Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
File:                     fySblURiBoP5SziKdVGmimST7RI.mft (raw, json)
Hash identifier:          elPUlmWflXhYhxiJdwfuKD+TsURth1MNIGmW2ixl6Lg=
Subject key identifier:   AB:1E:C8:FD:C3:62:17:99:6A:10:C5:60:47:ED:8E:E6:7F:FC:24:43
Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
Certificate issuer:       /CN=7f249b9544620683f94b388a7551a68a6493ed12
Certificate serial:       0198D5BBDED966E96D3C685F5027277A403A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
Manifest number:          0279
Signing time:             Sat 23 Aug 2025 07:01:55 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:55 +0000
Files and hashes:         1: fySblURiBoP5SziKdVGmimST7RI.crl (hash: uNdn7DQbHi27COcu65jJkrhLSw2sUKueBtuLsw/rg/c=)
                          2: h7ETLfyQmL_b22CUnmqfJbv8XcU.roa (hash: GvscP45iqYd2rs4fdmtdGUU7bJ6EyKUaKDdAzQiywgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:de:d9:66:e9:6d:3c:68:5f:50:27:27:7a:40:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12
        Validity
            Not Before: Aug 23 07:01:55 2025 GMT
            Not After : Aug 24 07:01:55 2025 GMT
        Subject: CN=ab1ec8fdc36217996a10c56047ed8ee67ffc2443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:c2:17:7d:b9:c7:9b:8a:e6:9c:bd:93:0e:
                    e7:16:20:13:86:59:ca:e5:04:78:48:10:9b:31:f6:
                    2e:4a:29:9b:15:5d:e0:4e:af:23:6e:8b:c8:65:cd:
                    9c:55:a1:42:af:80:b5:14:5c:93:e4:8e:8b:b4:c8:
                    5a:44:71:28:25:99:43:4f:79:e1:71:08:af:67:73:
                    6d:ad:6f:f7:77:48:be:91:8c:1b:09:cc:ca:53:f8:
                    36:9b:b4:18:ec:c1:79:65:5c:46:f4:08:bb:41:8d:
                    6e:64:85:79:7d:e4:84:84:c2:4e:79:0b:09:c2:38:
                    35:fd:10:8e:7a:a0:30:8c:96:f2:0d:74:65:e2:a4:
                    b4:3f:21:5b:d1:dc:98:eb:f3:0f:21:81:4e:48:b4:
                    26:61:1c:79:5c:a2:41:4f:77:a8:94:a4:d8:ce:4d:
                    4c:b8:81:ec:f1:58:bd:9e:02:c8:c4:3d:91:70:a7:
                    7e:0e:51:f4:d0:27:e8:0d:18:f3:2b:44:be:fe:22:
                    e7:ea:9e:b4:c1:80:af:4f:3a:fc:f2:88:59:cf:bb:
                    36:38:1f:2b:80:b0:2c:09:5d:b9:de:90:82:42:35:
                    3b:31:08:9f:c5:7a:9d:93:cf:b9:87:f1:9e:c0:9c:
                    6d:62:3a:58:fe:39:27:a1:09:22:4e:0c:b5:75:52:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1E:C8:FD:C3:62:17:99:6A:10:C5:60:47:ED:8E:E6:7F:FC:24:43
            X509v3 Authority Key Identifier:
                keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0f:5e:c8:ca:cf:ec:be:02:9b:83:0c:38:e6:4d:b7:c4:b1:
         64:a3:7d:d8:a4:16:7e:1d:84:92:fc:98:5a:4f:b6:ef:e2:00:
         42:29:c3:f5:17:cd:98:53:1b:65:51:86:1e:2a:4e:07:d3:95:
         01:1e:fd:8e:27:00:79:d4:c9:1a:82:93:5b:9d:6c:fd:0c:36:
         41:ea:03:b3:07:b9:f7:a1:77:26:c6:17:46:02:35:7c:ff:2d:
         40:e3:21:ff:d6:59:65:d9:c6:7d:ba:54:97:78:7e:78:5a:c5:
         18:c2:26:74:50:33:b5:7a:99:e3:69:63:a8:35:c8:79:cf:9a:
         71:2b:ee:2a:c9:5c:18:5d:89:61:84:53:58:7a:9d:0d:11:c3:
         9f:a2:57:ea:20:65:d4:e9:0b:54:1f:d8:0c:23:e1:f9:94:ca:
         fa:96:4f:ed:36:7f:ca:9d:d6:04:c4:b3:cb:7f:80:10:e6:0c:
         32:6b:0a:76:43:f3:25:99:bd:40:77:f6:13:9a:ee:d9:74:83:
         43:f2:73:b7:58:d5:37:b6:0e:e4:c7:e0:87:c2:d7:1b:d7:86:
         88:50:5b:c0:f4:3d:3c:69:fa:72:f1:c2:ea:e1:df:ca:86:14:
         e0:88:2d:ac:6c:29:e2:ac:88:f8:29:35:00:62:43:e4:99:80:
         c2:6e:90:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:35 2025 by rpki-client