Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
File:                     ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft (raw, json)
Hash identifier:          vF9B/KHe5hLv/tJzwzLvZcFJwnXV7D7kraJ4Cj08UW8=
Subject key identifier:   C5:6A:7D:E8:5A:56:50:8C:CB:0A:A9:9B:6F:A2:C9:4B:1E:BB:69:20
Authority key identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
Certificate issuer:       /CN=7ed77eafdb387afd17574272c9374c8180370f52
Certificate serial:       0198D404675C6CCDDC1CE0E50D1D24876B8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
Manifest number:          FD
Signing time:             Fri 22 Aug 2025 23:01:55 +0000
Manifest this update:     Fri 22 Aug 2025 23:01:55 +0000
Manifest next update:     Sat 23 Aug 2025 23:01:55 +0000
Files and hashes:         1: ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl (hash: U1K5x4/tyA8M71ZzyhL3XuK6rddzQYizL0JkdEYF31w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:67:5c:6c:cd:dc:1c:e0:e5:0d:1d:24:87:6b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed77eafdb387afd17574272c9374c8180370f52
        Validity
            Not Before: Aug 22 23:01:55 2025 GMT
            Not After : Aug 23 23:01:55 2025 GMT
        Subject: CN=c56a7de85a56508ccb0aa99b6fa2c94b1ebb6920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8f:83:de:5c:38:c7:aa:27:a5:c4:77:45:e6:
                    24:89:29:e9:18:91:a4:c0:54:f5:20:ed:59:a5:5e:
                    16:99:17:53:e8:5b:39:66:af:10:3a:6e:50:ab:ae:
                    dc:e2:a0:4a:43:c4:b9:61:86:ef:04:07:9f:43:22:
                    a0:f7:5b:6f:1f:65:b1:95:9c:af:e4:c7:07:17:e2:
                    c7:b1:88:d3:6e:78:3e:ff:9d:4a:e1:17:e7:8c:8c:
                    0d:36:e9:fd:30:2c:54:1c:5a:69:74:60:41:f4:3a:
                    54:65:29:d6:ff:50:db:b0:14:15:12:d8:0f:94:9b:
                    2e:16:cc:8d:8a:16:8a:35:a8:35:38:3f:be:8a:04:
                    38:05:d2:b3:99:17:61:f5:9d:d7:49:84:02:cd:c5:
                    05:ee:f5:2d:58:a9:4a:be:04:41:97:27:98:fa:0f:
                    fa:f3:d9:29:5e:ef:95:b8:0e:19:43:48:65:6d:18:
                    9a:fd:77:0d:31:0e:a0:2c:50:11:03:bc:88:98:b1:
                    8a:38:59:4b:f6:fc:65:84:4f:6c:9e:82:4a:19:10:
                    cc:3b:8c:a8:b3:55:a5:68:fd:c5:ce:d6:a2:47:1a:
                    5d:16:8f:81:86:0d:72:22:ee:8c:ab:dc:14:0e:bf:
                    80:a3:81:dd:25:1a:bb:94:09:74:78:01:ca:0a:c1:
                    e2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6A:7D:E8:5A:56:50:8C:CB:0A:A9:9B:6F:A2:C9:4B:1E:BB:69:20
            X509v3 Authority Key Identifier:
                keyid:7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5b:ef:77:ee:1f:6c:27:8f:b0:b8:62:7c:b8:af:17:8c:c0:
         ad:fe:90:7b:7a:da:97:69:a7:38:8e:a0:c2:88:4e:75:d8:75:
         ea:18:48:ce:1e:f0:0c:2c:b4:10:dd:0b:fd:7d:0c:43:6b:cb:
         61:3f:a0:ad:89:3d:04:b5:af:eb:3f:0b:6f:b4:c5:5f:54:f9:
         fb:05:04:4c:f0:ea:e8:ea:0e:39:4a:c7:cc:8c:20:85:72:bc:
         a0:fa:77:3c:e4:f7:6d:0a:67:e2:88:e6:e5:fe:1e:8b:da:34:
         3a:33:28:e7:fc:17:aa:0e:1f:1b:f1:5b:ea:17:29:30:e3:68:
         90:c1:2d:5e:9d:ec:dc:5d:28:0f:aa:55:da:e4:85:4b:83:df:
         95:05:34:c2:aa:7a:72:b8:51:ec:c6:fd:6a:f7:69:e1:20:0e:
         e6:bf:7d:fe:11:0e:de:10:0b:de:c8:0b:5f:6d:52:c8:ae:5d:
         2e:91:f8:63:cf:c5:ac:00:f0:99:38:07:8c:a4:96:53:36:9f:
         11:63:0b:09:0a:a1:65:7e:fc:3f:ae:52:c4:90:93:94:31:3e:
         06:64:b6:8d:6f:aa:c2:db:a2:e6:bc:33:0c:30:52:94:ed:c3:
         b0:94:cf:b2:9d:9c:39:87:21:cc:7b:7b:97:73:5f:c1:d6:36:
         10:d2:06:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:24 2025 by rpki-client