Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
File:                     fFdTLhz9MccnMuRONTn_bglsKkc.mft (raw, json)
Hash identifier:          0u4y9ECojy2HyY5ZyCEh6/NvRF7csiaQ/o9L0EL3IZk=
Subject key identifier:   64:9E:54:9E:FC:5A:64:8F:09:8E:A5:61:03:A7:5C:2D:11:22:01:F5
Authority key identifier: 7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
Certificate issuer:       /CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Certificate serial:       019844AC741C039516501FDDC938056C92A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
Manifest number:          15FD
Signing time:             Sat 26 Jul 2025 03:00:09 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:09 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:09 +0000
Files and hashes:         1: fFdTLhz9MccnMuRONTn_bglsKkc.crl (hash: vhfaw1lDSTU/rLSrRj5k4SZCAXfo2jFGR5aXQUreNv0=)
                          2: gq5QbYLmKExu3_jiX8nvuPbkj4s.roa (hash: CUD+O9KICmmQQx1gdUSevF1umi42aYgBLH/jxWWsdAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:74:1c:03:95:16:50:1f:dd:c9:38:05:6c:92:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
        Validity
            Not Before: Jul 26 03:00:09 2025 GMT
            Not After : Jul 27 03:00:09 2025 GMT
        Subject: CN=649e549efc5a648f098ea56103a75c2d112201f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d9:24:7b:5b:e7:71:97:2c:b7:ae:e4:24:c9:
                    3d:4b:5d:3e:0f:67:aa:b8:6d:13:8b:ec:9a:de:a5:
                    e8:76:39:f5:0e:66:d3:53:23:ca:99:17:b8:dc:f0:
                    11:9d:a2:0f:14:d4:59:bc:9f:a5:ad:8e:ec:49:24:
                    38:4a:1c:b2:4c:70:6c:0c:f2:4d:3a:a2:ef:e4:2f:
                    a6:53:43:fc:1c:a5:8d:ab:7b:e7:e7:04:34:ed:d6:
                    15:23:60:ab:c5:49:42:38:af:1b:73:e6:9d:dd:3c:
                    84:d9:3d:62:44:4b:14:d7:d0:b5:9b:7b:70:28:72:
                    0a:19:28:64:28:1d:69:df:d2:65:69:60:f8:54:c8:
                    08:49:dc:10:66:51:8a:25:0f:39:6a:63:4e:b4:f4:
                    e1:43:6f:f2:51:8e:19:03:44:09:e6:25:c7:d7:55:
                    ec:66:0d:0e:f6:41:dc:09:a4:d2:c7:b2:57:8a:c9:
                    d6:1c:3e:b7:b4:6b:f6:2e:ed:32:eb:3a:7b:73:7d:
                    ec:b5:36:bf:03:7c:8b:cb:c5:13:ca:cc:52:87:6a:
                    fd:d6:63:f4:7d:c7:54:cf:2f:7e:c7:ee:d8:cd:c5:
                    42:58:8f:4e:bc:c1:ec:f0:7d:e4:55:9a:9a:6f:05:
                    04:25:9f:10:4e:80:7a:a5:3b:67:b6:43:8b:69:27:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9E:54:9E:FC:5A:64:8F:09:8E:A5:61:03:A7:5C:2D:11:22:01:F5
            X509v3 Authority Key Identifier:
                keyid:7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:54:dc:6f:08:66:93:0f:a4:18:db:eb:05:ae:aa:a2:9d:d5:
         6e:c3:be:53:3b:74:14:71:b1:23:e9:f1:2e:0c:ef:2a:c0:d1:
         f3:46:fb:7c:c4:b0:7d:d1:e9:c5:58:d4:50:c2:eb:c5:db:ce:
         00:59:da:fc:18:4d:97:d2:61:b3:d1:53:1b:ca:9c:a7:45:4d:
         d8:35:5a:53:b2:2b:5e:89:67:21:dd:cc:d2:e3:db:a3:86:b2:
         f4:9d:0f:2c:8a:0a:54:94:e8:2d:3d:cf:4d:78:f4:33:57:87:
         71:9c:9c:fe:c2:25:3d:f2:22:d0:b0:c5:bd:b3:9a:36:ca:9c:
         2c:49:7b:6c:39:50:18:ce:3e:f1:2d:fa:e9:1a:4d:1a:cf:e5:
         12:2b:ec:0a:a2:93:b6:28:11:af:5c:0e:bd:ce:c5:fc:3a:b6:
         24:1d:2d:7a:50:85:26:8e:91:8a:dc:f4:30:b4:b9:78:4a:85:
         68:50:c8:f2:ad:85:91:f8:a3:56:f4:f1:5a:c1:84:9e:e6:7a:
         f5:fa:33:1c:68:7f:ff:56:75:21:2c:55:4a:32:a1:b9:60:76:
         95:61:37:aa:d0:77:a9:b0:95:98:e5:93:fc:c9:63:3a:16:95:
         1e:45:31:38:39:df:e3:14:8e:1f:14:27:bd:b1:90:f4:e2:77:
         29:c8:9f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:38:00 2025 by rpki-client