Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
File:                     F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft (raw, json)
Hash identifier:          tsDoxjMVTtEkem387WOslTNu9OHZSyQ8VeN5zoVaeXE=
Subject key identifier:   36:8B:F3:43:3E:37:5D:D2:AF:B3:3A:17:F2:2F:C4:D8:72:F2:60:61
Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
Certificate issuer:       /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Certificate serial:       01987A525C0C7ADCC332BDEE2818256DB8C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
Manifest number:          14EC
Signing time:             Tue 05 Aug 2025 13:01:14 +0000
Manifest this update:     Tue 05 Aug 2025 13:01:14 +0000
Manifest next update:     Wed 06 Aug 2025 13:01:14 +0000
Files and hashes:         1: 1-JQsoXrJF1cL02AU4m3DYLwbUEg.roa (hash: 79cS9UiptLRApHw1SGPwVnRtKo+MdI4f+PG1mm8Q0Oo=)
                          2: F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl (hash: pGcraM63qh+7nRqWl/YL9f5EhGwV8khCtmxoZwRea/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:52:5c:0c:7a:dc:c3:32:bd:ee:28:18:25:6d:b8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
        Validity
            Not Before: Aug  5 13:01:14 2025 GMT
            Not After : Aug  6 13:01:14 2025 GMT
        Subject: CN=368bf3433e375dd2afb33a17f22fc4d872f26061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:39:bc:bc:1b:19:9e:70:cc:75:62:58:b6:
                    78:7b:a4:4b:b6:75:06:c8:c8:b7:85:91:16:19:49:
                    22:bb:a0:4e:49:89:09:d3:9f:49:37:c5:00:66:79:
                    b0:0c:01:e6:ae:96:c6:58:ed:93:b5:07:94:c4:c0:
                    f8:33:a2:62:e0:15:99:62:d8:06:dc:e3:4a:6a:7b:
                    e8:1a:da:35:5c:b3:b8:ce:66:85:49:1b:3a:19:d3:
                    01:5f:1d:f0:05:22:92:a5:16:68:ff:e6:d5:6f:58:
                    0c:32:5a:3f:c4:3a:ed:9a:d6:73:fe:68:99:a4:45:
                    ad:cd:33:3b:b3:85:0d:06:8d:62:43:18:78:2f:60:
                    8a:df:42:4b:48:40:45:cc:45:ad:81:0f:3e:a3:e4:
                    d7:9f:be:72:bb:4c:63:ba:f5:b2:77:1b:2c:e1:68:
                    e6:74:ce:3d:eb:20:c8:a4:9e:1d:d1:f8:2b:a4:02:
                    9b:c9:e0:5a:71:b4:fe:0d:a7:6e:a2:c6:70:19:b2:
                    03:f6:1d:93:00:1a:b2:95:ee:61:1a:ef:0c:85:40:
                    12:2f:d6:59:e0:f5:34:ed:b7:78:17:86:96:14:14:
                    2b:64:72:6f:99:bd:9e:8e:a3:dd:fd:86:3a:21:eb:
                    9b:c1:62:c6:4f:4e:7e:79:d3:92:48:63:0a:5a:cb:
                    f6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8B:F3:43:3E:37:5D:D2:AF:B3:3A:17:F2:2F:C4:D8:72:F2:60:61
            X509v3 Authority Key Identifier:
                keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3e:ba:8c:9c:a4:75:40:ef:14:ca:9c:f9:3f:8e:fe:4f:b9:
         36:af:96:f3:af:5a:73:e4:09:ce:66:c1:f2:05:fd:60:00:30:
         51:2e:42:0e:9e:31:7b:b7:d9:db:6d:97:2e:01:03:5e:c5:1b:
         9b:d0:b2:e2:45:aa:30:64:48:03:22:05:33:c0:d9:3f:0e:bd:
         17:0a:4b:7e:e1:6c:4d:96:a5:12:0b:e1:78:41:d6:62:6b:3b:
         f4:1d:13:90:38:db:a0:14:9f:d3:9a:b0:98:2f:2f:8f:6e:7c:
         e8:b9:43:c0:1a:f0:fe:0c:68:0e:50:08:a0:a7:98:05:7a:37:
         42:a0:c7:19:bc:26:30:54:57:2b:64:2c:62:b0:2d:3f:36:a3:
         7b:6a:40:17:e1:37:99:93:dc:03:d9:ca:5f:86:76:34:43:f2:
         bd:72:60:a8:ba:0b:96:bd:7a:b4:97:7e:5d:32:ea:bf:02:20:
         d0:bc:96:39:9a:3d:2d:ee:b9:40:9b:c3:15:fb:a5:dd:34:94:
         06:ed:01:d7:0d:64:9a:90:ba:e7:68:9d:f7:b3:bb:2f:bd:86:
         6d:81:0b:56:2f:b6:8d:c0:89:21:a3:43:98:50:22:26:50:d9:
         e4:e4:c7:c4:be:92:fb:31:04:c0:ea:be:11:d5:e1:25:fa:a7:
         d8:c8:97:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:20:16 2025 by rpki-client