Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
File:                     1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json)
Hash identifier:          ce1R6xLtaXvzXxuIRCYgUUOSzK0Ain8ncx+/4dZeM5U=
Subject key identifier:   FC:4C:D5:F3:8A:23:1F:35:F6:AD:D8:D8:24:64:9F:1A:D1:57:66:6B
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Certificate issuer:       /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial:       019845F6B0F61E55F914A80404926E39FBB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
Manifest number:          11D2
Signing time:             Sat 26 Jul 2025 09:00:51 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:51 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:51 +0000
Files and hashes:         1: 0cg-ABQ5F07wo1zUc9k0K5Ly8to.roa (hash: Rkj4lRwYBqE7QsZIcMHOzWOT71EQLWq7kKtekOL+dc8=)
                          2: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: DOgYsXhKG9j9e3/gpkUJS+6Rz0nGD2a59J46J628GmM=)
                          3: BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa (hash: h3wwdJrizfCgG4S/e0JuPLlbVsXDFB1J+2NlIEyZmsM=)
                          4: TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa (hash: U/d+Fv7E47cWBLg/rWP1IbXjQkA8lalBfzHWx2kVZS4=)
                          5: Wem4R1HhiLTH9JF3d-SZOmy37u0.roa (hash: 7MdQgNFI/gw33JrzBz7PAxkDLsGz7qoxKurvzPVxBTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:b0:f6:1e:55:f9:14:a8:04:04:92:6e:39:fb:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
        Validity
            Not Before: Jul 26 09:00:51 2025 GMT
            Not After : Jul 27 09:00:51 2025 GMT
        Subject: CN=fc4cd5f38a231f35f6add8d824649f1ad157666b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:99:41:52:1d:ad:21:07:b4:6c:cf:61:d9:
                    c6:9a:fe:06:66:fd:cd:6e:38:42:2c:d4:f9:23:16:
                    d6:8a:86:78:ed:e8:b9:94:c1:ff:78:e2:0b:e2:ce:
                    5b:fa:98:fb:d7:3e:54:1a:85:f0:f8:e9:03:6d:41:
                    f3:db:9b:fc:43:94:94:d0:e3:63:c6:24:19:87:ac:
                    68:15:38:27:22:13:2c:aa:92:eb:d2:0e:10:67:63:
                    27:26:51:3b:04:4b:3a:aa:9b:35:d5:91:33:0f:25:
                    ca:55:df:6c:46:0a:20:b6:de:b2:96:0c:6e:58:19:
                    7b:95:f0:02:d0:95:22:00:c8:af:54:ae:b4:70:84:
                    43:51:45:13:34:57:2f:33:61:16:36:28:17:66:6f:
                    be:87:29:fe:47:4f:56:47:61:88:98:99:f3:78:26:
                    21:50:3f:a3:ff:17:ea:e0:04:55:83:78:ce:31:62:
                    89:b6:cd:18:30:3a:d5:ba:7c:4f:57:f3:1e:00:93:
                    57:d1:f7:d6:1f:80:f3:95:a1:56:99:7a:a7:2e:ed:
                    c8:2d:e9:8a:ff:07:c2:bc:f5:b1:0c:e7:0c:f8:ea:
                    a9:ff:42:52:23:20:b6:63:18:75:16:7d:47:ee:28:
                    98:e3:2d:4c:d5:44:77:83:d1:5a:09:22:30:c9:d9:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4C:D5:F3:8A:23:1F:35:F6:AD:D8:D8:24:64:9F:1A:D1:57:66:6B
            X509v3 Authority Key Identifier:
                keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b2:ca:7b:21:65:f5:18:d1:a2:81:69:3c:bf:ed:90:3a:46:
         ed:70:2e:c9:cb:9b:2f:1e:54:85:ab:4d:ca:2c:0a:07:6c:2c:
         62:a3:24:d9:12:85:d2:43:7d:eb:ad:69:8f:f7:bf:b8:b6:63:
         58:72:71:30:93:2b:69:52:1e:be:64:e2:a2:d2:92:c3:1d:03:
         0e:ed:57:7b:de:20:dc:5e:37:59:51:1b:1d:69:09:f9:73:db:
         40:a9:f6:e0:9d:20:3c:e1:e5:ba:8f:a2:17:5b:0f:67:21:35:
         bb:9f:37:d0:1f:a9:81:27:25:88:24:25:40:83:34:5f:e3:26:
         4a:fb:81:7e:29:11:4c:4b:15:d4:b0:cf:c3:08:c1:f2:0e:83:
         8f:83:a4:6b:d1:dc:13:06:6a:e4:b1:73:19:b0:57:3c:51:a0:
         8b:b1:e1:6b:e6:f5:86:15:64:0a:05:7b:06:5a:a9:62:4e:e2:
         f1:41:54:07:2b:cf:b6:ce:ee:66:41:73:da:0c:53:8f:94:f8:
         40:6b:03:02:84:1f:12:bb:6e:07:1a:a0:4d:25:b8:a6:ce:28:
         85:59:35:d6:10:28:c7:51:d3:62:49:a9:15:1d:aa:0d:11:46:
         16:88:04:b4:b1:75:91:ba:11:60:ba:60:48:5a:dc:44:5f:f3:
         55:ba:82:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:54:51 2025 by rpki-client