Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
File:                     84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json)
Hash identifier:          sp2IniCtuwCYFD2WHuwo33l24l9PddVSAqOW/zgOQsE=
Subject key identifier:   FB:B2:73:62:B3:A7:30:9A:8B:F1:8F:0D:F4:A3:3E:64:11:A3:6F:49
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Certificate issuer:       /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial:       019847770283BC5FD272CE606FFF33E03652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
Manifest number:          15FF
Signing time:             Sat 26 Jul 2025 16:00:38 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:38 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:38 +0000
Files and hashes:         1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: 9ArFQb7k3H8hIE57Anu5N05+pYz3LtI7bwPt6oehnW4=)
                          2: lIHvPze8MhW65ATICPZrXtfvWLg.roa (hash: bg+JonT/EML15sUdW/ANznJHTOv/3C3HqVEO6q5ovAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:02:83:bc:5f:d2:72:ce:60:6f:ff:33:e0:36:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
        Validity
            Not Before: Jul 26 16:00:38 2025 GMT
            Not After : Jul 27 16:00:38 2025 GMT
        Subject: CN=fbb27362b3a7309a8bf18f0df4a33e6411a36f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:cd:c5:65:0d:64:2d:8a:fa:50:e4:52:01:
                    2c:cc:4f:a3:87:b8:26:5c:e1:13:a5:86:53:0e:f9:
                    04:42:7e:b1:f8:b9:d2:52:e7:35:e8:bc:e6:df:04:
                    89:60:2c:06:77:4f:3b:ad:91:b0:b5:d7:97:d5:aa:
                    96:e3:5a:63:05:b3:e6:74:6f:b9:ba:68:0e:a6:eb:
                    31:87:68:61:59:8a:5b:c2:f1:e3:4e:db:dc:b3:98:
                    b1:c4:fc:10:0e:43:e0:93:db:1a:87:39:6b:1e:cb:
                    3f:2f:9e:ee:84:88:8d:b0:1a:d0:e1:04:29:b0:c6:
                    a1:6e:0b:8b:5f:fe:9b:1a:27:17:5a:b9:55:13:ee:
                    6e:de:4d:cc:28:71:07:8c:1a:45:51:53:6a:44:b8:
                    85:81:4f:15:df:d2:81:2c:69:04:18:d6:b4:88:52:
                    34:88:f1:b9:0e:60:c5:28:67:38:f0:71:06:41:0c:
                    ae:ed:b4:84:76:07:e5:d2:86:2c:09:7e:61:92:a7:
                    20:f1:92:72:4d:b3:ba:43:28:5c:4a:3c:32:ee:c4:
                    ed:8c:e2:f2:3d:00:15:d3:87:e0:05:e6:cb:4c:c9:
                    f3:ad:56:17:f9:18:17:cd:0b:a5:31:8d:0f:e4:2b:
                    7d:32:cc:cc:f8:5e:c7:14:40:74:86:9a:b0:a5:a8:
                    0a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B2:73:62:B3:A7:30:9A:8B:F1:8F:0D:F4:A3:3E:64:11:A3:6F:49
            X509v3 Authority Key Identifier:
                keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8e:7f:aa:d3:03:0e:b9:57:fd:4b:2a:2c:37:0d:1d:3b:c3:
         4e:30:17:bb:54:d2:a4:33:ee:36:ff:e7:76:16:f4:01:1e:81:
         50:2b:79:b2:e2:a2:d0:39:45:cd:ef:4a:17:9e:a2:0a:d3:85:
         f0:9d:e0:ad:64:bb:0e:fb:2c:cb:c4:08:81:33:9a:10:a6:98:
         21:c2:ef:43:16:09:15:f0:5a:ed:c5:c1:57:11:e2:86:7f:96:
         45:dd:38:75:4f:df:e6:4c:3b:73:b2:ba:b8:36:fa:61:f2:02:
         a8:51:ae:39:31:5b:fb:6c:14:fe:bb:db:7e:e2:95:ad:20:6e:
         eb:51:b6:c6:cb:6e:b5:83:13:a4:df:9b:7c:8b:d7:02:81:88:
         30:56:c4:4b:39:32:cd:17:4c:2c:81:73:6e:f3:f0:a2:26:7c:
         ca:79:2e:61:8d:fd:1b:d9:2a:fb:9f:28:a5:e8:3a:40:71:c3:
         e1:48:21:77:fc:44:df:1d:96:20:8d:e9:6c:4e:20:7f:62:7d:
         dc:78:31:26:48:41:01:ff:c5:d9:fc:52:9c:b5:1c:bf:6c:1b:
         f7:39:b2:2d:0b:05:54:44:70:4e:c2:62:61:fc:c9:e4:5a:fb:
         02:12:87:f5:b3:10:fb:43:49:24:bc:48:9a:be:cf:44:f3:2e:
         41:ed:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:25:07 2025 by rpki-client