Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
File:                     fF27C541OBhfPm1uPH2i-JIsjOA.mft (raw, json)
Hash identifier:          FQpGs36wsJwSJXzIWuTkrAft0VZdZ/wiabmEyETPicM=
Subject key identifier:   9F:4B:88:3D:37:D7:72:BB:1A:A2:26:EB:27:4C:13:A3:FF:83:2A:FE
Authority key identifier: 7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
Certificate issuer:       /CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Certificate serial:       0198D5837A432A24EEE3FD953835A9F7F81C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
Manifest number:          07BC
Signing time:             Sat 23 Aug 2025 06:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:20 +0000
Files and hashes:         1: fF27C541OBhfPm1uPH2i-JIsjOA.crl (hash: LYEEKHoNdq8+f6amEvB7Weo5IQXaUKgTRBPdHZlonJk=)
                          2: q-UjelWVJEcPadl31G47nebbXb8.roa (hash: 65aJhppjeAJp5scwXUtr/SDly2MObd0FzMz5wed2pGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:7a:43:2a:24:ee:e3:fd:95:38:35:a9:f7:f8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
        Validity
            Not Before: Aug 23 06:00:20 2025 GMT
            Not After : Aug 24 06:00:20 2025 GMT
        Subject: CN=9f4b883d37d772bb1aa226eb274c13a3ff832afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:42:47:12:ea:31:5b:c6:5b:d1:ae:44:cd:19:
                    75:14:10:0a:12:7b:f9:46:07:f9:6c:9d:69:a2:c7:
                    51:d0:a8:96:f8:84:ab:70:bc:29:dc:35:07:31:f7:
                    4c:0e:71:c6:27:02:4d:59:a9:49:65:70:e7:d2:59:
                    69:46:f8:af:0f:53:08:6f:7d:b0:c0:cf:f8:4b:4d:
                    c1:97:f7:50:b0:63:5b:0a:4a:0d:ec:fc:0f:d7:31:
                    cf:65:cf:de:b5:62:d1:e4:88:02:a1:2f:67:9e:3d:
                    c0:f6:fd:e1:1c:8f:6a:26:83:ea:dd:4d:60:13:0c:
                    cd:ab:aa:6b:71:df:eb:98:02:1b:f5:ea:ef:96:32:
                    0a:74:8d:30:36:9f:3c:81:df:69:a5:09:3f:ad:ac:
                    3f:3d:7c:c7:39:b9:51:f5:04:7b:70:11:bc:3c:44:
                    b1:09:41:88:c8:17:2d:a9:56:eb:91:7a:44:4c:eb:
                    65:98:cf:b9:cd:97:5d:6c:94:79:9e:39:3a:c6:06:
                    cc:77:fe:1d:b8:4f:aa:3e:16:96:b3:2b:3b:88:43:
                    3d:f9:15:ee:5a:b2:b1:6f:98:e6:e4:90:f3:e5:0e:
                    c6:7f:db:60:ba:ef:76:4c:61:bc:dd:cd:4d:08:b4:
                    af:4e:16:f5:20:c7:f5:6a:14:1b:9a:da:2c:d3:bc:
                    61:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4B:88:3D:37:D7:72:BB:1A:A2:26:EB:27:4C:13:A3:FF:83:2A:FE
            X509v3 Authority Key Identifier:
                keyid:7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:4c:be:82:7e:27:7c:d7:de:b0:32:41:1a:e2:38:9e:f1:d4:
         86:88:a8:27:74:62:9a:52:67:2c:37:84:d9:ef:ac:46:a5:e5:
         2a:66:c3:80:65:07:d2:8e:9c:66:fd:fb:95:6e:a5:b9:f0:e0:
         83:69:d8:3e:46:c4:da:9c:2b:5d:d8:57:17:cd:ee:e4:56:4c:
         fd:b2:6b:31:14:f4:98:90:c3:5e:41:6d:14:fd:cf:4c:a9:8d:
         b1:ba:f7:ed:70:f8:c6:da:d2:7d:a5:12:b4:1a:f1:3f:b2:bd:
         6a:f0:97:d2:a9:8a:ec:c0:bc:76:eb:9d:f5:6f:c4:68:d7:be:
         58:cb:05:e8:a3:00:95:37:4a:ce:7d:5b:66:37:0e:66:7f:b1:
         ba:bd:68:74:9b:ba:07:82:90:2d:33:81:e3:42:3b:85:c6:ba:
         1f:09:38:c8:08:d6:ea:78:7a:22:af:d9:a6:53:cf:aa:8f:2f:
         b7:70:e0:6f:78:81:23:d1:8d:96:0f:00:dd:4f:b0:c7:b9:64:
         ce:2e:27:0a:e2:d7:36:a6:45:6d:dc:3b:f7:4a:8a:c8:a7:79:
         2f:f8:58:65:38:33:59:ad:da:cc:0e:63:60:94:51:22:a7:79:
         fc:2f:87:7c:b6:b2:63:07:26:c0:b5:e1:3a:d3:d8:6e:9e:69:
         cc:c1:8f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:25 2025 by rpki-client