Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
File:                     Fi14JJtyG00s6M9t_PvEQiITrJ0.mft (raw, json)
Hash identifier:          c+j5X+Xj0/7Kt8L9ADdlB4S1VB0PKSQZA2MzOjI5PYI=
Subject key identifier:   83:95:95:6E:01:22:ED:2F:85:3D:EC:1E:72:72:FA:0C:D1:49:62:A8
Authority key identifier: 16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
Certificate issuer:       /CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Certificate serial:       019845F5FE7DC31489BC974A8CF7E4833D7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 09:00:06 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:06 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:06 +0000
Files and hashes:         1: Fi14JJtyG00s6M9t_PvEQiITrJ0.crl (hash: XOFhI0p0Wam0V6+vDHzxBklpTdzOKg4glE7FoGb523o=)
                          2: vYN3fYbPSffdlZL2ecCWPRuF_iU.roa (hash: f7zca1Xa7343zBsVvDmSCYRZch2YTDhkeKKqt6AwzpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 09:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f5:fe:7d:c3:14:89:bc:97:4a:8c:f7:e4:83:3d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
        Validity
            Not Before: Jul 26 09:00:06 2025 GMT
            Not After : Jul 27 09:00:06 2025 GMT
        Subject: CN=8395956e0122ed2f853dec1e7272fa0cd14962a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:55:4c:00:44:ae:17:d2:db:31:60:df:c6:89:
                    c1:44:05:61:1f:00:b0:e2:40:df:7c:8b:1d:ab:f4:
                    85:6c:29:d1:98:a5:5d:0a:48:f5:b3:60:4c:c3:ce:
                    f3:8f:77:af:b9:73:3a:ea:4d:58:fd:54:35:0e:b9:
                    92:57:68:e7:7c:24:2e:3a:ca:12:e7:81:90:94:6c:
                    ca:38:fa:06:7b:08:b5:1e:35:71:2a:28:51:2c:b2:
                    d6:0d:63:5f:62:8d:53:77:f1:11:2c:cc:e5:26:3e:
                    c5:eb:fa:88:81:26:75:03:7a:f1:0d:83:ac:a3:d1:
                    08:a6:66:ff:4f:b6:d0:40:f2:2f:c0:65:f9:f8:dc:
                    38:3b:34:be:28:a4:76:0e:01:d3:68:c1:6f:b2:4e:
                    12:f1:0b:31:20:29:c8:62:24:c8:87:1d:0b:1e:db:
                    83:b9:04:a5:d1:f9:18:01:f9:05:c0:db:4f:82:c4:
                    b9:b3:c8:0c:0d:dd:bc:eb:c6:80:66:fd:13:1b:5d:
                    03:9b:98:96:a1:4b:eb:af:57:25:bd:e3:dd:23:29:
                    cc:63:e4:2e:72:aa:17:02:1c:69:d5:64:ea:b5:76:
                    7a:b0:6f:0c:64:16:17:0c:6f:29:cd:04:ac:c7:6b:
                    58:a7:77:9a:27:4b:09:c3:7b:9e:df:29:1b:f2:a7:
                    24:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:95:95:6E:01:22:ED:2F:85:3D:EC:1E:72:72:FA:0C:D1:49:62:A8
            X509v3 Authority Key Identifier:
                keyid:16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:51:87:f6:02:9e:c0:87:d2:69:fc:6e:e8:5b:70:fe:c1:b8:
         c1:b5:e5:70:c5:f3:ac:94:6f:57:b1:17:78:33:a0:3d:c6:13:
         c4:96:79:00:fd:df:a8:f8:34:da:65:a5:9a:e5:d7:1b:1b:34:
         43:16:0c:0d:66:f7:35:94:3f:59:ed:11:61:81:4a:57:33:07:
         07:d8:21:37:cd:2c:23:b1:e6:35:0e:96:10:25:f4:01:0f:de:
         01:d0:ec:83:37:bd:a2:61:29:62:77:03:89:d8:f9:53:f3:ca:
         da:8d:23:27:29:1c:5c:20:80:2f:5c:f5:b4:71:5b:7e:eb:ea:
         1a:16:81:b2:c7:c4:56:84:81:9e:1c:19:62:d0:c2:9d:4c:f0:
         16:4e:fa:5a:a6:f2:d0:87:2a:a3:7a:8f:8a:92:20:bf:65:28:
         4e:64:0f:f3:82:26:d4:14:04:25:9e:91:0c:e9:3f:eb:63:b9:
         e3:86:2d:10:98:80:ac:cf:33:94:18:e7:58:e5:28:3e:66:9a:
         c2:e0:7b:24:23:24:37:7e:ce:6f:cf:73:84:5b:5b:bb:ca:43:
         88:90:c3:8d:70:9c:e1:ad:de:b4:c3:3f:e6:32:05:64:ac:63:
         fc:ce:ce:27:63:2b:64:3a:c5:b3:08:b5:0a:92:64:c7:ed:88:
         4c:bf:77:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:13:40 2025 by rpki-client