Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
File:                     Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft (raw, json)
Hash identifier:          wl/bg35+gU+Q1FSSfGtjWDWe8VH2nJS3DQ7b80EuGAI=
Subject key identifier:   ED:A3:0E:56:48:E4:4A:A5:E1:27:78:3F:47:44:48:02:2E:C1:E9:01
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Certificate issuer:       /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial:       0198857AF5D24BB3501DCFB4ABBABD5A578A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
Manifest number:          0EEF
Signing time:             Thu 07 Aug 2025 17:01:24 +0000
Manifest this update:     Thu 07 Aug 2025 17:01:24 +0000
Manifest next update:     Fri 08 Aug 2025 17:01:24 +0000
Files and hashes:         1: 1-7k1BSVErLFvFpR9s4khkCRgcx8.roa (hash: OjA0u5BcNw+jfDFu4scr2j7odbJKWBNkQN28Ky+RjrQ=)
                          2: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl (hash: cP4dGZnXhedKBrzaRvwVnojWNl8MUqlS6CESmdMSsK4=)
                          3: ZYpOnf_RMjUdQRpY5DSmoRhYWXo.roa (hash: 1MZ14FF0b6BfjlsKqzDJT2k9XMlDgyRHFf/YVDEx3LU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:7a:f5:d2:4b:b3:50:1d:cf:b4:ab:ba:bd:5a:57:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
        Validity
            Not Before: Aug  7 17:01:24 2025 GMT
            Not After : Aug  8 17:01:24 2025 GMT
        Subject: CN=eda30e5648e44aa5e127783f474448022ec1e901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:90:8d:1a:98:91:0a:a2:ee:81:85:a7:e2:
                    dd:63:71:96:be:5f:68:6b:9b:8c:df:fb:43:40:a8:
                    a9:f4:c3:cb:87:f9:1b:7d:39:77:08:31:d3:53:04:
                    c5:de:5c:59:48:63:61:6d:82:b1:f0:94:1b:fa:e5:
                    cb:06:c6:9a:50:1e:4c:48:bb:71:67:5b:13:c8:06:
                    d5:6d:32:97:b1:58:7d:da:52:b7:b4:f3:17:15:50:
                    cd:7b:40:74:fd:87:fd:48:8d:39:4b:1c:50:ef:f5:
                    44:eb:2c:87:ad:3e:d5:89:13:6a:65:0f:9a:1b:63:
                    e3:0b:37:26:de:69:e1:bb:16:cb:c2:be:4f:d1:b1:
                    16:4c:2f:68:d6:f3:f6:65:f3:87:47:ca:72:81:ac:
                    86:8a:28:2e:80:2c:04:2e:06:77:01:df:0c:d8:f8:
                    57:8d:1b:e6:79:82:90:a1:b9:68:3a:f2:39:e6:24:
                    de:f9:3a:73:fb:f9:80:89:41:04:64:18:01:d2:b3:
                    4d:d2:f6:23:5b:a6:ae:2d:02:07:f7:6d:72:2e:bb:
                    27:c5:7f:c0:1f:37:b1:ee:8d:70:e0:00:ee:3a:80:
                    e6:f3:93:fc:54:eb:60:a4:7f:03:5c:7c:03:9e:e0:
                    e9:b5:f1:5b:74:6d:2c:8e:29:af:c6:0d:4b:ee:11:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A3:0E:56:48:E4:4A:A5:E1:27:78:3F:47:44:48:02:2E:C1:E9:01
            X509v3 Authority Key Identifier:
                keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:95:20:31:ee:a8:59:ac:14:d7:a0:58:f3:01:8f:78:fc:ae:
         e8:c1:69:07:59:b2:65:53:2d:65:1e:d5:ff:2f:33:d5:93:5e:
         64:9c:37:6d:e1:3b:dc:74:24:a0:5d:31:d3:c5:a7:58:6a:9a:
         52:8e:2b:b1:72:9d:d8:20:60:f9:ce:c7:22:b8:b1:27:ca:07:
         c2:ae:e8:b1:bd:75:33:76:47:dd:01:06:7a:d2:a9:6f:4b:ec:
         60:5b:f9:37:5c:30:df:b5:71:62:b5:d5:f0:33:74:5c:ec:38:
         32:06:8f:4e:09:d4:b5:78:96:10:7e:45:9a:3a:26:ac:76:0b:
         53:ad:9c:f7:13:f7:00:87:13:df:62:52:bd:cb:93:ee:1f:ae:
         54:ba:82:21:ad:37:fe:03:5f:52:8b:94:d0:f5:0b:d4:bf:2f:
         f4:b9:8e:93:1c:fe:56:f4:bf:6e:fe:47:97:79:15:e3:e4:24:
         98:98:27:a1:1c:1e:8c:d5:0c:71:6d:c1:d6:d2:54:f2:32:a0:
         f4:02:f8:67:a1:14:2d:a6:76:18:bd:f0:af:d9:f1:bb:9d:93:
         e0:89:6a:42:e7:c8:5d:db:24:07:88:ed:a8:74:ed:78:6d:d2:
         62:d6:10:bd:a0:51:7a:aa:b0:5e:61:3b:83:7b:be:9d:bb:e7:
         fb:c4:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:45:59 2025 by rpki-client