Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
File:                     FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft (raw, json)
Hash identifier:          iWBc6cLwhqj21UKD32sWaEujaZVXf3peU9Cm3rc9Z34=
Subject key identifier:   01:58:A3:79:75:D3:AD:9A:C9:26:A2:6A:E2:8F:03:EE:CA:36:40:9D
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Certificate issuer:       /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial:       01988B0FB255ED9715586F0E8E1B50625CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
Manifest number:          1625
Signing time:             Fri 08 Aug 2025 19:01:58 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:58 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:58 +0000
Files and hashes:         1: FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl (hash: RFM/WcAb+WJgWbHlTt5J44BTEwK53AMUd/77Z9cwc20=)
                          2: LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa (hash: ZLQQjKLBIHt19Vm7p7ixs8F7wMqUIQn9Y8DFLps+wZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:b2:55:ed:97:15:58:6f:0e:8e:1b:50:62:5c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
        Validity
            Not Before: Aug  8 19:01:58 2025 GMT
            Not After : Aug  9 19:01:58 2025 GMT
        Subject: CN=0158a37975d3ad9ac926a26ae28f03eeca36409d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:ae:1a:fe:c6:26:48:1c:bb:04:b4:7d:10:
                    fe:0c:39:b4:f0:08:e5:0b:d9:ad:7a:5f:11:d5:2c:
                    2e:f9:25:42:65:65:fb:e0:45:fd:e6:6c:40:cf:5d:
                    ea:ef:5a:d5:5d:fb:78:19:e5:71:f6:b9:59:57:ef:
                    bb:8e:aa:e6:72:b7:4e:c7:b9:ad:a9:57:24:e2:82:
                    41:5e:2d:ff:66:f4:fc:80:15:6a:fa:15:c9:f9:ab:
                    a4:4f:a4:06:26:87:1a:ef:fc:eb:9d:c4:66:5a:b2:
                    c9:39:c8:be:92:e3:3d:e7:a3:cd:10:1e:b1:e2:ff:
                    21:53:ad:2f:e1:49:7c:62:69:cf:9c:3b:29:8a:7f:
                    a8:a1:97:5b:f5:c3:be:6c:2b:c0:d4:1d:cd:4f:24:
                    34:7b:25:a2:a1:b3:98:ef:be:59:7c:d0:cb:38:1b:
                    86:40:4b:02:c5:25:15:e1:d3:7b:7b:f5:9b:da:35:
                    41:72:ae:98:8f:54:4f:7f:c2:e5:41:40:e8:07:9b:
                    3a:0d:89:8c:55:4e:2e:f1:9f:40:bb:fb:92:79:20:
                    75:9b:b0:a1:bc:9c:2d:ef:16:ea:60:8a:aa:58:5d:
                    80:5e:ea:3c:7c:e1:95:e9:5f:be:a2:76:96:92:fc:
                    6a:0e:bf:22:03:fd:49:76:b2:17:2c:1b:cc:2c:0e:
                    06:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:58:A3:79:75:D3:AD:9A:C9:26:A2:6A:E2:8F:03:EE:CA:36:40:9D
            X509v3 Authority Key Identifier:
                keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6e:20:48:5e:42:2e:cf:5d:d6:c8:01:42:5f:2b:16:d5:e6:
         59:98:c1:d5:1a:e9:03:bc:a7:bb:c3:4f:32:9c:46:cb:d9:e9:
         19:d7:b3:22:b2:52:d3:44:ee:8f:30:cc:83:80:ea:67:0a:1e:
         df:c7:e3:59:ae:53:f9:7d:19:95:5d:ff:bb:2a:87:92:14:c9:
         a4:45:50:3b:99:10:6f:75:06:2a:ca:b8:e6:44:1b:01:00:15:
         07:a3:09:6a:89:c8:ba:37:fd:ff:9d:75:7b:3b:22:54:55:c1:
         4c:bd:e2:98:6b:04:0a:b4:aa:e7:b3:1c:ff:fb:cb:6a:2c:3f:
         50:52:60:1d:57:8d:85:89:03:1c:5e:74:41:3e:e6:e3:95:d4:
         45:b6:09:ea:2f:38:36:c2:5a:6c:4c:b3:f0:16:ce:1b:52:8a:
         a1:10:19:38:d3:23:cc:c4:87:c2:f6:e0:7f:37:55:2e:85:fb:
         92:97:92:12:58:de:40:5b:c9:b2:62:cc:7c:88:8b:0b:76:de:
         28:18:46:95:69:39:97:4b:ff:49:7c:4c:ca:c8:7d:79:05:c5:
         b5:f3:8a:c4:21:a5:df:8f:79:93:f6:66:40:23:19:b7:67:55:
         1d:74:fc:dc:2e:40:7d:ff:2f:56:ba:ad:2b:75:67:b6:98:6b:
         19:2e:40:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:13:21 2025 by rpki-client