Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File:                     qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier:          hpyBP6OVbWLtzpewdB2FA2smgxx1ZzcRBZMbVcg4vA4=
Subject key identifier:   CB:74:E2:1F:DD:A1:C6:E2:8A:41:BD:CF:C2:65:9F:A2:84:BE:7A:6F
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer:       /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial:       01984708CDEBC482A98BCC7729FAD0FFED01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 14:00:16 +0000
Manifest this update:     Sat 26 Jul 2025 14:00:16 +0000
Manifest next update:     Sun 27 Jul 2025 14:00:16 +0000
Files and hashes:         1: DjJbJVK4ViblB5hs7VL09DEef2k.roa (hash: cqb7/wQBvYXWlhU0RsJ/gn+FwdkM5gkB/GQuwkcLWgs=)
                          2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: WjTgzCQHXTVTEZarMCBtz/y1ygHX7CmLblJ4onxNpr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:08:cd:eb:c4:82:a9:8b:cc:77:29:fa:d0:ff:ed:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
        Validity
            Not Before: Jul 26 14:00:16 2025 GMT
            Not After : Jul 27 14:00:16 2025 GMT
        Subject: CN=cb74e21fdda1c6e28a41bdcfc2659fa284be7a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5f:5f:e4:ab:c2:90:c2:13:7d:ec:a2:56:7d:
                    ef:f1:cc:ea:24:21:24:0d:f0:eb:46:fb:58:72:8d:
                    e9:b8:d1:ac:7c:1e:7e:8e:42:d9:79:16:6c:55:6a:
                    a5:fb:7d:73:84:3a:7e:a3:dd:3a:b0:3f:2c:95:84:
                    d2:11:31:66:27:14:c4:ad:35:05:d4:1c:76:7f:f6:
                    44:d0:ce:6a:22:2c:9e:41:32:04:20:c7:ea:a9:f8:
                    1f:b3:0c:06:27:af:3c:96:74:46:cf:e4:3f:c2:9a:
                    9e:ae:5f:2b:68:18:e5:39:ab:a6:eb:94:f6:5c:29:
                    85:83:11:0a:5b:d7:25:6b:74:00:90:85:7f:f5:42:
                    a3:8c:02:65:1d:9c:e8:17:27:85:94:1a:76:d9:16:
                    82:f5:96:f7:ef:0a:ab:0e:bd:c0:c4:66:29:d7:84:
                    19:96:be:d3:fe:98:6b:83:15:3d:87:f9:20:ac:19:
                    22:6f:c8:17:27:89:b6:7e:f0:30:00:d1:eb:19:24:
                    3d:af:e3:88:52:b1:ec:9f:6f:39:47:7f:ae:11:7a:
                    05:ba:96:4b:0c:ef:97:07:04:95:07:e1:dc:c9:5a:
                    1c:9e:59:d4:21:e2:8b:09:74:66:ef:a1:47:29:02:
                    1b:d5:0d:29:37:92:75:70:aa:b2:96:fb:2c:71:96:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:74:E2:1F:DD:A1:C6:E2:8A:41:BD:CF:C2:65:9F:A2:84:BE:7A:6F
            X509v3 Authority Key Identifier:
                keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3e:4a:97:1f:ed:f1:81:c1:43:97:ae:a1:01:32:16:e4:38:
         2d:10:99:f7:d1:9b:9e:e1:c3:0d:8a:b9:47:46:78:99:ba:ef:
         80:dd:bd:f3:ec:b2:79:2b:1a:81:8b:fc:22:cf:14:15:0f:4f:
         96:3d:7f:61:4e:cc:93:47:dc:36:e8:5f:8b:41:52:ec:41:84:
         05:55:e8:93:03:cf:1c:66:ff:b1:bd:ef:cd:72:f2:77:37:45:
         a0:af:d4:03:53:6c:27:bc:81:ed:16:40:ea:ef:2f:97:72:94:
         f9:ba:d4:cd:6e:b2:11:d2:4a:6a:b2:81:b6:e2:b8:d6:74:91:
         90:20:ed:24:e0:55:88:28:d1:d6:e3:cc:28:06:92:0c:0f:1e:
         fe:4e:b5:d2:44:3e:c6:f9:fb:1d:8a:2d:0a:30:1f:33:88:33:
         a1:68:dd:b2:68:f6:5b:05:11:f9:7a:6a:62:f2:e4:6c:7e:57:
         d2:cc:e2:01:3c:87:1e:79:05:5c:ce:a5:85:87:d5:c6:a1:95:
         61:38:11:4e:e6:63:5b:72:f0:f1:ca:57:f3:3f:23:fa:76:43:
         d6:ea:d4:56:4b:f9:35:71:85:60:0b:f5:ef:b0:4a:25:b0:89:
         91:a5:85:bf:d3:9f:ff:7d:8c:cd:4c:9f:a7:36:48:94:c5:69:
         17:1b:85:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:50:41 2025 by rpki-client