Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
File:                     Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft (raw, json)
Hash identifier:          sY67uFEUzpFjgMqYe2ntBkaX8AzCaDc5LW6X5WMEfrc=
Subject key identifier:   F1:25:FD:54:52:D0:84:D2:45:FE:53:CF:6E:9E:5D:50:05:99:71:A6
Authority key identifier: 63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1
Certificate issuer:       /CN=63850055f27ec40756297ffcd759eb861eef73c1
Certificate serial:       0198D47246486B7502FCF1A77314F15D47B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
Manifest number:          FD
Signing time:             Sat 23 Aug 2025 01:01:55 +0000
Manifest this update:     Sat 23 Aug 2025 01:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 01:01:55 +0000
Files and hashes:         1: Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl (hash: 1B0g625g6+FCAmA5O6A6mdCi0b4neMwEG84cy5fzz3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:46:48:6b:75:02:fc:f1:a7:73:14:f1:5d:47:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63850055f27ec40756297ffcd759eb861eef73c1
        Validity
            Not Before: Aug 23 01:01:55 2025 GMT
            Not After : Aug 24 01:01:55 2025 GMT
        Subject: CN=f125fd5452d084d245fe53cf6e9e5d50059971a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:74:a8:fe:e0:de:13:f2:e8:35:ba:c9:43:49:
                    4a:55:30:33:ef:70:1b:22:15:01:7e:d0:89:0a:b6:
                    18:a6:86:3a:d9:14:0d:de:30:23:b4:88:ea:cc:14:
                    49:18:bc:8d:99:d5:d6:8c:0b:fb:b3:95:be:84:85:
                    57:ff:d2:d5:30:4f:8f:48:ee:21:10:74:58:91:91:
                    1a:34:8c:93:59:fc:cb:d7:1b:42:ed:e5:80:7d:6b:
                    06:48:27:17:6b:95:d6:bc:6c:8c:bc:43:68:14:d0:
                    e7:e7:a0:22:ae:d5:68:e6:15:9a:34:39:aa:20:9b:
                    89:c6:15:6c:d7:e7:24:df:6f:7a:c1:40:9a:b8:23:
                    4b:fd:6f:52:a5:53:d0:a2:93:00:84:ef:06:a5:a0:
                    0b:31:01:14:3c:8e:47:db:10:4b:f8:3f:8a:51:f8:
                    03:48:e3:43:57:db:61:06:63:b1:39:17:79:7b:ec:
                    ae:ca:4b:41:7a:ed:02:e5:13:35:88:91:4c:52:7f:
                    79:7e:44:d8:3e:f1:58:ba:2d:bd:ad:71:93:d8:ef:
                    54:e5:04:d8:73:e7:2a:07:1f:8c:5c:96:52:67:79:
                    d1:de:3d:fc:66:46:34:69:85:0e:92:57:b7:d5:b6:
                    72:b4:57:ca:60:59:ee:a1:a3:b4:26:83:1c:93:a0:
                    e1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:25:FD:54:52:D0:84:D2:45:FE:53:CF:6E:9E:5D:50:05:99:71:A6
            X509v3 Authority Key Identifier:
                keyid:63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:cf:fe:e9:47:bd:dc:98:83:f7:22:39:da:35:a5:e9:5a:7d:
         89:c3:4a:61:3d:0e:61:86:01:74:ac:25:9b:71:f2:c4:b7:ed:
         e3:c2:0e:6e:e9:40:e0:c2:b6:81:c9:14:72:e8:84:11:e9:ac:
         64:e6:27:55:46:8a:9f:d9:7b:d4:51:ca:f2:db:3d:b4:ba:c1:
         b9:93:df:c7:e8:22:ca:60:e5:de:f0:aa:12:b7:06:af:98:d5:
         03:aa:aa:7a:fa:2d:79:51:f2:dd:ba:e2:a9:85:8d:37:2b:27:
         16:8d:18:de:a1:88:ac:35:3f:1b:aa:f4:ec:93:ee:17:8d:0d:
         8e:9f:6a:14:20:72:99:5a:c5:dc:c3:ca:c7:c4:55:9b:96:b7:
         a2:9e:78:14:e4:f6:06:8d:01:4e:93:01:bb:0d:98:6b:11:2a:
         9e:66:98:fb:05:03:94:e9:72:65:f1:0c:3c:24:91:f7:4a:f0:
         e2:1b:31:c4:76:7f:7e:7d:b4:b3:fe:be:58:74:fa:b8:12:bc:
         ed:b3:b1:f2:ef:86:5a:ec:89:36:11:80:fb:bd:86:58:34:d1:
         42:53:57:da:83:f3:d3:bb:b3:48:3a:a8:f4:e0:4e:8c:c9:04:
         a7:50:e4:a5:45:83:68:4a:31:ab:14:eb:04:25:c7:74:be:f7:
         b8:ca:01:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----