Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/76ea77-1757-4db2-a083-d218fb3c137b/1/FK5SmozFunaS25UmkqCLVCJLvzY.mft
File:                     FK5SmozFunaS25UmkqCLVCJLvzY.mft (raw, json)
Hash identifier:          IQn6o66eLPB2FUMDA3cfzsJrd5VF5HsjkHjmWTdBz/8=
Subject key identifier:   6C:52:A9:0B:0E:B2:3F:F8:24:0A:B2:37:7F:9E:29:EC:3D:F1:20:79
Authority key identifier: 14:AE:52:9A:8C:C5:BA:76:92:DB:95:26:92:A0:8B:54:22:4B:BF:36
Certificate issuer:       /CN=14ae529a8cc5ba7692db952692a08b54224bbf36
Certificate serial:       019894ED93442429A0498F2045F3F16ACCE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FK5SmozFunaS25UmkqCLVCJLvzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/76ea77-1757-4db2-a083-d218fb3c137b/1/FK5SmozFunaS25UmkqCLVCJLvzY.mft
Manifest number:          1624
Signing time:             Sun 10 Aug 2025 17:00:54 +0000
Manifest this update:     Sun 10 Aug 2025 17:00:54 +0000
Manifest next update:     Mon 11 Aug 2025 17:00:54 +0000
Files and hashes:         1: FK5SmozFunaS25UmkqCLVCJLvzY.crl (hash: xjqxWvQfTMOCSj6ElVzjgsC+b/pwz4kzJeW1p5PuiHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/76ea77-1757-4db2-a083-d218fb3c137b/1/FK5SmozFunaS25UmkqCLVCJLvzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/76ea77-1757-4db2-a083-d218fb3c137b/1/FK5SmozFunaS25UmkqCLVCJLvzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FK5SmozFunaS25UmkqCLVCJLvzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:ed:93:44:24:29:a0:49:8f:20:45:f3:f1:6a:cc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ae529a8cc5ba7692db952692a08b54224bbf36
        Validity
            Not Before: Aug 10 17:00:54 2025 GMT
            Not After : Aug 11 17:00:54 2025 GMT
        Subject: CN=6c52a90b0eb23ff8240ab2377f9e29ec3df12079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4a:50:88:76:65:5b:1a:9c:0f:c5:d9:c1:a6:
                    aa:69:9b:da:26:ae:01:1e:3a:eb:59:d4:9c:e7:3d:
                    b2:c6:cf:59:6d:17:2c:e3:b3:da:f4:d2:16:68:e5:
                    7e:66:fa:53:03:bf:72:6c:5b:e8:6b:bf:3d:c2:aa:
                    ec:f6:68:c9:a1:41:54:66:49:9b:5e:c7:f7:d8:c5:
                    c0:50:b0:db:bd:48:84:10:ed:ae:e7:ef:49:73:62:
                    b1:8d:8a:71:5e:c2:67:4d:9e:31:8d:be:98:11:fc:
                    c7:be:44:c9:e9:ef:23:06:13:3a:7b:19:dd:57:9a:
                    fa:ba:1f:78:4b:3a:ce:c0:9a:3c:1f:d8:3b:53:ce:
                    46:83:62:f8:2b:43:8b:06:28:34:5e:40:9d:41:50:
                    2c:9a:22:9a:c2:2b:f6:d0:29:8d:26:0b:ad:d0:df:
                    b3:46:4a:c5:90:c0:6f:20:3c:df:46:e5:d6:11:04:
                    4c:38:22:36:19:f2:87:e8:67:2a:2e:7c:b3:6d:35:
                    cf:d4:12:6d:ee:2e:e0:4b:bb:66:f1:b6:50:d6:bf:
                    31:89:fd:29:5b:a7:3c:07:33:45:fd:4a:c2:d0:80:
                    82:b3:1c:d5:fb:20:10:df:9c:e3:44:24:71:86:b4:
                    11:63:e0:1b:30:e1:fb:a2:b3:16:51:ff:c2:ab:df:
                    d8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:52:A9:0B:0E:B2:3F:F8:24:0A:B2:37:7F:9E:29:EC:3D:F1:20:79
            X509v3 Authority Key Identifier:
                keyid:14:AE:52:9A:8C:C5:BA:76:92:DB:95:26:92:A0:8B:54:22:4B:BF:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK5SmozFunaS25UmkqCLVCJLvzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/76ea77-1757-4db2-a083-d218fb3c137b/1/FK5SmozFunaS25UmkqCLVCJLvzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/76ea77-1757-4db2-a083-d218fb3c137b/1/FK5SmozFunaS25UmkqCLVCJLvzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:4c:a9:89:ac:07:44:72:00:fd:02:31:12:b5:79:75:b5:e9:
         dc:3d:6a:c7:57:bb:83:6c:1e:61:c8:d9:29:27:0d:36:38:a4:
         0d:5e:e0:e0:c1:96:a5:31:81:11:43:7e:72:ef:0b:2e:8c:b4:
         f9:23:b6:05:10:f2:37:00:57:73:a3:6a:05:6b:c1:dc:93:b5:
         99:a4:d0:4f:4b:32:d3:41:66:6c:02:9e:b8:70:a9:3a:fe:dc:
         99:d6:b8:1a:2e:5b:0b:5c:29:23:22:35:43:9e:44:d6:dc:0e:
         f5:92:19:54:d7:a1:2e:04:70:2f:37:32:5c:65:b8:fe:b1:b7:
         39:43:39:8a:1e:1f:5e:71:f7:11:b1:7b:de:40:ec:7b:e9:a1:
         b1:25:de:73:2d:27:53:f7:a8:ba:e3:ce:3a:90:ec:27:83:0b:
         ae:54:77:15:c7:29:5e:8e:79:ed:c6:11:a4:8c:2a:7d:83:97:
         12:8b:b9:1e:3e:1f:9a:ea:67:4b:7d:24:6d:58:05:9f:95:c5:
         46:08:2e:84:0a:7d:4b:ec:a5:e9:11:32:2a:24:3f:4c:e1:09:
         2b:b3:0e:cb:24:d0:a1:57:62:a3:7e:9f:48:18:04:04:8a:90:
         11:d0:53:90:0c:69:29:09:7d:b4:1f:cd:42:3d:e6:20:f9:af:
         1a:91:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:01:39 2025 by rpki-client