Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
File:                     97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json)
Hash identifier:          n9+QHV9NbPwCzpQ8Ql1NtV9XIR7TcJse/p6L9Mo75lc=
Subject key identifier:   DC:EC:43:84:21:18:33:31:4D:70:C8:25:4A:60:3C:E2:4E:6C:43:8E
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Certificate issuer:       /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial:       0198D4E035607C4BACF8687420320FD4A542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
Manifest number:          15DD
Signing time:             Sat 23 Aug 2025 03:02:00 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:00 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:00 +0000
Files and hashes:         1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: VlDgDaIB47IRiKeWfXqkb8OXO4sl/qax0F8U35k6t38=)
                          2: VAC_6RsE2oq5MD0lqmXv6KCzwDQ.roa (hash: TCLZUvDrgjrJ7J3tgeNK3Sq6QP0EDUXeSD5NVO6xxj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:35:60:7c:4b:ac:f8:68:74:20:32:0f:d4:a5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
        Validity
            Not Before: Aug 23 03:02:00 2025 GMT
            Not After : Aug 24 03:02:00 2025 GMT
        Subject: CN=dcec4384211833314d70c8254a603ce24e6c438e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:a5:b0:c5:15:b5:35:eb:7f:29:b5:2d:c6:
                    9a:d8:8d:7c:59:67:f7:3b:39:de:d3:a7:7f:66:c2:
                    c9:8c:d8:57:f5:ab:76:a1:49:a6:1c:b9:d4:5b:82:
                    38:0b:cb:3e:a4:45:f0:8b:98:f4:b9:32:f7:dd:f8:
                    29:36:08:7a:82:79:b6:b3:98:22:30:22:7b:ad:61:
                    63:39:7d:e8:c1:b2:26:f1:22:21:ad:31:33:4c:05:
                    6a:01:72:9f:00:ac:a9:2c:bb:6b:a3:0c:bf:4c:63:
                    4a:fe:04:e9:d7:21:89:3a:48:51:f2:fb:75:3d:1c:
                    0a:94:54:e1:0c:08:c5:ec:2c:5c:9d:3e:a5:45:6a:
                    6a:8e:48:5e:e3:5a:99:00:b9:66:da:6f:4c:ac:3e:
                    b0:dc:3a:ba:37:75:33:68:52:62:d9:ea:92:f9:ce:
                    c4:ea:e3:69:0c:21:6e:7f:4a:d0:da:5b:7e:5f:00:
                    95:db:c9:48:70:9e:30:d8:c7:e9:71:22:53:a8:93:
                    5d:78:a7:a5:84:85:d3:29:cd:a7:c2:8e:c3:e2:f4:
                    f6:bf:27:42:3e:41:8a:fa:2e:4b:ed:c0:4e:75:5d:
                    ee:d8:c3:63:c1:20:e3:30:9e:ba:4b:6e:f6:b0:7f:
                    fc:eb:23:4f:6f:09:a6:f0:95:47:84:95:4a:58:38:
                    2d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EC:43:84:21:18:33:31:4D:70:C8:25:4A:60:3C:E2:4E:6C:43:8E
            X509v3 Authority Key Identifier:
                keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:bd:18:55:1f:ef:fd:42:ca:24:07:fa:22:27:d4:6b:29:
         05:61:f9:14:6f:c1:3a:8b:03:3e:59:2f:f4:ac:e4:74:ce:8e:
         bd:ee:38:d2:ed:38:d9:6c:47:a0:dd:ab:e1:f9:28:7c:2c:00:
         70:f6:fa:cf:ad:02:86:02:0f:60:aa:e4:be:35:7c:30:f1:6b:
         2a:47:3d:33:c6:db:36:1b:a2:5d:99:03:cc:51:f7:d3:93:db:
         fd:e3:1c:5f:d7:0a:ce:77:5b:52:e0:9d:a9:87:14:bc:99:c2:
         fc:0d:6d:71:a0:76:09:b3:ff:dd:36:f6:42:a8:11:70:e3:7a:
         e6:64:30:c1:21:21:b3:4f:89:f3:ee:b9:47:96:c6:b5:77:b2:
         ee:c8:a0:89:eb:fd:31:8f:58:1b:03:4f:32:48:6e:c7:73:2e:
         f5:ad:5c:d8:43:00:fe:a8:92:97:fd:06:56:34:69:9a:67:c9:
         41:55:94:81:68:0e:8b:9a:bd:41:c9:67:6a:c1:7c:10:b8:e9:
         92:2a:2f:ec:0a:43:a5:77:97:80:35:3e:30:68:0e:95:00:39:
         0b:69:e5:b2:74:97:43:2d:83:c4:80:6d:08:59:8d:32:66:67:
         fb:21:3d:83:13:46:96:61:22:9f:2f:16:7a:8e:69:80:3b:60:
         12:0e:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:19:18 2025 by rpki-client