Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File:                     fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier:          GidADhwCG7ytAnYV+8diOxtxroeupTg5fVMQ+S7EjTM=
Subject key identifier:   27:2B:CD:98:FB:49:A2:5F:22:84:F5:B6:EC:42:88:20:C4:BA:BA:1A
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer:       /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial:       0198D5F13B112D6C07903E6F9259995913E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number:          05FF
Signing time:             Sat 23 Aug 2025 08:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:12 +0000
Files and hashes:         1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: ouYwka2bpgSNs7pmBeNlTqs1TZl7Dg4aSp8u+PCxmTs=)
                          2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:3b:11:2d:6c:07:90:3e:6f:92:59:99:59:13:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
        Validity
            Not Before: Aug 23 08:00:12 2025 GMT
            Not After : Aug 24 08:00:12 2025 GMT
        Subject: CN=272bcd98fb49a25f2284f5b6ec428820c4baba1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:ad:6f:06:05:55:2f:57:b2:aa:ee:44:59:
                    d6:b5:f4:e8:d9:49:c8:4c:4e:fd:bc:ea:27:7b:85:
                    1b:27:01:a7:62:ce:c7:a0:4f:96:a9:2a:88:17:e1:
                    c5:50:69:da:09:39:a9:9e:71:46:f9:37:bc:ee:37:
                    8c:75:88:ae:84:0a:32:1d:c6:16:9e:ef:4c:6c:6e:
                    2a:76:85:f8:37:08:29:21:cf:0c:16:7b:12:42:55:
                    8b:38:b0:f6:94:e5:19:21:df:be:f8:f7:85:dc:a8:
                    09:35:fa:01:48:42:9e:de:25:c2:73:d0:02:41:df:
                    a3:c9:3f:c5:69:65:e9:11:ce:bc:ae:2b:bf:49:82:
                    6c:42:01:24:32:fa:0e:51:ff:ec:17:5b:66:92:d6:
                    96:8e:4f:47:1b:26:e0:63:67:02:e0:2c:2e:4b:06:
                    cc:19:df:fd:6e:b3:14:2b:5f:99:e9:70:c5:db:34:
                    fe:53:8c:2b:b3:d6:0a:39:fe:06:86:3e:70:60:1d:
                    c7:ba:28:d5:9f:ae:b6:e2:17:c6:10:2f:9b:fb:8f:
                    1c:6f:e7:18:c2:c9:ca:84:69:bb:14:06:37:f4:19:
                    45:33:62:bb:74:d8:2b:ed:f0:fd:aa:ac:66:38:cc:
                    12:eb:6d:48:ae:35:21:db:8a:3c:a7:f5:2a:9c:7a:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2B:CD:98:FB:49:A2:5F:22:84:F5:B6:EC:42:88:20:C4:BA:BA:1A
            X509v3 Authority Key Identifier:
                keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c4:a3:73:57:54:2b:5f:97:4f:0e:7b:03:c5:47:28:f0:a9:
         61:dd:44:91:24:d9:6c:22:2d:e8:74:c5:7e:ff:15:d6:24:ab:
         cc:bc:d5:5d:27:f0:fd:ab:55:dc:64:b0:36:dc:c2:d1:9a:77:
         da:07:49:10:e5:ff:9c:82:a0:fc:3f:5b:1b:3b:7c:d4:46:00:
         91:80:eb:21:2d:8a:1b:37:b9:4f:ac:b2:be:cf:d8:e6:ca:1e:
         df:19:56:ae:9b:0a:8d:57:b4:c8:3c:51:fe:ca:79:5e:8a:90:
         58:9a:54:33:89:aa:78:20:30:c2:81:e3:7b:75:63:77:b2:73:
         d5:7f:68:c3:65:64:12:1b:bf:b3:c3:58:89:95:8e:88:03:32:
         a8:c4:90:95:56:18:27:a8:9c:18:a0:c1:68:83:2f:03:2d:89:
         d8:70:9a:69:ee:fb:98:a0:7d:30:76:99:ea:c8:c7:b0:78:f7:
         54:0c:55:9f:3d:d1:72:57:c6:c8:0d:e3:6a:73:a2:77:2a:a2:
         62:bf:77:45:a0:6f:2e:ff:15:cb:f8:4e:77:b3:45:51:80:d4:
         fd:a0:4a:37:5c:00:72:b6:76:43:0f:5b:6b:52:ce:be:a7:9c:
         4a:ca:75:ed:db:77:30:ea:73:55:53:91:13:5f:5e:46:96:e4:
         b2:f4:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:35:50 2025 by rpki-client