Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
File:                     H65TutIFt6PYV3Frsky_DVW_D2w.mft (raw, json)
Hash identifier:          OadN3fmdg6HBBskwH2+0SMeDva+peY/j/Kf2yTQp5x8=
Subject key identifier:   8F:96:22:52:AF:86:1F:3D:CB:0F:04:9F:27:07:51:02:21:1D:88:04
Authority key identifier: 1F:AE:53:BA:D2:05:B7:A3:D8:57:71:6B:B2:4C:BF:0D:55:BF:0F:6C
Certificate issuer:       /CN=1fae53bad205b7a3d857716bb24cbf0d55bf0f6c
Certificate serial:       0198D473F3ED6772A448B12DDF5A05200958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
Manifest number:          09FE
Signing time:             Sat 23 Aug 2025 01:03:45 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:45 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:45 +0000
Files and hashes:         1: H65TutIFt6PYV3Frsky_DVW_D2w.crl (hash: SRxosOD/gO5Ct5hFqlThMQ+rxQ1MpQ8xniUOkH6z2to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:f3:ed:67:72:a4:48:b1:2d:df:5a:05:20:09:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fae53bad205b7a3d857716bb24cbf0d55bf0f6c
        Validity
            Not Before: Aug 23 01:03:45 2025 GMT
            Not After : Aug 24 01:03:45 2025 GMT
        Subject: CN=8f962252af861f3dcb0f049f27075102211d8804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:b0:8e:7d:8d:d7:36:59:ec:68:af:31:da:
                    5a:82:63:46:7f:d3:8a:d6:42:70:7f:7c:5f:6f:72:
                    4c:92:52:bb:90:c1:a2:84:0f:5c:4a:ec:62:52:ca:
                    74:30:65:b0:ab:c2:c7:50:83:ad:a2:66:ce:64:f0:
                    2f:fd:97:b5:13:d3:f2:9f:6d:15:ae:0d:f1:a6:9b:
                    3e:6d:9d:f4:a3:2f:53:c7:73:e4:3b:48:83:e0:64:
                    bb:21:44:88:d7:9b:39:da:9c:5e:48:8f:7d:7a:1e:
                    d7:19:3b:02:32:38:e7:21:bd:aa:8d:7e:62:4c:58:
                    bf:1a:b3:3f:94:aa:55:4e:b0:7b:83:4f:e8:75:c3:
                    9f:46:bb:2a:e3:74:4d:0a:35:10:f3:7a:48:2f:41:
                    f9:b4:49:05:41:a8:fa:10:50:cd:a5:7b:50:e1:fc:
                    d1:b1:79:70:13:41:c6:87:6e:ba:34:7f:8c:0d:b4:
                    48:85:6d:6e:97:42:9d:f9:a5:d6:63:be:93:36:6a:
                    6c:88:b3:5e:7f:38:e0:80:64:65:f9:46:eb:9b:49:
                    8b:37:95:03:23:93:8a:d7:f6:55:73:71:36:48:1d:
                    e9:a9:14:25:37:6b:6b:b2:20:0f:18:c2:3a:9f:46:
                    14:99:7f:06:1b:13:69:24:96:be:a7:53:55:7b:a2:
                    70:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:96:22:52:AF:86:1F:3D:CB:0F:04:9F:27:07:51:02:21:1D:88:04
            X509v3 Authority Key Identifier:
                keyid:1F:AE:53:BA:D2:05:B7:A3:D8:57:71:6B:B2:4C:BF:0D:55:BF:0F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8c:ad:3c:40:98:03:a3:fc:1c:f4:8a:3e:94:01:1f:fa:3b:
         8c:73:29:6b:c9:d7:69:04:ce:65:bf:ed:aa:57:43:81:cc:b9:
         d8:fb:ec:df:11:51:e0:6f:ef:2b:28:cc:a9:b3:0a:df:93:72:
         d7:37:c9:a6:23:e4:0e:eb:85:80:f3:87:da:d4:1d:40:63:3d:
         f8:77:03:66:8f:4d:ec:8b:86:c1:e4:df:63:a5:d6:c5:16:c0:
         40:96:c2:35:9b:db:ca:c6:a0:7d:fe:0e:c9:21:cf:bb:d5:a8:
         d4:6b:2e:7a:44:a7:60:fd:f8:e2:b0:43:c5:6d:5e:4b:7a:9d:
         19:68:9c:31:c5:4d:7b:13:4b:7f:9e:ea:38:10:09:22:d9:ae:
         50:55:b2:88:c2:d2:1c:59:f5:82:38:76:52:e9:0e:51:b7:dd:
         09:4f:27:7d:82:29:1b:7e:14:9a:23:09:44:bb:cc:49:9e:44:
         a8:5c:0b:37:10:a0:c6:1c:de:8e:65:7b:24:c6:fe:ff:31:10:
         1a:6f:65:8a:36:5d:87:2c:71:1b:8f:54:d7:58:76:33:6f:7f:
         4d:ae:fe:b9:4b:c0:53:f6:88:c9:92:64:6a:fe:d3:24:a3:5b:
         a7:7b:1a:8f:2e:46:40:85:04:65:ed:7c:a9:e2:84:e3:58:54:
         81:47:37:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----