Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File:                     FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier:          po/dRe0Bczo11PzFq2VWuDRMe1Zx/VwtXZLjl8J8Mzg=
Subject key identifier:   63:1D:49:AA:A7:19:2F:63:8F:8F:08:DD:11:83:06:67:D7:3A:EE:8F
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer:       /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial:       0197B5C4E13915830EF009125AB874F8F4CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number:          0E28
Signing time:             Sat 28 Jun 2025 09:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:07 +0000
Files and hashes:         1: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: PjvXQpDuETmLjNhaBIbXBQ7ogjSzC/X2twuWVLelPQI=)
                          2: f0fm_m6mqyncGFPg2zPkibsoBcI.roa (hash: R5AqcJr/crlHYVpexq/9b2IVn+Dod1jCAKFqkiICDJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:e1:39:15:83:0e:f0:09:12:5a:b8:74:f8:f4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
        Validity
            Not Before: Jun 28 09:01:07 2025 GMT
            Not After : Jun 29 09:01:07 2025 GMT
        Subject: CN=631d49aaa7192f638f8f08dd11830667d73aee8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:98:c1:35:ab:50:a4:79:89:59:b6:ac:23:
                    19:11:22:e8:9f:d0:2e:64:f4:a5:de:df:16:96:a0:
                    70:ef:b4:df:eb:d9:33:5f:1d:86:a4:47:13:a7:9d:
                    ae:da:1b:35:79:99:4e:30:66:58:3a:d1:d6:c0:2b:
                    ee:e7:61:4a:d1:42:7a:0a:9b:2f:41:9c:04:81:65:
                    24:f0:cf:9b:9b:db:f6:95:27:6a:35:ed:2a:3a:b3:
                    28:a0:ac:20:10:81:69:45:ae:ab:02:5e:fa:d3:21:
                    2d:f5:3e:cc:bd:41:86:1f:3d:66:e9:82:c0:2e:ac:
                    69:8d:53:c5:13:83:f8:c7:0f:1d:b0:06:d4:b4:e7:
                    9b:82:35:4e:6c:b1:29:d9:83:b1:b3:e9:b2:ba:95:
                    91:de:33:a4:15:75:1e:32:6e:10:a9:cb:c7:e3:1d:
                    bd:ee:2d:3f:fe:c2:42:83:7e:01:ca:46:e1:ab:8f:
                    92:e0:39:a6:39:08:57:e1:19:3d:9d:3b:a9:67:b9:
                    aa:c7:9d:7d:5a:bb:a7:66:d8:02:c7:36:2a:47:bb:
                    e9:b6:be:df:e6:2f:ad:76:bd:38:3d:a6:47:49:64:
                    85:8e:15:b8:d4:81:5e:39:80:22:54:de:f6:3e:50:
                    80:70:90:49:5b:b7:82:d4:cd:cd:9a:c2:45:74:42:
                    d2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1D:49:AA:A7:19:2F:63:8F:8F:08:DD:11:83:06:67:D7:3A:EE:8F
            X509v3 Authority Key Identifier:
                keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:52:fa:7a:63:f1:13:c6:63:1b:27:d3:ac:0b:73:e5:6d:6a:
         3d:85:d5:09:53:ff:84:f5:9c:95:e2:c1:e1:04:36:04:bd:e7:
         b0:50:a4:52:4e:94:80:89:31:d4:e3:b8:a4:e0:8a:f9:b0:e8:
         96:09:c9:b8:af:8e:b7:5b:ee:6e:7c:90:91:40:0d:ba:62:1c:
         e8:15:10:6a:0d:11:09:c7:a8:7e:3c:cc:8a:b9:8b:32:1a:b0:
         8a:fa:34:6c:17:c9:56:21:18:21:1a:c6:f4:27:c1:04:10:4c:
         6c:4e:ab:89:37:b9:66:a0:77:61:93:81:db:3d:d0:11:1e:98:
         cc:3e:0a:a0:b7:0d:02:cf:6c:76:cf:f0:3b:78:a5:dc:63:13:
         e7:7d:4b:73:76:b0:a5:33:e4:cc:90:ed:92:5e:8f:d4:38:54:
         7d:8a:58:58:35:e0:3e:47:76:e4:fc:4f:72:22:9e:75:f8:a0:
         d3:67:9b:45:4a:9b:92:07:f1:b9:7b:1c:a7:fb:fa:47:3f:a1:
         1f:c9:ee:9f:41:ff:39:db:9f:d9:5e:4a:62:d6:90:0b:2f:26:
         07:a3:4d:78:94:c2:3c:32:ef:56:80:df:97:00:9b:a6:e7:f1:
         13:5e:e4:85:54:95:48:b5:88:12:27:7b:50:dd:83:db:a9:8e:
         a1:58:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:13 2025 by rpki-client