Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File:                     Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier:          P6p1OXQssRXcmwFXQJrUxBP8ujZEfW7F5hjcM3z69nw=
Subject key identifier:   F0:C2:9D:CC:52:9F:0A:F4:28:7F:61:9C:E2:B2:4F:DE:F0:9B:2C:FB
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer:       /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial:       0198A083B2FC0FBA85B1BC0FDDCC493D4F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number:          056E
Signing time:             Tue 12 Aug 2025 23:00:42 +0000
Manifest this update:     Tue 12 Aug 2025 23:00:42 +0000
Manifest next update:     Wed 13 Aug 2025 23:00:42 +0000
Files and hashes:         1: FDrMY25luzUgEicNY75FE-uO2tw.roa (hash: fjlUWgHKI2vkNS9JhhFgEKy2oBhGIJFwaeJzp29a1Pc=)
                          2: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: JFxemSir7mGgVQKoYsVlrp4lP/eN/SxVGKRQdeYa2o8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:83:b2:fc:0f:ba:85:b1:bc:0f:dd:cc:49:3d:4f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
        Validity
            Not Before: Aug 12 23:00:42 2025 GMT
            Not After : Aug 13 23:00:42 2025 GMT
        Subject: CN=f0c29dcc529f0af4287f619ce2b24fdef09b2cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:9e:7e:e1:53:e4:5c:95:f4:b1:41:56:66:
                    29:99:fb:70:c9:eb:ee:3d:1a:49:e5:e3:03:d3:10:
                    c3:14:9e:5f:3c:cc:39:69:d1:83:d2:6c:fe:e9:36:
                    6e:42:fe:db:1a:31:33:7e:18:cf:4e:cd:1e:f1:42:
                    81:6d:a2:d4:34:f1:f5:d5:39:83:7d:70:00:fa:2d:
                    55:4e:5c:3d:58:bc:38:49:f4:7a:96:17:32:26:d2:
                    34:0d:88:18:38:5d:19:f9:74:40:8c:eb:a0:ef:18:
                    5a:e4:12:87:62:5b:d9:60:5f:c9:e6:2c:2e:97:a6:
                    3a:d0:25:83:b1:8a:ed:ed:83:ec:dc:82:a3:a7:7f:
                    d2:7c:cf:90:ce:3f:c5:50:c2:cd:1f:64:3f:fe:46:
                    3f:b3:ff:83:f6:48:0f:3a:ae:f2:31:d8:ca:cf:10:
                    4b:df:c9:0b:7d:af:2d:2f:69:d2:bf:2d:26:5a:9d:
                    80:6a:08:62:7a:52:5b:a0:23:8e:a4:08:09:ac:25:
                    73:c1:fc:40:ae:66:13:45:46:86:6f:c3:5b:ef:6f:
                    9e:c7:2d:de:14:3d:49:b2:da:da:53:58:59:ee:f8:
                    9e:b3:e8:95:1c:5b:60:ed:e0:3c:6e:ff:50:2c:d9:
                    1a:98:ff:12:be:46:48:ee:bc:f9:03:45:bf:ce:68:
                    4b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C2:9D:CC:52:9F:0A:F4:28:7F:61:9C:E2:B2:4F:DE:F0:9B:2C:FB
            X509v3 Authority Key Identifier:
                keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2b:53:ed:04:eb:23:54:1b:77:1a:11:2e:3c:da:cf:29:ad:
         cb:4a:ff:b1:8c:26:97:71:41:71:5d:f8:44:01:31:13:46:f9:
         f4:cf:04:12:c9:9a:dc:d6:1d:3b:ab:a0:bc:47:b1:fa:b6:cb:
         5c:05:ac:d0:2d:f0:13:56:9b:77:ff:c2:15:c1:f3:32:da:2b:
         ad:7e:9d:cd:56:6e:bf:9b:13:d4:81:11:ec:b5:e9:9a:3b:82:
         65:96:ce:32:63:fb:89:15:f3:28:de:4d:32:92:1a:1d:0f:43:
         3a:31:87:70:13:a5:2a:0a:4b:b3:8f:43:a3:d1:c4:60:0b:9a:
         fd:14:31:56:f4:63:d9:98:f5:ff:7c:3e:db:5b:a8:ce:c2:3b:
         52:b9:27:39:c5:28:65:b7:36:eb:73:ec:d1:fc:7b:12:0c:ab:
         ff:14:a7:70:1a:4f:04:d3:5c:13:25:a3:ba:41:01:5a:92:68:
         d5:76:4b:b0:3f:3c:01:06:d8:24:5d:b4:36:26:b6:b3:9a:07:
         93:d5:b0:b4:47:fa:1a:d1:69:ad:8c:cd:db:95:6e:62:6f:3c:
         6d:df:23:31:34:38:5c:68:02:97:bb:fd:10:a0:30:e2:32:f8:
         6e:f6:e4:f4:85:f2:e4:0b:98:37:aa:3a:6c:47:ca:c0:35:68:
         69:65:82:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:43 2025 by rpki-client