Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File:                     FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier:          8GMpLNpaSgZwwYe8bMeyu/HGj9pzr3QMTxRqj7wXsTM=
Subject key identifier:   0F:F4:03:71:32:47:CB:74:C4:65:3A:75:2A:78:E9:8B:51:46:2D:D8
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer:       /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial:       0199FCFD3D4FFFF6FD2C068A2F896B4D7386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number:          0F56
Signing time:             Sun 19 Oct 2025 15:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:18 +0000
Files and hashes:         1: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: f9U/0vmhrd4hgJo8dVWwAPrfujgEGJLhU5bPvR3ypyA=)
                          2: f0fm_m6mqyncGFPg2zPkibsoBcI.roa (hash: R5AqcJr/crlHYVpexq/9b2IVn+Dod1jCAKFqkiICDJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:3d:4f:ff:f6:fd:2c:06:8a:2f:89:6b:4d:73:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
        Validity
            Not Before: Oct 19 15:01:18 2025 GMT
            Not After : Oct 20 15:01:18 2025 GMT
        Subject: CN=0ff403713247cb74c4653a752a78e98b51462dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:ba:3d:b2:e2:23:c8:fd:48:77:76:57:68:
                    5b:6d:2c:16:31:47:78:56:8e:1e:69:49:0d:36:9c:
                    82:14:c4:22:b6:c6:da:af:b7:07:dc:b1:77:d4:a4:
                    c7:fc:b8:5a:5f:b3:8b:1c:c9:8c:e4:c4:bf:ed:db:
                    c2:f6:ce:2c:01:d1:4e:e1:5b:f4:e8:a5:30:cc:a2:
                    48:6f:74:2b:c2:f5:5b:2f:03:6d:bb:ec:6c:7f:7f:
                    50:11:00:07:16:e5:e3:13:46:1e:64:a6:bc:0a:a5:
                    f2:51:4d:e6:0a:1d:da:35:f6:a1:f2:1f:bb:7c:60:
                    9b:3b:99:2f:5b:fe:35:4a:ee:d8:34:fb:42:7c:c7:
                    e2:00:fd:18:bf:34:62:fa:81:6d:d8:68:07:a9:eb:
                    64:23:89:63:8b:54:1e:e9:bf:9a:32:6f:12:d1:97:
                    9c:a3:dd:dc:54:3b:a3:8c:4a:eb:a1:f1:6d:dd:f9:
                    67:77:b9:12:8f:66:8e:ab:21:ac:4e:f1:2f:d7:b3:
                    7c:f9:d6:5b:02:99:81:41:95:61:ea:5e:b1:18:15:
                    ef:dc:2c:ab:76:2d:ef:2b:13:e1:b8:e5:92:60:19:
                    2c:01:3e:fe:ab:b5:ad:42:0b:16:a8:ac:c6:be:45:
                    2c:c0:f6:38:a7:83:90:34:9f:96:bc:68:8b:71:0c:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F4:03:71:32:47:CB:74:C4:65:3A:75:2A:78:E9:8B:51:46:2D:D8
            X509v3 Authority Key Identifier:
                keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b1:07:a8:24:ce:bd:ba:94:66:81:78:3a:fb:8b:7f:13:88:
         a4:9e:0f:79:33:21:27:02:b4:c5:91:46:ff:d0:78:a3:59:bf:
         4c:0b:f8:2f:f1:ee:20:f2:64:54:32:3e:b5:f1:93:35:40:aa:
         c1:41:a7:e3:86:3e:fd:e0:16:da:58:b6:5f:4b:6e:fa:52:de:
         03:a9:ad:fa:52:72:d5:b7:23:88:ea:b1:7c:41:f4:3b:de:82:
         7f:32:12:24:57:67:c0:a5:87:f7:90:3f:6f:59:da:c8:e7:a8:
         cd:a0:c5:65:ef:2a:59:7b:a2:da:5f:35:bb:16:70:5a:5f:89:
         c4:62:36:4f:55:9e:c9:ae:42:80:80:4d:99:66:18:12:5b:e2:
         60:a8:2f:fa:57:88:1e:ba:d2:e4:a8:ab:9a:dc:8d:17:3b:82:
         3d:c2:66:54:1c:03:9e:57:1f:84:94:f4:40:53:c4:74:4d:ff:
         65:10:92:08:7f:8a:43:6e:05:48:65:37:d5:7b:bc:b3:e2:ea:
         9a:21:6d:d4:6e:84:8f:50:ea:5b:d1:c7:7c:86:66:dc:57:a3:
         da:b2:d5:6f:20:6b:34:52:d4:f1:15:45:86:96:8e:3b:0e:b3:
         09:b9:9e:59:1b:9a:a3:ca:17:a4:a9:73:a6:75:fe:e0:f4:67:
         1e:4d:71:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/T1P//b9LAaKL4lrTXOGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MjJlOTY3OGZiMGQ0MTRkMmRkZmJkMjQyMGM0Yzc0ODI2
M2YzNGIwHhcNMjUxMDE5MTUwMTE4WhcNMjUxMDIwMTUwMTE4WjAzMTEwLwYDVQQD
EygwZmY0MDM3MTMyNDdjYjc0YzQ2NTNhNzUyYTc4ZTk4YjUxNDYyZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYS6PbLiI8j9SHd2V2hbbSwWMUd4
Vo4eaUkNNpyCFMQitsbar7cH3LF31KTH/LhaX7OLHMmM5MS/7dvC9s4sAdFO4Vv0
6KUwzKJIb3QrwvVbLwNtu+xsf39QEQAHFuXjE0YeZKa8CqXyUU3mCh3aNfah8h+7
fGCbO5kvW/41Su7YNPtCfMfiAP0YvzRi+oFt2GgHqetkI4lji1Qe6b+aMm8S0Zec
o93cVDujjErrofFt3flnd7kSj2aOqyGsTvEv17N8+dZbApmBQZVh6l6xGBXv3Cyr
di3vKxPhuOWSYBksAT7+q7WtQgsWqKzGvkUswPY4p4OQNJ+WvGiLcQxLqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/0A3EyR8t0xGU6dSp46YtRRi3YMB8GA1UdIwQY
MBaAFBci6WePsNQU0t370kIMTHSCY/NLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hNmUxYjUtZTc4MS00MDE4LTk2MGIt
ODhjOTUxY2VlNzg0LzEvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hNmUxYjUtZTc4MS00MDE4LTk2MGItODhjOTUxY2VlNzg0
LzEvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbEHqCTO
vbqUZoF4OvuLfxOIpJ4PeTMhJwK0xZFG/9B4o1m/TAv4L/HuIPJkVDI+tfGTNUCq
wUGn44Y+/eAW2li2X0tu+lLeA6mt+lJy1bcjiOqxfEH0O96CfzISJFdnwKWH95A/
b1nayOeozaDFZe8qWXui2l81uxZwWl+JxGI2T1Weya5CgIBNmWYYElviYKgv+leI
HrrS5KirmtyNFzuCPcJmVBwDnlcfhJT0QFPEdE3/ZRCSCH+KQ24FSGU31Xu8s+Lq
miFt1G6Ej1DqW9HHfIZm3Fej2rLVbyBrNFLU8RVFhpaOOw6zCbmeWRuao8oXpKlz
pnX+4PRnHk1xog==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:46 2025 by rpki-client