Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File:                     FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier:          t2GnJ0vk1Ckn6mrQsKNy2UY/ccKCgNZ5aa2cZwbv5YE=
Subject key identifier:   98:4E:5D:08:67:28:1F:37:C5:8C:71:F2:57:D7:15:6D:EB:0E:9F:98
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer:       /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial:       0198D54E800B95B02F86462F298AB605A074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number:          0C40
Signing time:             Sat 23 Aug 2025 05:02:28 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:28 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:28 +0000
Files and hashes:         1: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: HbguX/97C8CpMUieIEHiyETIVUK/Y6P79dt/LVKjCIc=)
                          2: T8jVRfNtgOkoesNchTYMyWBMejA.roa (hash: odUOdpKN+tr75AiaB4U/yYO30gvxGiZ+PPW0U2k0wWk=)
                          3: _oI5hyBnCt55tCVsP54xRvG07cg.roa (hash: siBfTW9OHIW7tDQ3Efjyi7KuTusgOUvikxuMwP5Dkrs=)
                          4: h09V_pfLhbG06t0gQbFrPM7mXKs.roa (hash: 5yQRSQYWk0Fc992YjmOb7t6zzDvUZZ6yh9Kn/c45gMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:80:0b:95:b0:2f:86:46:2f:29:8a:b6:05:a0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
        Validity
            Not Before: Aug 23 05:02:28 2025 GMT
            Not After : Aug 24 05:02:28 2025 GMT
        Subject: CN=984e5d0867281f37c58c71f257d7156deb0e9f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:ac:79:90:58:a9:4c:16:e9:99:50:79:cf:
                    69:63:9d:b5:a9:49:fb:63:a9:21:40:a8:54:60:e0:
                    da:ed:d2:94:f8:0f:e2:ea:a7:70:a9:09:b4:00:ed:
                    f6:6f:59:2d:8f:10:c6:b0:46:55:12:b9:2c:95:56:
                    02:bc:7c:8d:35:30:ea:69:63:3c:30:4a:bf:a9:fe:
                    1c:fe:ef:da:07:ed:65:d2:ae:2d:50:de:c9:92:d0:
                    2b:86:17:37:2a:a6:97:a9:e7:57:a6:3d:f9:e3:e9:
                    c2:9b:65:2e:18:77:5c:3a:d9:99:f4:f0:32:9b:24:
                    7d:f5:99:e1:e4:23:c1:a4:06:6c:21:68:45:57:bf:
                    7e:fd:44:b5:ed:d6:e8:bd:07:a8:09:66:83:fc:76:
                    04:f1:bf:df:82:1a:2b:6d:b5:41:de:b8:6f:be:72:
                    f6:bc:e9:2e:09:c2:af:e2:47:c8:2e:66:d7:25:6a:
                    9e:21:82:01:b6:ed:46:22:a5:27:55:3b:ea:14:03:
                    71:c6:ee:3b:e4:1f:99:2c:44:17:0e:0f:05:af:ac:
                    39:f1:0b:07:9d:86:07:e0:f7:e3:08:61:83:45:39:
                    24:3e:d2:fe:c5:67:55:5c:1e:26:7a:e6:c5:99:61:
                    ed:76:ba:c9:9e:26:ef:79:d2:17:0c:da:ff:26:20:
                    68:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4E:5D:08:67:28:1F:37:C5:8C:71:F2:57:D7:15:6D:EB:0E:9F:98
            X509v3 Authority Key Identifier:
                keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a0:65:e5:51:e8:38:46:59:55:22:6c:09:2e:cb:d1:65:fd:
         cd:d9:eb:75:02:d5:b9:15:6c:ca:0a:b4:0f:63:80:18:58:31:
         23:f5:76:91:27:6c:ec:01:bf:43:42:17:8d:25:13:c1:b3:5f:
         cf:b9:ec:c5:c7:f1:18:f2:a1:76:e0:55:03:67:97:63:92:1e:
         9d:95:ea:83:9f:17:5a:2d:89:87:d9:0d:c0:a0:27:11:0b:97:
         4c:20:23:79:2b:d9:90:70:c9:06:d7:d9:66:e3:ce:c7:5a:87:
         f9:7d:70:51:2b:54:ba:23:5d:15:af:2f:d5:3e:9a:c9:7b:04:
         32:41:f5:93:cd:f5:3c:73:0b:a0:c6:f9:db:3f:0f:5c:ff:0b:
         cc:3e:5a:72:7b:35:aa:9f:5a:6c:81:cf:5b:7f:87:ef:a1:be:
         12:fe:e2:91:4f:a1:dd:2b:b8:2c:4a:cc:7a:b6:e4:5b:1d:4a:
         f9:ff:67:bf:d9:a8:92:b1:22:8f:22:32:d4:4b:79:9f:42:71:
         89:f5:82:da:d9:9f:55:90:58:65:84:6c:05:90:6b:3b:92:4c:
         67:5d:f9:f7:e4:26:b3:a7:4a:a5:14:19:e9:78:5b:c0:3a:03:
         8a:d8:af:1d:0b:35:7a:1c:82:74:f4:6a:51:08:2f:1e:ce:9d:
         95:ef:0a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:11:33 2025 by rpki-client