Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
File:                     FTCm61I5adqSyIRMDftA7YIL1sQ.mft (raw, json)
Hash identifier:          be/CbJUM4LFLZLVRqfOxruZwo7laXxjgddB4X7p5yII=
Subject key identifier:   3F:2E:36:6F:5B:35:EC:46:88:A0:9C:3A:A8:AF:C1:FD:FA:B3:CA:FC
Authority key identifier: 15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4
Certificate issuer:       /CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
Certificate serial:       0198D4726E01786D6EB30DF88F96423EFF7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
Manifest number:          0C45
Signing time:             Sat 23 Aug 2025 01:02:05 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:05 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:05 +0000
Files and hashes:         1: FTCm61I5adqSyIRMDftA7YIL1sQ.crl (hash: SoYBRclde2gxVEsxzgnRjp8yLZ2A/73TS+4laSKPDJk=)
                          2: b6c5zm72T5u0EfOAbDE3JGGhXtw.roa (hash: OJH5Z8arKXzNL0yoYBrj6T/yS9sFayIfKvyurf8IbEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:6e:01:78:6d:6e:b3:0d:f8:8f:96:42:3e:ff:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
        Validity
            Not Before: Aug 23 01:02:05 2025 GMT
            Not After : Aug 24 01:02:05 2025 GMT
        Subject: CN=3f2e366f5b35ec4688a09c3aa8afc1fdfab3cafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7b:29:36:49:1c:85:a9:66:fc:50:37:f3:b0:
                    d0:58:ec:92:49:fc:84:35:9c:e9:38:94:35:aa:0b:
                    03:b2:b1:3b:4b:4a:5d:12:98:5c:11:b7:65:98:08:
                    5f:91:a2:69:e3:12:0e:e1:e1:ce:50:6e:4b:2a:24:
                    8a:4d:58:5b:36:81:98:b2:70:b8:57:65:19:bc:d1:
                    24:e0:4a:a7:d0:ff:b2:47:79:45:c4:26:8d:fd:31:
                    4c:b9:4e:83:55:75:b6:10:14:1a:f0:b9:da:82:45:
                    d4:51:8d:a7:34:58:46:be:50:1b:38:0d:80:07:03:
                    e3:f3:ba:a7:97:2d:b7:d4:68:b9:49:9c:e9:b6:83:
                    e1:1d:f3:49:17:41:ca:61:73:96:5f:bd:88:e2:19:
                    f5:25:10:a0:df:01:1a:cf:0d:1d:59:77:e1:48:e6:
                    fa:1c:a4:a9:12:c3:a1:46:68:89:ee:cc:48:fa:80:
                    6d:3e:c1:cd:dc:8f:b1:43:3b:d5:2e:ae:a4:06:2f:
                    24:86:2d:09:99:60:f2:ac:1a:68:38:82:5c:7d:fa:
                    1a:6b:bd:df:78:ad:f3:8a:a7:b7:28:67:75:7b:9b:
                    ff:5f:72:e0:56:0a:68:15:99:10:e5:09:b0:78:53:
                    8d:5a:8a:08:00:a4:98:57:cf:06:7a:81:f6:8b:1c:
                    68:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2E:36:6F:5B:35:EC:46:88:A0:9C:3A:A8:AF:C1:FD:FA:B3:CA:FC
            X509v3 Authority Key Identifier:
                keyid:15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5b:b2:de:96:1c:a6:a6:d5:5a:c4:32:a4:42:13:e1:d5:41:
         51:9b:0b:d5:d4:3f:40:58:ad:cb:40:0d:84:9f:02:da:16:96:
         ed:f0:6a:07:9f:2f:1b:bf:cc:30:ca:f7:ae:9f:13:18:e7:94:
         48:0a:1b:01:a8:05:a9:cf:60:5d:7e:f7:c8:3e:d8:35:57:7a:
         71:22:2b:4b:96:19:3e:a1:34:1b:9f:a6:57:24:af:75:0f:75:
         93:7a:f8:53:5b:13:ab:60:b0:f5:d5:98:5b:ff:01:4e:1c:1a:
         45:b9:f3:ce:6a:ac:81:0d:f5:df:01:80:ba:6f:26:2b:8d:98:
         a9:82:33:cb:1e:f7:d0:39:aa:10:d5:ce:1d:42:b3:80:8d:a3:
         3f:92:b7:27:67:59:de:1a:3b:9f:8e:21:66:9a:8b:0b:86:c9:
         37:38:b0:74:bc:2d:ac:cf:0d:99:00:4d:eb:0a:3f:5b:ae:89:
         94:f1:09:86:f0:f6:76:04:99:c3:53:d8:7a:ea:4b:52:42:f3:
         e5:f6:96:34:1a:35:ac:4c:ad:04:6a:ec:87:7a:8e:a0:46:14:
         88:dd:ef:c1:1d:a7:a6:40:ec:a1:82:b1:6e:fb:64:6b:39:88:
         23:e8:a5:29:96:de:a3:93:f3:0f:e9:bc:53:68:75:4b:0f:b9:
         82:de:6a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:21 2025 by rpki-client