Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
File:                     ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft (raw, json)
Hash identifier:          aINrjO5+MypAnEE2gismbhLE9tMV+1ZzqTv4X79v/vw=
Subject key identifier:   3B:F2:0F:07:B2:F1:49:CF:90:AB:C5:D5:4C:DB:88:D3:6B:27:00:0C
Authority key identifier: 7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48
Certificate issuer:       /CN=7edbf83aff434512c503712f22291602f55bff48
Certificate serial:       0198402AEF4933D597D09479A37923FB754F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
Manifest number:          158F
Signing time:             Fri 25 Jul 2025 06:00:12 +0000
Manifest this update:     Fri 25 Jul 2025 06:00:12 +0000
Manifest next update:     Sat 26 Jul 2025 06:00:12 +0000
Files and hashes:         1: CsQE55nTjZVIgwx6w1u3-dRgYa0.roa (hash: a95d3t9ywYxS9eXqUsbBAK9yU2vbYzv8cxs097vsyiA=)
                          2: ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl (hash: aUsnQ5Mf0tX1xqpu3B18nct921mxu8BrEx5UvaQSrjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:40:2a:ef:49:33:d5:97:d0:94:79:a3:79:23:fb:75:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7edbf83aff434512c503712f22291602f55bff48
        Validity
            Not Before: Jul 25 06:00:12 2025 GMT
            Not After : Jul 26 06:00:12 2025 GMT
        Subject: CN=3bf20f07b2f149cf90abc5d54cdb88d36b27000c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:0f:38:96:e1:a1:04:e5:bd:21:c4:37:45:
                    b3:59:bd:90:10:76:0d:26:20:a6:c6:12:84:9b:1e:
                    1e:83:20:21:e9:cd:a8:41:fe:be:f0:dc:0d:e1:d7:
                    1b:54:ab:1c:6b:1a:b0:0b:dd:ef:73:ae:6c:b2:aa:
                    2d:ce:d2:fd:b6:6d:e3:a3:f4:12:8f:12:d7:2f:a5:
                    df:d0:60:7b:47:da:79:63:98:e5:45:d0:27:6d:61:
                    c3:a2:2b:2c:e3:8e:11:ec:5c:f7:39:68:fc:2b:0d:
                    34:56:48:5a:ed:63:16:11:00:0e:a2:2d:33:fa:c3:
                    d2:ac:45:09:a0:58:24:36:36:ae:7e:41:58:5b:bb:
                    fe:d7:6f:38:2f:ac:72:44:eb:49:93:3a:fa:5e:d8:
                    1f:22:10:a5:40:a4:32:08:6d:94:89:72:30:94:46:
                    5b:66:a8:b2:da:7e:fb:8d:3f:60:13:4a:59:69:2b:
                    db:68:9c:16:c4:93:19:f5:a1:aa:ce:81:5a:7a:d4:
                    49:5a:5c:f5:17:3e:9c:46:26:3e:25:ba:8f:72:6b:
                    78:c3:eb:92:7b:15:03:29:d5:df:8b:a6:86:e9:d0:
                    c7:f2:fa:e4:7a:28:5e:1b:5d:d4:ac:e9:6d:27:a4:
                    29:bc:8b:89:64:55:31:b6:10:9d:f7:75:1e:0b:52:
                    fd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F2:0F:07:B2:F1:49:CF:90:AB:C5:D5:4C:DB:88:D3:6B:27:00:0C
            X509v3 Authority Key Identifier:
                keyid:7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e6:bc:d4:d4:de:56:d8:f0:cb:e9:b8:9a:2b:cd:0b:d5:c7:
         6c:e1:99:c5:94:e1:55:46:14:03:47:bd:a4:c0:c1:c8:b4:2b:
         b9:30:1f:8f:c0:83:a8:28:06:09:51:13:f3:7f:d4:8d:4c:87:
         6e:1b:25:91:d1:f0:db:e2:dc:ac:06:15:77:f2:2f:4b:dc:b1:
         83:39:f1:dd:8a:ed:68:62:b0:ab:e6:61:42:93:b3:96:1e:c9:
         c9:08:4e:71:ca:58:75:7f:79:e8:19:5a:96:28:e4:bd:a4:55:
         f1:fa:d9:88:a9:5e:c6:21:67:3c:ed:ce:16:2f:95:6c:d0:da:
         a2:9e:bf:8f:e8:4d:23:06:82:0b:da:b4:73:29:b7:4c:47:78:
         c1:14:85:73:aa:fa:87:a2:ba:2c:2b:d2:aa:07:6f:e0:c7:78:
         9d:d2:45:73:80:89:77:30:ee:90:e3:49:62:5a:f8:62:41:28:
         a6:d3:ac:f9:13:54:7c:d1:5a:1c:1f:e8:6b:5e:b6:12:b8:06:
         1f:1e:a4:f4:16:7c:c6:cb:58:f6:ef:20:4a:6f:87:2c:88:71:
         36:33:e4:4c:79:66:61:9a:5c:50:a5:d3:f5:14:f5:d7:df:58:
         b1:b5:cc:6e:f6:80:39:40:a7:ee:66:6d:94:1b:0e:8f:51:e2:
         42:d1:3f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:40:04 2025 by rpki-client