Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
File:                     FocxkXFwxLgb7jUdBFXDLLrWOyY.mft (raw, json)
Hash identifier:          lX+PEOPCihnBcN3TbWE+JPx0akHaeWo+Rbm/qb2PPm0=
Subject key identifier:   C5:7C:32:50:4B:76:E9:D1:1D:8C:06:AE:59:39:45:0D:3D:64:2C:68
Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
Certificate issuer:       /CN=168731917170c4b81bee351d0455c32cbad63b26
Certificate serial:       01988A6A485B3DA217B6147B37EB27CBDFAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
Manifest number:          0D18
Signing time:             Fri 08 Aug 2025 16:01:17 +0000
Manifest this update:     Fri 08 Aug 2025 16:01:17 +0000
Manifest next update:     Sat 09 Aug 2025 16:01:17 +0000
Files and hashes:         1: FocxkXFwxLgb7jUdBFXDLLrWOyY.crl (hash: deuzHo+uROJSqR6PHObd/jYs1HaElLA5qsfB+UY4XnY=)
                          2: LhUj1mCFxgCVgOclN_x_EPQsaaM.roa (hash: TwspggDMx9eKuIFMwLPIl1QzksuuFso9cmuKcnRQwY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:6a:48:5b:3d:a2:17:b6:14:7b:37:eb:27:cb:df:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26
        Validity
            Not Before: Aug  8 16:01:17 2025 GMT
            Not After : Aug  9 16:01:17 2025 GMT
        Subject: CN=c57c32504b76e9d11d8c06ae5939450d3d642c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:25:3d:3c:54:75:84:3f:79:ad:19:41:77:0b:
                    50:82:fd:de:6a:db:88:50:61:29:2e:be:68:2a:86:
                    2a:56:68:3e:a6:69:0e:5d:74:04:7b:de:42:ac:91:
                    55:c6:71:21:24:42:e2:14:62:8f:07:45:03:dd:02:
                    00:0d:f3:3f:24:e2:74:25:65:3c:32:de:46:4d:6f:
                    11:8a:5c:0c:5d:bd:c4:33:85:13:79:fd:82:ad:95:
                    8b:36:3e:6a:d1:27:eb:9c:24:30:da:9c:3a:2e:bd:
                    d4:27:d0:cb:59:eb:08:26:58:57:8a:7a:3c:2b:e3:
                    da:a7:17:d7:0b:59:68:a3:18:b0:f2:6e:1f:a9:53:
                    b2:66:44:96:d4:1f:5b:28:72:95:43:e5:ed:81:43:
                    e9:17:8b:5f:b6:78:16:ce:05:f2:be:21:2c:c7:e7:
                    14:19:11:e7:fe:b1:d3:1e:11:6a:74:05:ca:b6:57:
                    69:02:22:a2:ad:5c:75:45:10:df:05:9a:b3:eb:07:
                    b0:ec:e7:b8:0a:4a:f7:00:6e:37:be:04:7b:dd:28:
                    c9:cf:68:41:4e:1b:fb:bc:51:97:a0:12:53:de:0e:
                    f7:a3:83:71:0e:5f:8c:f1:c0:12:70:96:e8:86:f1:
                    dd:e2:28:18:62:aa:0e:c5:4c:2a:3a:0c:8f:79:fe:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7C:32:50:4B:76:E9:D1:1D:8C:06:AE:59:39:45:0D:3D:64:2C:68
            X509v3 Authority Key Identifier:
                keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:89:1e:23:a3:c0:71:c0:b6:f9:27:94:1b:3a:f9:6b:87:70:
         97:1e:4a:9b:81:0f:2b:cf:35:db:0c:c7:0e:b3:36:a9:04:f3:
         b8:2a:a8:76:18:70:58:33:bb:0c:ab:e0:88:2f:26:fb:9d:9d:
         c8:ed:55:50:10:fb:30:ab:ae:2e:71:5a:21:0a:6f:ed:10:5c:
         91:1d:19:06:f7:73:21:68:6c:94:92:b1:d3:3a:66:8d:a9:8b:
         c8:1b:e3:5c:0a:31:35:ec:35:b4:1d:03:f5:a0:97:ac:31:fe:
         e5:e8:77:8f:e0:4d:a3:ed:72:d0:3c:56:7a:19:c8:da:d9:6b:
         af:30:ce:ca:dc:ad:1e:c8:c9:b1:de:64:e2:a4:e5:2b:bc:5a:
         3e:8b:0d:4f:d5:c9:01:9b:b4:3b:24:3f:7d:0c:4d:47:f8:59:
         57:7e:64:ab:52:37:b8:dc:07:03:d2:3f:84:d4:ee:ef:93:ba:
         87:04:bb:51:a8:9a:7b:eb:37:60:15:d4:07:39:be:4a:25:c9:
         26:cd:05:c5:b1:14:cd:cd:4c:fc:63:31:95:d9:f2:23:6c:0a:
         8e:a3:de:af:d2:37:fb:66:99:ab:3d:3d:f9:8e:36:04:eb:40:
         b8:27:de:65:82:c1:f2:7e:83:4a:d2:4b:ca:47:3d:83:86:3b:
         eb:5b:6b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:16 2025 by rpki-client