Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
File:                     fySblURiBoP5SziKdVGmimST7RI.mft (raw, json)
Hash identifier:          kqsYxqBTIZpY32NYkQecEMt4KQk2O8Q0rlF7lRca/1k=
Subject key identifier:   AD:34:92:67:67:DE:6F:9C:80:21:9D:7B:C9:37:29:DA:0F:40:33:33
Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
Certificate issuer:       /CN=7f249b9544620683f94b388a7551a68a6493ed12
Certificate serial:       0198868CE309047989931E97A27361B61219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
Manifest number:          0250
Signing time:             Thu 07 Aug 2025 22:00:36 +0000
Manifest this update:     Thu 07 Aug 2025 22:00:36 +0000
Manifest next update:     Fri 08 Aug 2025 22:00:36 +0000
Files and hashes:         1: fySblURiBoP5SziKdVGmimST7RI.crl (hash: G3ByipS2Up+/8nIBnj5fwDSveko29kdMa0/olv92WAE=)
                          2: h7ETLfyQmL_b22CUnmqfJbv8XcU.roa (hash: GvscP45iqYd2rs4fdmtdGUU7bJ6EyKUaKDdAzQiywgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:86:8c:e3:09:04:79:89:93:1e:97:a2:73:61:b6:12:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12
        Validity
            Not Before: Aug  7 22:00:36 2025 GMT
            Not After : Aug  8 22:00:36 2025 GMT
        Subject: CN=ad34926767de6f9c80219d7bc93729da0f403333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:2f:7e:66:bd:93:f3:37:91:f9:8b:65:42:
                    84:04:09:d9:d0:43:61:94:ce:10:1b:1c:72:6d:3a:
                    80:d0:8a:3b:ce:bc:19:b2:8e:88:e0:dd:b0:ea:e7:
                    bb:f2:c4:36:c1:5c:d7:aa:e5:f2:ec:25:2a:b9:d4:
                    22:a5:3b:86:05:3b:94:01:85:9f:8e:c5:da:52:d7:
                    6e:c4:a2:d8:09:b5:3e:6e:d1:6b:c2:52:fc:39:90:
                    c3:8a:b5:4e:aa:44:1b:3f:bd:de:36:e3:5b:f9:42:
                    d4:53:b9:90:01:b0:93:e2:5d:5d:66:05:ca:06:91:
                    b6:64:c7:50:ea:94:9a:21:ed:2d:7c:e7:aa:98:70:
                    73:4d:14:b0:fc:5d:51:67:e3:5b:66:47:32:df:c2:
                    53:6f:c0:7b:c1:38:14:69:1e:35:21:e6:0a:a5:1f:
                    e9:0b:bc:fa:a1:a6:da:94:de:02:5e:f6:3c:2b:a3:
                    ea:ad:cd:01:6e:c1:4a:c7:b5:96:dd:0e:7e:f6:56:
                    db:ba:96:89:3e:49:22:25:7b:6e:26:03:6e:52:41:
                    a1:c8:9c:e3:be:01:03:87:08:0c:92:ae:5e:d5:60:
                    65:55:87:a5:19:ef:0f:69:98:ca:fd:bb:fe:c3:13:
                    a0:89:71:6f:77:74:22:ab:f7:df:90:76:6e:21:b0:
                    34:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:34:92:67:67:DE:6F:9C:80:21:9D:7B:C9:37:29:DA:0F:40:33:33
            X509v3 Authority Key Identifier:
                keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1c:09:1e:a7:ac:9b:42:99:9e:04:10:d2:b6:01:df:ea:5a:
         fa:f4:ed:1c:9a:4c:3e:e9:32:48:e3:3c:af:f0:a7:4f:e6:ce:
         aa:1a:21:fc:77:a7:7e:a5:22:0a:80:3f:3d:03:0a:96:cb:e4:
         b0:6b:5c:ec:10:5a:5d:72:ef:d6:bb:32:96:48:13:32:28:59:
         b4:4a:f5:48:4f:78:eb:17:54:18:e3:af:5b:bd:07:fe:08:51:
         74:38:53:c3:61:3d:c2:a4:51:e2:7a:20:d7:76:ab:6a:b1:fb:
         78:17:c7:db:c2:21:14:b4:54:c2:e8:02:cd:7c:6a:e1:40:83:
         6e:0e:ea:19:d0:96:8d:90:90:e4:d8:ef:72:c0:65:4c:16:6a:
         e1:d5:4d:7a:41:87:d3:22:3d:a4:a7:c4:fb:ca:95:17:e8:f2:
         f8:52:ba:17:72:f2:14:ac:5f:45:47:62:64:b4:4c:26:1e:5e:
         74:0b:2f:fd:ba:ac:0c:04:0f:e9:ae:67:56:97:21:68:8e:46:
         9b:b7:c4:93:df:51:70:7b:07:83:2c:f8:a4:90:88:c2:67:3f:
         f6:22:82:1f:f1:c4:b0:39:48:14:21:d7:38:bb:f5:63:55:90:
         14:17:da:7f:cc:fa:34:fc:ff:55:df:16:ad:d0:91:57:f3:ad:
         34:63:19:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:48:12 2025 by rpki-client