Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File:                     1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier:          wes/qSbzkB0b+F/YUNSrsrq15lTAOqpXU7rutgYOOjI=
Subject key identifier:   C2:7F:24:A6:3C:DF:1F:B7:05:86:19:91:89:90:34:9A:5B:BE:D4:29
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer:       /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial:       0198D73B117B01F6732DA1D7A63B54885012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number:          0F25
Signing time:             Sat 23 Aug 2025 14:00:29 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:29 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:29 +0000
Files and hashes:         1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: JVBlwkDogyfQ5eGn/TQ4gpmtG4MkVMEOWGKcrDALENs=)
                          2: UljtGTk6FE5SFIVhbxqvXUbkWqc.roa (hash: JzByF342QYXpOV0k7S0SEeUJe7klEsAVIE0a0wTpdvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:11:7b:01:f6:73:2d:a1:d7:a6:3b:54:88:50:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
        Validity
            Not Before: Aug 23 14:00:29 2025 GMT
            Not After : Aug 24 14:00:29 2025 GMT
        Subject: CN=c27f24a63cdf1fb7058619918990349a5bbed429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f2:db:6d:b5:72:df:4b:0d:38:ff:16:2d:1e:
                    2c:99:92:70:8c:65:60:17:92:55:47:1c:1d:33:09:
                    95:a7:8a:3e:a9:d6:d3:d5:8e:9b:4e:fc:55:7a:56:
                    b8:73:fd:5f:91:ed:71:47:0c:d7:d4:3e:b6:01:02:
                    85:d8:0b:6f:57:8a:40:e8:af:fd:70:e2:f3:2a:5a:
                    8f:7b:0f:d8:ec:73:c4:30:06:9c:fb:65:72:21:2c:
                    08:89:2c:a5:56:67:51:1f:a7:65:cf:06:80:fa:46:
                    b5:b2:66:8f:36:0c:90:05:3e:1c:50:76:d7:0c:46:
                    a6:12:c6:ee:da:1a:09:34:90:05:52:83:d9:b9:26:
                    8c:e4:62:42:90:d0:66:82:3e:c8:9c:99:60:15:86:
                    ce:8a:46:19:b2:54:66:0f:ae:de:00:88:e2:bf:67:
                    36:74:e5:64:48:38:b8:9c:8c:c7:31:74:ad:f9:62:
                    c4:13:f0:e9:f6:d3:a6:40:07:7d:af:4b:34:67:f0:
                    93:af:62:0c:7e:59:20:80:6d:7e:68:52:2d:0b:42:
                    c2:b2:5a:10:22:4f:a1:9a:cc:f6:ed:ef:f1:6c:81:
                    bc:d5:e6:38:f9:7f:47:aa:79:37:25:f0:a2:08:3a:
                    20:00:6d:b3:1c:e8:65:e3:51:18:01:ac:1d:4c:d7:
                    5d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7F:24:A6:3C:DF:1F:B7:05:86:19:91:89:90:34:9A:5B:BE:D4:29
            X509v3 Authority Key Identifier:
                keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d1:af:12:48:f0:55:2d:d6:2b:be:f7:bc:1f:7a:c2:36:71:
         6e:f9:b4:4b:be:98:05:7a:53:39:4d:8b:86:e3:9e:70:12:b4:
         57:a9:da:99:3a:c2:5a:d4:ac:5f:e9:9a:fb:60:8e:4c:f6:d0:
         43:e9:83:74:d6:f1:16:5d:60:28:a4:40:98:9b:c5:3c:90:b9:
         0d:ff:f0:da:07:99:e0:a0:2d:c3:92:1b:72:17:79:66:32:95:
         bf:ea:39:10:f5:e5:71:2b:07:de:41:2d:24:3d:49:7c:74:ee:
         66:bb:45:f4:68:4f:13:74:93:56:3c:f1:1a:13:bd:3e:b2:a8:
         f9:2b:24:47:5c:cf:2f:91:61:52:9e:b0:fb:0d:f3:79:e6:b4:
         72:94:d7:13:55:09:a1:b5:76:eb:ce:f2:79:91:b4:96:6d:c7:
         58:64:fd:5a:92:7a:65:e8:e5:06:05:8c:02:bc:86:c7:43:f8:
         2a:96:91:26:59:72:c1:e5:e0:b1:a2:c2:7e:46:eb:55:be:a5:
         c3:6b:1e:01:8b:ef:57:34:14:34:b8:d7:e2:4f:6d:3f:f8:98:
         9e:1d:20:b8:c1:15:b0:60:f6:15:67:fc:98:85:e0:50:86:9b:
         93:cb:38:b3:1a:b0:38:b0:2a:02:1f:00:d5:4c:de:c8:d7:74:
         a9:c9:d8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:16 2025 by rpki-client