Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
File:                     FocxkXFwxLgb7jUdBFXDLLrWOyY.mft (raw, json)
Hash identifier:          STqQ4sqC7d7AH80BG0MEi5GSb7Yla3LSUgdAJ3Yv7Ms=
Subject key identifier:   7C:41:63:69:BF:21:59:3B:E2:E4:23:86:5C:2B:71:99:D2:18:B3:C1
Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
Certificate issuer:       /CN=168731917170c4b81bee351d0455c32cbad63b26
Certificate serial:       0198D5BC46F2263B2C2554C1A4F2F6D6772E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
Manifest number:          0D3F
Signing time:             Sat 23 Aug 2025 07:02:22 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:22 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:22 +0000
Files and hashes:         1: FocxkXFwxLgb7jUdBFXDLLrWOyY.crl (hash: o73cNTh0G9aN+OJpCRydd2kpU2qhHnI8RtZLc6Luz7o=)
                          2: LhUj1mCFxgCVgOclN_x_EPQsaaM.roa (hash: TwspggDMx9eKuIFMwLPIl1QzksuuFso9cmuKcnRQwY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:46:f2:26:3b:2c:25:54:c1:a4:f2:f6:d6:77:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26
        Validity
            Not Before: Aug 23 07:02:22 2025 GMT
            Not After : Aug 24 07:02:22 2025 GMT
        Subject: CN=7c416369bf21593be2e423865c2b7199d218b3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:dc:a1:27:78:f6:b5:fb:55:e7:4e:dc:60:
                    23:36:5b:b4:fd:ea:dc:cf:18:24:9b:fa:17:9e:2e:
                    c8:ae:15:50:49:d3:42:f0:b3:8f:8b:cd:80:56:53:
                    0d:8e:6e:4d:14:80:67:b7:cf:02:ea:b1:f7:cb:26:
                    06:7d:71:b4:33:f2:f1:ab:a6:bc:eb:87:79:26:ff:
                    1d:4a:f1:ee:8e:84:e6:8f:c0:d8:d5:78:84:a7:88:
                    75:3a:2e:f5:bd:55:3c:5e:70:d6:63:31:93:c3:85:
                    8e:63:0b:e4:8a:c7:9b:8f:c0:ef:cb:b2:cf:fb:61:
                    d3:70:0a:12:e5:7c:ff:ab:89:6a:80:0d:53:3a:ac:
                    d1:87:d2:d3:df:e2:d4:21:fd:e3:2c:60:ea:ad:e6:
                    a2:09:7c:e0:f8:f8:70:36:53:d0:0b:e2:90:46:f4:
                    52:8f:31:f9:79:02:b3:79:f4:00:53:0e:6b:7d:32:
                    65:db:bb:1b:be:8c:dd:2f:eb:56:08:f2:9b:25:ce:
                    d7:98:23:7a:ba:8a:09:8e:b1:27:18:1e:df:94:88:
                    06:5c:0f:4a:9a:f3:4e:de:c1:6d:d7:fe:cd:3d:8b:
                    16:48:70:23:0d:b3:f2:c8:06:17:df:20:10:e4:08:
                    b7:b8:e2:b3:ae:da:f0:f2:9b:75:20:de:43:ae:a9:
                    bd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:41:63:69:BF:21:59:3B:E2:E4:23:86:5C:2B:71:99:D2:18:B3:C1
            X509v3 Authority Key Identifier:
                keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:5a:3c:d9:a1:84:e3:cb:62:f0:88:90:7c:38:a4:16:e4:85:
         ef:c2:6f:28:b7:5f:9a:88:e1:4f:9f:c9:7f:93:e2:f6:4b:64:
         7b:b0:f7:03:33:ad:48:fc:12:52:cf:19:ba:c8:c2:21:03:c2:
         db:ea:d1:ac:da:28:a7:48:59:73:a5:ad:9e:6e:03:eb:18:5f:
         38:5d:cf:0e:29:ad:2d:eb:fe:09:d2:0c:9a:a5:e2:06:0b:b2:
         6b:69:f9:8e:40:8d:e4:f6:af:81:7c:78:14:fe:6d:c8:db:cc:
         c9:63:87:4b:13:2d:d8:dc:c9:2e:0c:2e:4c:0c:27:5d:e5:db:
         3e:3e:03:f8:37:ba:c0:f1:df:ad:fd:19:46:16:59:ed:ef:90:
         0b:67:ca:01:12:08:3e:7b:bf:3d:0a:c8:9c:9e:54:2e:2a:f8:
         ae:4f:fb:a6:96:0a:71:00:48:2c:95:19:f0:2b:66:61:6b:0b:
         1c:76:cc:1a:c0:ec:2d:33:ce:fe:c7:f6:97:1c:41:1a:da:e6:
         a0:2b:48:fd:ba:c0:33:d8:c4:3a:09:23:e9:f7:a2:01:8c:90:
         c7:69:60:19:c7:91:10:8a:4f:56:8d:78:c2:ef:d1:8f:02:7b:
         3e:c2:7b:52:5d:38:53:02:6e:cc:89:ce:e3:76:8c:2b:48:62:
         56:a6:ae:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:08 2025 by rpki-client