Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
File:                     ftjlhnV1ut-0FwacbZAaCR2EvzE.mft (raw, json)
Hash identifier:          gvBJTmtohFKfOI00lpkpCLElGPp6jFif+6EOUFLzY8E=
Subject key identifier:   FF:F6:43:A7:C3:CC:7B:F3:19:B0:2B:B3:82:72:CA:53:20:BF:41:93
Authority key identifier: 7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31
Certificate issuer:       /CN=7ed8e5867575badfb417069c6d901a091d84bf31
Certificate serial:       0198978118FD4EEC4FB3CDC155C885E4BDDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
Manifest number:          011D
Signing time:             Mon 11 Aug 2025 05:01:16 +0000
Manifest this update:     Mon 11 Aug 2025 05:01:16 +0000
Manifest next update:     Tue 12 Aug 2025 05:01:16 +0000
Files and hashes:         1: ftjlhnV1ut-0FwacbZAaCR2EvzE.crl (hash: MlylA0DcsE6bRQlGMDyOXUEeOgoZkICmZ07eHck2mtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:81:18:fd:4e:ec:4f:b3:cd:c1:55:c8:85:e4:bd:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed8e5867575badfb417069c6d901a091d84bf31
        Validity
            Not Before: Aug 11 05:01:16 2025 GMT
            Not After : Aug 12 05:01:16 2025 GMT
        Subject: CN=fff643a7c3cc7bf319b02bb38272ca5320bf4193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2c:42:a0:27:f7:5b:af:ac:3e:88:df:aa:ec:
                    91:d4:ca:2a:4f:00:e7:d0:7f:d8:5d:a9:4c:6d:1e:
                    7c:4f:bb:72:71:e2:74:9a:2a:40:6f:ec:9e:80:2b:
                    0e:07:1c:74:2f:9d:a6:80:bc:2c:10:c4:59:a6:f3:
                    97:97:3b:48:a0:36:d7:8d:07:b3:54:b3:23:91:7f:
                    c6:85:39:23:0e:fe:c9:91:7a:f6:33:d9:af:9f:b4:
                    bf:92:2c:26:82:26:fe:b5:60:7c:d9:d5:bd:38:9a:
                    c1:52:6d:01:6f:ab:b4:16:8a:d5:44:c1:a6:ed:e1:
                    ab:46:0f:a4:bd:ca:42:fb:50:ac:27:64:a0:e2:27:
                    10:99:f7:27:1e:cf:30:ac:8e:57:b7:ef:fb:1c:84:
                    f1:c6:dd:e9:94:b2:d2:d2:a7:54:93:04:1f:91:5a:
                    8e:a8:f1:a6:f9:ac:49:2e:b1:4d:f2:07:76:94:07:
                    8e:16:ed:5e:0c:0c:a6:d9:67:f5:14:67:9f:7b:2a:
                    13:d8:10:25:72:53:40:45:fe:1f:b5:df:9f:76:b8:
                    4e:1d:5d:18:16:f2:28:a4:c6:43:9f:d6:f1:1c:c9:
                    2a:a0:3f:30:b5:60:cc:c5:44:28:30:e6:20:5b:97:
                    20:45:4b:ba:09:e8:e3:ad:90:7f:15:07:fa:3c:ba:
                    f7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F6:43:A7:C3:CC:7B:F3:19:B0:2B:B3:82:72:CA:53:20:BF:41:93
            X509v3 Authority Key Identifier:
                keyid:7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:aa:ff:16:a4:1e:04:8d:05:95:ae:ca:00:1b:93:b3:25:05:
         13:ed:5b:0d:0d:e5:b8:28:dd:54:7f:3e:aa:e3:38:ee:2f:0e:
         fb:05:ac:b8:67:0e:9a:63:92:ac:62:59:ef:ff:08:95:ec:5d:
         ad:67:a6:67:36:7f:e3:02:1d:f9:a1:8d:ef:ab:37:8d:fd:85:
         c0:e9:be:18:b5:73:75:99:99:ab:89:ec:57:71:83:db:06:bd:
         63:e4:bc:5a:8c:93:43:ef:9b:97:fb:e0:13:31:61:97:a3:e9:
         d4:b3:e4:9c:52:3d:ae:9f:33:df:97:84:b5:80:52:10:28:c2:
         80:56:51:3e:a4:d4:9a:c7:be:b1:f9:8b:57:9a:5b:e7:ba:76:
         f6:3f:ec:56:1a:45:6c:07:17:b8:9d:21:e0:91:9b:98:40:ef:
         cc:6d:77:5a:96:48:60:44:65:eb:bc:a2:4d:d1:34:71:92:d7:
         91:0f:cb:ed:b6:73:93:b1:ea:2a:2a:ec:6b:ae:57:3b:0f:e9:
         5f:ad:c1:9a:c4:ed:cf:5c:dd:22:b0:15:3a:03:20:de:84:1f:
         56:86:b5:ac:fd:3b:72:a6:f2:29:82:28:0b:29:1d:5c:f8:a9:
         7b:59:54:14:7c:45:e8:55:ff:db:22:d9:de:82:23:c1:60:cc:
         65:4e:67:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:57:04 2025 by rpki-client