHDOHpFSQkgtPCpg1cl8rrGstMwajzVZVD8=)
                          4: hyQNNpjW95By6SH0X4WUwzxeoxY.roa (hash: oNbxynrjBjA1wygEmG+ILxTB5lS8dgDRIesXXnDM0Aw=)
                          5: rrklfK2SIXU63eNHbLfy96DEEE4.roa (hash: MG3f+4yFLcREUv4lMpAVJXVlUxg7hDY8kaD7dmGDqvA=)
                          6: wT_wbXD63kRspn66-sCHN9HX56k.roa (hash: giCV77XuxHEuebQnQQQbW4oA8w7bEamDw12AkczJQ2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:13:d0:89:eb:b6:8d:03:f1:5f:13:26:d6:55:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
        Validity
            Not Before: Aug  6 02:00:48 2025 GMT
            Not After : Aug  7 02:00:48 2025 GMT
        Subject: CN=db08591ef1aa0af67fcb8e94baa50d8ddc543a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:43:d8:33:d4:90:a4:eb:ce:3d:3e:e7:63:39:
                    73:74:9c:e9:5d:10:7f:0c:49:3c:82:4f:2b:2e:71:
                    fd:ce:d6:79:98:68:10:67:63:76:24:10:c8:64:5d:
                    22:22:2c:aa:89:93:36:4d:8d:7a:68:7a:4f:af:85:
                    89:df:c7:4e:09:ac:60:2e:5b:fd:ac:ab:bd:a6:12:
                    62:9f:78:91:c4:fe:65:74:3f:ae:e7:58:83:2f:5a:
                    48:66:a4:68:0e:54:a6:22:e1:aa:a2:1d:49:27:5c:
                    1a:32:de:21:71:16:97:99:84:82:f3:a2:77:2a:13:
                    f9:0f:45:0e:ae:de:14:ef:68:2d:1d:e9:a0:e0:5a:
                    21:45:34:90:49:0f:18:67:18:e8:a7:07:92:8b:72:
                    a5:9a:96:98:6c:19:ec:08:73:d0:19:9e:c1:e8:a6:
                    6f:b6:28:24:47:fb:9a:b5:cc:e3:96:1c:40:d3:ff:
                    f9:d0:4e:b2:9d:12:c3:34:5a:86:ff:3b:e9:17:45:
                    4a:8b:86:15:3d:b5:b0:15:32:ad:78:9e:b9:50:da:
                    24:ae:92:cd:2f:64:e6:25:a7:4e:be:e7:71:50:f5:
                    ab:f4:38:6f:ab:93:55:a6:8f:23:48:33:a6:30:a4:
                    96:7c:03:77:da:ab:8e:3b:61:1c:f1:c5:1f:01:55:
                    6c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:08:59:1E:F1:AA:0A:F6:7F:CB:8E:94:BA:A5:0D:8D:DC:54:3A:98
            X509v3 Authority Key Identifier:
                keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ac:f4:14:11:de:a4:c6:0d:80:5a:98:ae:36:e9:f3:2e:22:
         1a:0e:17:a6:55:65:d5:7c:29:17:39:bb:1b:fc:45:d6:d0:61:
         53:ff:47:8e:40:29:4e:26:14:4b:4b:96:5b:9b:c5:b0:9f:02:
         51:fb:a7:6b:11:10:59:54:62:a2:95:e9:ba:21:59:a0:9c:9b:
         02:1e:9b:23:18:94:cc:44:8b:14:49:65:b8:52:77:67:a8:f5:
         4d:cd:03:9d:01:6a:8a:98:78:f8:34:21:fe:87:92:2d:69:22:
         34:f8:a0:59:a0:0a:e8:7f:e0:a8:d0:01:08:35:d3:28:24:77:
         b5:bf:f2:92:e2:80:08:a4:24:f1:1e:e1:84:84:18:57:4c:95:
         3c:93:c3:f1:8b:d1:2d:99:86:60:4a:cd:ce:d7:2f:f5:af:be:
         4a:e6:6d:b4:ef:e5:be:8c:78:83:52:7e:44:b9:82:45:3e:46:
         6b:d7:22:af:5f:43:e3:7c:3e:b8:af:7a:8e:05:f8:bb:2a:84:
         c8:8c:a9:87:19:17:c4:50:7d:aa:c0:bb:c5:c7:e0:9f:11:e2:
         8b:94:9e:10:56:f4:a8:97:30:87:d2:e9:be:9e:d1:41:83:2a:
         fe:1a:2f:af:ab:de:37:b0:78:22:99:01:52:ca:03:b3:0d:38:
         aa:63:60:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:01:21 2025 by rpki-client