Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
File:                     fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft (raw, json)
Hash identifier:          +8H/hQgnHstuDvuavR+AyChseSYnDgdKZ1Oi/PaR4nQ=
Subject key identifier:   4C:F7:90:B1:A6:61:91:85:AD:0F:22:2D:2E:81:EC:E4:25:A5:07:F6
Authority key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
Certificate issuer:       /CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Certificate serial:       0197B6A13476BEB8CB407461327C5DD75238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 13:01:47 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:47 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:47 +0000
Files and hashes:         1: fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl (hash: EWRrmC+0bRcoKTgs3yVowOjFKeT/aL/DnUfyPzE5gnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:34:76:be:b8:cb:40:74:61:32:7c:5d:d7:52:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
        Validity
            Not Before: Jun 28 13:01:47 2025 GMT
            Not After : Jun 29 13:01:47 2025 GMT
        Subject: CN=4cf790b1a6619185ad0f222d2e81ece425a507f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:75:54:3b:7e:07:34:f2:8a:68:07:5e:83:
                    0f:c8:b4:e9:5d:04:31:9f:25:c9:1d:06:92:1d:5e:
                    1a:02:4c:0d:7d:50:7b:27:7c:87:1f:36:c1:c8:a4:
                    27:eb:4b:07:a8:98:d1:5f:ca:24:82:2f:7c:b2:bc:
                    c1:92:5e:6d:2c:0c:51:cb:5c:85:23:f9:d1:06:c5:
                    03:52:9b:fa:4e:0c:92:65:a0:fc:e9:dd:79:a9:52:
                    e7:f6:e3:ab:e4:b0:33:7e:6b:00:12:5b:93:69:91:
                    9e:e9:9f:64:9a:91:5c:2a:42:73:91:ff:79:12:20:
                    f9:92:7a:f6:3e:38:d5:9d:6c:f2:b8:b9:18:88:b3:
                    7b:32:27:bc:42:2b:a8:cb:6a:f6:d6:93:f6:0e:3d:
                    66:42:5d:2d:69:ef:5a:b1:d1:48:2d:00:cf:00:eb:
                    a4:3f:69:59:a0:c1:ee:9c:77:12:94:bd:66:06:c0:
                    ee:73:70:6c:36:b7:05:ce:80:92:30:23:0a:ad:3e:
                    3a:98:07:82:bf:23:27:dd:b2:26:0e:c5:c3:9b:53:
                    f7:f5:2d:fd:a0:5e:86:fa:42:de:02:fd:d2:e5:c9:
                    92:a2:28:13:81:24:eb:cc:a4:fb:a1:9d:bc:f5:84:
                    88:3f:78:5c:69:69:d7:ba:4f:08:e9:0a:82:80:b0:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F7:90:B1:A6:61:91:85:AD:0F:22:2D:2E:81:EC:E4:25:A5:07:F6
            X509v3 Authority Key Identifier:
                keyid:7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:9d:a3:c4:7c:aa:b5:c1:d6:10:19:35:7c:a7:34:ea:08:1b:
         10:b9:9d:36:e8:56:69:12:d7:a5:5c:0b:80:4b:74:7d:96:7d:
         12:fc:05:4b:61:8e:21:68:69:48:d8:98:aa:2c:3f:38:2c:91:
         70:f2:d6:33:f2:9f:8e:b0:f4:49:75:d9:73:3a:7b:07:31:f6:
         ea:dd:ab:1d:7a:d2:3a:cb:8e:31:70:da:34:7e:a8:9b:2f:3d:
         2b:33:a5:bb:b0:eb:f8:bc:16:41:66:cf:6f:3a:54:f5:a4:a6:
         50:27:74:ea:bb:4b:e5:3d:e1:cd:66:14:26:27:3c:5e:eb:aa:
         48:84:82:91:b7:b8:b3:eb:98:67:fe:28:c2:7d:bc:11:40:ed:
         05:06:72:10:be:24:94:99:d9:bd:9d:81:9e:2e:f3:7c:c0:59:
         4d:4e:ec:d9:c4:3d:2a:06:c0:c9:85:4c:bd:c8:d7:59:2f:b0:
         37:9b:f2:c6:ef:79:ef:f4:36:27:db:c5:4e:12:0b:53:68:16:
         11:8d:cb:c0:98:eb:a4:b6:bd:33:17:eb:86:63:2a:88:e8:63:
         c9:80:7d:25:f7:6b:1d:26:ec:b4:7b:51:e2:c2:06:2f:7c:a0:
         3e:4d:d9:87:13:f1:6a:77:9a:5c:df:b7:1d:e9:97:31:12:c8:
         02:31:eb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:52 2025 by rpki-client