Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File:                     _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier:          rYd2p3Gib9uNZBMAEzdRqCS0QNc1QyrG59qSPMn7R6M=
Subject key identifier:   E6:7A:09:30:A9:61:EB:F3:1C:13:B6:38:84:1E:C2:43:BA:75:62:77
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer:       /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial:       01984852CC96E0BA7234DB738873DD5451FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number:          0C84
Signing time:             Sat 26 Jul 2025 20:00:42 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:42 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:42 +0000
Files and hashes:         1: 0q3J-c3dMCcb0fEi4kT4_OFKaDo.roa (hash: GFF2i9DOD9iNc83o9PQkrJQokdzx6TTVi4lrSIyhIgE=)
                          2: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: ftmaCQr5uclDthZ7uAnH45vVmCWd48gRnXi7+wB2BF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:cc:96:e0:ba:72:34:db:73:88:73:dd:54:51:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
        Validity
            Not Before: Jul 26 20:00:42 2025 GMT
            Not After : Jul 27 20:00:42 2025 GMT
        Subject: CN=e67a0930a961ebf31c13b638841ec243ba756277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:f4:06:ab:c1:86:86:89:83:88:35:03:da:
                    72:ea:35:09:0e:2d:0e:d9:1f:cb:94:48:a7:81:b6:
                    6a:3c:cc:ff:4c:f6:d3:4f:05:19:fc:cc:8b:44:b4:
                    d1:d7:76:76:98:55:11:4c:94:70:4b:15:b9:98:a8:
                    59:56:57:5c:cb:97:f5:ef:64:aa:f7:5f:f6:84:24:
                    09:ca:c6:db:d0:ed:65:df:04:73:51:8e:53:e0:fc:
                    6e:17:b8:dd:c1:85:48:8b:b3:73:63:d4:6b:14:4f:
                    37:18:11:2e:62:86:59:11:20:c2:03:8c:9a:6c:b2:
                    0b:5f:1d:c6:af:16:18:7a:e3:5a:eb:67:ac:50:52:
                    ae:08:8f:9f:38:90:38:dc:07:dd:4b:a7:b7:a1:d8:
                    69:08:10:bc:38:be:bd:02:6d:13:a9:41:14:b4:48:
                    76:96:0d:db:a4:f5:f6:ae:6a:be:07:b6:cb:cd:fa:
                    4e:8f:92:ba:41:7f:95:f0:a9:a8:8f:54:ad:38:0b:
                    79:ac:57:78:51:7a:2d:f5:be:f0:e2:95:ef:e8:49:
                    6f:3d:7b:5f:ed:13:3d:55:4c:da:77:f4:16:c0:f0:
                    17:f1:ca:cf:99:e4:7d:cc:3b:38:93:d9:13:b1:41:
                    fd:c7:e8:24:fe:fc:8d:1e:bb:26:0c:32:3b:7f:b3:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7A:09:30:A9:61:EB:F3:1C:13:B6:38:84:1E:C2:43:BA:75:62:77
            X509v3 Authority Key Identifier:
                keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:34:e9:00:dd:b3:49:a5:88:e4:23:d7:3e:ee:05:b1:65:d0:
         8a:e0:ff:00:58:47:5e:72:ec:af:02:4e:09:c1:c2:f2:75:23:
         c8:de:60:d0:59:2e:f9:11:2a:72:0b:3c:2c:4a:f1:fc:1a:c6:
         79:10:df:f2:9a:88:ff:26:a7:0e:d4:17:d1:a4:cc:54:a6:5e:
         71:8e:64:ed:fd:a6:68:e1:e0:62:b0:df:36:c4:fd:f2:bf:87:
         99:20:00:4e:cd:fb:08:49:d3:25:cb:41:13:f2:2e:00:e4:4d:
         06:8d:ca:54:4e:91:d2:9d:7d:ed:cc:47:63:b5:f3:5d:2b:b9:
         ec:16:c7:5e:bd:dc:c4:6c:d0:4f:65:80:2a:45:86:3e:66:ac:
         f1:35:b3:d6:fb:ac:a0:ae:30:f6:40:d4:14:9d:0d:ac:35:0c:
         55:51:fb:e2:c4:da:b1:22:10:8c:cd:5a:58:77:3d:4c:a7:09:
         5c:0d:5b:09:43:d3:60:ed:8b:8a:cf:b5:2b:bf:a7:01:87:86:
         1f:94:37:81:76:4b:e0:9a:3c:84:8a:d1:8a:f8:96:33:0d:f3:
         67:c4:95:cb:2f:60:c3:29:9b:bd:77:a7:71:c1:02:1d:89:3e:
         40:da:28:94:d3:e3:21:77:e2:bd:2e:c0:14:62:b5:88:e6:a1:
         5a:f6:c7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:31:40 2025 by rpki-client