Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft
File:                     FQGDYj_BbcdMt3VGLDbTEBakCsE.mft (raw, json)
Hash identifier:          MDQkDx8s6eim2UReBZaZuLTdlpBSufF4GeGswnOU9VI=
Subject key identifier:   F8:6A:EB:B1:15:BB:18:9E:19:E5:6D:60:1F:65:A3:62:C0:CD:74:BF
Authority key identifier: 15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1
Certificate issuer:       /CN=150183623fc16dc74cb775462c36d31016a40ac1
Certificate serial:       019873E321890F78063F9683CFD674F22AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft
Manifest number:          0F14
Signing time:             Mon 04 Aug 2025 07:02:01 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:01 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:01 +0000
Files and hashes:         1: FQGDYj_BbcdMt3VGLDbTEBakCsE.crl (hash: 3BWyMDpziK9opQ4+vA2X4sRKP29u8tSCvl7tkFkexmI=)
                          2: M-829mykxAsFBnvMzjRJ2az4Msk.roa (hash: HjgE9KqQQBakENsS5sf5myByB0D5zVgXxicLuU0gQik=)
                          3: eB9BFoLu8JL0Dy2yhrXWXgheQKQ.roa (hash: FsN+2Y4G/rvaX7dL6GAqq/hTsh+KJzrWsz0jO+iKnjU=)
                          4: pV07ftXW1Wln0tDiied_VI4i2rk.roa (hash: wqeU+FINExvsn79jDOgUE2HAofbRbv1RU1d3T94TItc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:21:89:0f:78:06:3f:96:83:cf:d6:74:f2:2a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=150183623fc16dc74cb775462c36d31016a40ac1
        Validity
            Not Before: Aug  4 07:02:01 2025 GMT
            Not After : Aug  5 07:02:01 2025 GMT
        Subject: CN=f86aebb115bb189e19e56d601f65a362c0cd74bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:76:cf:32:bd:87:bd:ca:4f:72:f0:e9:3c:55:
                    a2:38:33:6b:5d:fb:94:16:11:60:3b:48:f5:f3:66:
                    f9:e6:48:6d:01:54:64:f9:2b:97:72:bf:3c:ea:06:
                    29:d2:91:76:fe:1c:54:6a:09:13:e7:92:97:01:a5:
                    21:17:da:7d:d0:12:62:c0:13:8b:bc:10:de:3f:ad:
                    27:d6:dd:ed:cc:f2:2b:40:2b:cd:58:2c:67:08:a6:
                    b9:c7:93:71:c3:8f:e4:85:bb:2a:31:87:31:8f:f0:
                    8c:8d:42:e9:cb:ec:b6:09:f7:68:af:75:6f:e8:2a:
                    28:1e:e2:8f:51:cb:9a:d9:01:ff:48:d8:97:b2:4b:
                    e8:2e:ec:22:6a:af:ef:68:88:70:a8:0e:56:36:22:
                    7c:ef:69:17:7e:39:b1:65:21:d7:92:4a:27:ad:ec:
                    fc:e2:86:8d:43:c7:90:95:79:3e:21:16:d1:89:d1:
                    8a:09:11:76:2f:b5:29:8d:12:de:99:37:8b:b9:86:
                    58:a1:94:3d:a1:60:1e:c5:75:ac:be:47:3d:13:67:
                    c9:09:72:8d:0f:97:81:a6:23:9d:d2:c7:e7:d8:41:
                    9a:41:d3:bd:1c:b8:eb:61:24:1b:16:21:89:b9:db:
                    a6:a1:b0:46:07:88:69:bb:54:f6:bf:ad:57:1a:b6:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6A:EB:B1:15:BB:18:9E:19:E5:6D:60:1F:65:A3:62:C0:CD:74:BF
            X509v3 Authority Key Identifier:
                keyid:15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1b:3a:df:cb:d9:85:cb:84:7b:2e:72:6a:74:3f:31:63:cc:
         b0:2a:23:c5:88:26:82:1b:f4:52:59:ee:0a:4c:bd:15:a9:21:
         4f:18:ed:77:2b:c0:61:5d:43:6a:e1:5e:09:ed:53:d3:06:5c:
         da:a1:4c:8e:80:57:2f:9f:6e:09:77:13:99:64:eb:76:31:23:
         3e:a7:bd:1b:6c:8a:17:29:28:ca:a3:a1:6b:41:25:d0:74:01:
         9e:de:62:c1:37:f4:a2:ae:a2:0b:3b:f3:47:da:57:31:2e:74:
         54:fd:69:6f:0c:00:08:fe:77:74:ff:03:e1:e2:2f:e9:41:a2:
         52:a6:57:fb:d6:99:d9:bd:9e:54:0a:1c:52:e6:e7:7e:40:1a:
         50:64:0e:db:b5:17:11:36:d5:87:25:80:33:3e:e7:58:6d:f3:
         26:d1:4d:76:40:07:07:9d:ce:08:0a:88:6d:91:5f:d4:f4:c4:
         08:b1:24:42:95:54:fa:0e:56:d1:c4:86:d8:12:d0:8c:51:86:
         5d:c6:2e:27:5a:4f:17:9b:7d:9b:2a:df:68:8a:56:ee:b0:88:
         d2:53:5a:6a:81:14:68:5b:45:12:aa:5f:97:5a:1b:c7:37:dd:
         90:ca:5d:ef:3e:b8:1e:0e:20:f5:5b:e6:d8:79:f3:8e:37:4d:
         05:99:81:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:00 2025 by rpki-client