Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
File:                     fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft (raw, json)
Hash identifier:          F7/xLC86NpXXqgnKur9OfKwqrgXXzEu8mqWAOKt1+w8=
Subject key identifier:   2B:30:BA:90:B4:B3:B1:2C:2B:50:14:A5:C4:1A:3B:C4:A3:3A:B8:7C
Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Certificate issuer:       /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Certificate serial:       0198469B33C9D338ECDAE40F1610DB824202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
Manifest number:          15FD
Signing time:             Sat 26 Jul 2025 12:00:33 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:33 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:33 +0000
Files and hashes:         1: JcAhZrilsZkvSyojajHWDjOF_6I.roa (hash: W7eqhWRP/GcuUd5Q71f0zaMk5StnfS4hfdbNGseVYE0=)
                          2: fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl (hash: dEmOntA8toIgpwcS6C3hzupm6wtBJPMzl0bstnayXKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:33:c9:d3:38:ec:da:e4:0f:16:10:db:82:42:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
        Validity
            Not Before: Jul 26 12:00:33 2025 GMT
            Not After : Jul 27 12:00:33 2025 GMT
        Subject: CN=2b30ba90b4b3b12c2b5014a5c41a3bc4a33ab87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8f:b6:a7:12:80:fd:46:d5:ae:c4:91:b9:76:
                    78:64:0b:70:4a:07:ae:b0:db:a0:41:b5:91:0f:d0:
                    a0:df:d0:43:4a:96:fa:5f:71:e3:ff:83:a4:ee:03:
                    b8:43:71:af:f9:ae:7c:94:f3:e9:f8:02:d2:3c:a0:
                    54:79:63:34:29:03:01:3e:79:48:d8:db:d1:84:00:
                    d6:59:ce:d5:04:10:fb:80:01:31:e8:84:39:58:1c:
                    b8:a9:02:0f:6d:5f:8b:a3:79:db:b1:3d:dc:26:52:
                    d4:41:be:98:7d:bd:7a:23:f5:7c:26:69:0c:cf:cc:
                    18:ef:9b:92:bd:a2:c3:e6:ca:f3:c5:14:54:55:f7:
                    68:bd:f4:30:3d:38:06:54:bf:df:09:fb:eb:79:e4:
                    72:db:26:00:a6:ff:0b:f8:00:76:ed:e6:36:6f:1d:
                    32:ae:89:69:e5:fe:09:2e:51:cb:55:4c:c1:64:0a:
                    58:2c:f4:5b:27:6d:40:3f:5f:eb:58:61:e2:c2:9f:
                    21:b4:19:9d:9f:39:37:6d:ec:4c:44:66:1b:d7:ad:
                    9f:db:4b:c2:2e:50:e3:c3:44:8f:1f:0a:5f:fe:a0:
                    c7:60:15:59:01:b4:ba:0c:70:12:92:09:5a:38:09:
                    1c:ac:58:70:39:c8:86:37:d2:e1:6a:99:cb:c3:6f:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:30:BA:90:B4:B3:B1:2C:2B:50:14:A5:C4:1A:3B:C4:A3:3A:B8:7C
            X509v3 Authority Key Identifier:
                keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6f:ad:91:79:1e:2e:20:48:81:7d:fe:be:d7:b2:6e:23:b7:
         9c:20:1c:d2:f3:aa:4f:34:db:f0:ce:c9:cc:23:8c:d6:de:76:
         d6:d1:91:58:5a:3d:fa:c0:60:f3:90:a3:75:4f:f2:3e:0e:0b:
         4c:d2:ed:58:41:2a:bf:1c:96:31:37:3a:7f:97:43:29:60:f6:
         4e:89:9c:7f:13:bf:49:5f:29:02:21:86:dd:91:b0:6b:37:d0:
         7a:85:75:f9:22:02:65:89:70:c3:47:cb:c8:ca:a8:30:7d:92:
         c7:83:f4:69:00:be:ac:e9:b7:c6:13:06:ae:69:b6:cd:13:18:
         ed:95:4b:bf:45:11:fc:00:a1:ae:59:cf:6f:43:d7:52:fa:1b:
         38:e9:11:6d:9b:de:06:c9:c6:d4:da:ed:d1:c2:f2:f0:51:1b:
         ba:e4:8e:cf:b3:40:89:28:77:3f:32:81:57:e2:fd:88:bf:68:
         01:54:63:6e:d2:25:b1:18:3f:7e:f2:89:0c:93:68:49:78:72:
         18:0c:e4:4e:70:b6:c4:bd:0b:5e:dc:24:03:6d:0e:e2:6f:b3:
         f1:b5:d1:5f:06:03:6c:bc:8d:53:16:a9:27:b5:fa:62:76:ac:
         7b:5f:dc:c1:32:2a:08:99:d8:04:22:15:39:b0:94:32:80:cf:
         d9:6f:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:23:14 2025 by rpki-client