Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
File:                     97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft (raw, json)
Hash identifier:          BL7h40E9OxREtYxXNgQLz5rKjnBMIAx3Ck3akkNuzPQ=
Subject key identifier:   C0:A3:0D:20:37:6B:49:18:E7:EB:25:A3:40:F5:59:1B:69:48:20:5A
Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
Certificate issuer:       /CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Certificate serial:       0198D4E09D5A9B4AD7A3F279AE0110B009F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
Manifest number:          15DB
Signing time:             Sat 23 Aug 2025 03:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:26 +0000
Files and hashes:         1: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl (hash: KS8Yht9nzm4sXoLweebN3tb4L2N/OjbGjyu6/j/AnTM=)
                          2: BvcR2l7_YlLN1G-PLIU4HFIYDzk.roa (hash: r1MEUEAOwAoEFh1pzdmgOC6wzXGzNLeScD3RSXz3sR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:9d:5a:9b:4a:d7:a3:f2:79:ae:01:10:b0:09:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105
        Validity
            Not Before: Aug 23 03:02:26 2025 GMT
            Not After : Aug 24 03:02:26 2025 GMT
        Subject: CN=c0a30d20376b4918e7eb25a340f5591b6948205a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:d9:27:14:c9:58:05:b7:f2:60:2d:64:65:
                    60:ad:16:bf:35:05:2f:82:9c:23:26:8a:ee:39:10:
                    8e:c0:be:ad:24:94:92:57:52:4f:a9:d3:9b:7d:75:
                    5c:a3:50:74:fe:b9:fa:79:8e:9b:be:2c:85:f8:ac:
                    ad:b8:d6:9c:c3:fc:eb:ed:fa:2f:f7:e9:33:70:de:
                    ba:83:f6:97:fa:0c:03:bf:0a:5e:89:8c:54:05:b2:
                    89:84:95:7d:68:04:25:a8:86:f6:85:4e:22:f8:c2:
                    75:52:e3:0e:c8:fb:78:08:f9:ea:92:73:56:90:91:
                    3f:30:9c:5b:fe:c5:e8:97:4b:22:51:7a:a3:d9:72:
                    7a:90:13:cf:af:61:a6:7c:ae:9c:c2:f1:2a:1f:8f:
                    6b:83:df:2b:6c:25:3c:06:6c:8c:eb:aa:70:a3:84:
                    19:3d:78:81:4c:06:82:41:84:1a:b8:d6:d7:4d:45:
                    0a:b9:e4:e7:87:1e:78:a8:7c:56:16:82:cb:41:9d:
                    00:5e:52:c1:67:f9:08:00:3b:ee:70:05:a5:33:31:
                    b2:a7:15:7f:36:d0:d6:66:06:eb:47:51:54:a3:89:
                    aa:43:6c:35:e2:6c:22:0c:5c:0d:73:19:01:0e:5a:
                    73:ce:41:ca:d4:ae:97:aa:61:0f:4c:81:af:97:bc:
                    5f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A3:0D:20:37:6B:49:18:E7:EB:25:A3:40:F5:59:1B:69:48:20:5A
            X509v3 Authority Key Identifier:
                keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d3:9e:65:f5:99:61:c1:71:fd:46:d8:a2:12:a1:44:92:ad:
         f8:49:47:6e:1f:b9:16:7c:2d:0f:06:ce:d5:8b:22:72:e5:1b:
         41:37:d2:3e:d8:a3:f9:ac:5e:75:90:13:75:04:7f:2f:fa:7f:
         9e:d4:b3:6e:43:68:c1:fd:e2:ab:92:16:6d:49:37:c2:80:c2:
         ca:7b:91:d5:bf:fb:22:8a:66:c8:3b:32:f3:c8:da:5c:51:2e:
         a1:eb:5f:b7:50:c6:82:20:89:fd:84:94:cc:3b:76:ef:c8:e2:
         57:28:15:8b:97:9d:be:6e:68:02:86:2e:ed:2e:02:ac:61:0a:
         1a:1e:58:d2:b2:71:ce:f4:ae:4d:9f:3d:7b:32:26:f6:cd:2f:
         4f:af:db:e5:e3:9b:97:11:b8:bb:fc:8d:c6:0a:ff:c4:c0:82:
         ad:37:76:c2:69:c4:87:d3:2b:10:ec:c9:d3:c9:22:1e:1e:5d:
         95:81:d2:09:53:70:92:8a:af:4d:c8:db:be:ac:24:93:3a:96:
         7e:31:d1:96:cc:f8:cb:1b:0c:2f:cc:ef:84:29:bb:d6:41:91:
         5b:7e:52:74:3e:e9:3d:18:5b:81:a7:9f:4a:4c:69:f7:87:02:
         b9:19:c8:5a:8f:35:29:de:94:20:4f:be:f2:66:91:3b:19:2d:
         73:29:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:07 2025 by rpki-client