Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File:                     s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier:          Di2IB6KGd2ENh+jMVtrlj5OyJ0eRvSZym0f2TlbfbH0=
Subject key identifier:   12:1F:50:2A:00:C5:4E:97:D8:B8:B6:FB:20:33:21:91:38:DF:F7:44
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer:       /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial:       019844E40598634C314FE38B501D998270C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number:          15FF
Signing time:             Sat 26 Jul 2025 04:00:50 +0000
Manifest this update:     Sat 26 Jul 2025 04:00:50 +0000
Manifest next update:     Sun 27 Jul 2025 04:00:50 +0000
Files and hashes:         1: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (hash: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=)
                          2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: khYEOH+UpkbMo1UM9+dpDZ/nXvRGlpO/fJImxKoDan4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:e4:05:98:63:4c:31:4f:e3:8b:50:1d:99:82:70:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
        Validity
            Not Before: Jul 26 04:00:50 2025 GMT
            Not After : Jul 27 04:00:50 2025 GMT
        Subject: CN=121f502a00c54e97d8b8b6fb2033219138dff744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:05:d8:b8:30:48:6c:8a:6c:79:06:9d:d4:
                    14:9d:56:5b:66:dd:fc:b7:7b:df:03:81:36:5f:0e:
                    22:68:57:cc:e6:be:92:92:fd:ff:d6:b6:d4:d5:05:
                    ea:12:48:dc:80:bb:0f:a7:c5:ba:d5:df:f1:23:17:
                    38:fa:41:25:1f:ff:06:5c:3c:79:a0:4a:90:41:6c:
                    c0:70:81:5e:bc:cc:d7:97:94:69:51:f2:d6:ee:04:
                    97:d3:9b:3d:57:89:cb:99:7f:b4:96:b9:26:7b:e7:
                    2c:81:73:21:b4:b6:1b:bf:db:a6:f6:e1:36:d3:0c:
                    bb:d2:80:f6:ae:b1:c2:d9:60:4f:17:ed:60:9c:b5:
                    17:82:43:be:34:91:41:9f:18:b2:c3:f2:c9:6b:3c:
                    78:16:bb:90:b8:6b:d1:83:42:ea:f2:82:cf:da:ad:
                    73:0c:c1:5c:f6:29:d4:60:0c:0f:28:54:c4:c7:0a:
                    1f:02:59:c0:4f:6d:73:b8:2b:d9:5b:ca:fa:9a:d3:
                    50:a6:18:93:90:41:ae:bc:cc:ff:17:08:44:88:73:
                    0e:10:b6:47:3f:7f:69:eb:b9:e2:23:ba:53:43:38:
                    fd:75:93:f7:64:39:19:29:0c:8a:7c:57:0e:9a:f7:
                    bb:c3:97:73:f6:cb:46:13:94:18:05:69:c7:bc:91:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1F:50:2A:00:C5:4E:97:D8:B8:B6:FB:20:33:21:91:38:DF:F7:44
            X509v3 Authority Key Identifier:
                keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:98:9f:a7:ef:e7:fc:45:02:33:73:35:f4:00:e2:e6:7c:29:
         ed:c0:40:c4:11:a6:5a:e5:e5:99:aa:10:0f:b6:e4:06:04:b0:
         a5:9b:82:d8:50:c2:12:1a:92:8e:2b:ed:dc:bc:53:e3:cb:52:
         05:6f:47:f0:2b:92:f1:3c:1a:f8:a2:13:c0:5b:56:a8:48:86:
         a6:bb:8f:68:5d:4e:06:7a:e2:92:e3:70:44:97:31:10:9c:82:
         32:26:ed:10:2a:35:45:fb:f2:0c:f3:9a:6b:5a:f5:9f:09:94:
         9e:f8:af:33:87:5a:77:7f:70:b8:96:08:15:2d:cc:19:6d:cb:
         be:ef:d7:65:0d:95:64:15:02:4b:61:ec:29:ca:e2:a6:db:47:
         3b:fb:e0:68:3d:03:b3:60:9a:ca:81:51:35:ba:01:c5:7e:63:
         ff:16:ba:e9:78:cc:b0:43:4a:4b:19:a0:f5:ea:5e:44:eb:bd:
         79:7a:06:bd:2a:e5:26:dc:8c:8c:af:b0:b1:2a:b7:c0:c4:ba:
         78:c4:9f:da:d3:c6:c2:b0:26:38:cf:c7:6f:b1:09:1a:e8:aa:
         82:e7:91:e3:8d:fb:12:80:56:b4:48:f7:74:5f:b7:e8:dc:b0:
         50:1c:6b:3c:93:6a:17:53:9b:f6:53:71:27:57:d8:75:c3:65:
         6e:12:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:27:30 2025 by rpki-client