Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
File:                     7YUEg8zhM3scbC_d6pxdu0p-GRo.mft (raw, json)
Hash identifier:          8P4GNEnRWa+8ldBwjlo1wThJ8dKNo9GrriuWEWKg8ac=
Subject key identifier:   B4:FE:F2:3B:7E:3F:4D:1F:59:49:3C:A4:5A:30:41:85:12:F4:55:23
Authority key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
Certificate issuer:       /CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Certificate serial:       019849D3BAFF4C9610A67CB08F9E19CF0795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
Manifest number:          15FF
Signing time:             Sun 27 Jul 2025 03:01:09 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:09 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:09 +0000
Files and hashes:         1: 7YUEg8zhM3scbC_d6pxdu0p-GRo.crl (hash: 7FIQxCn9zdhbYM+sHpMxJ+XxZeFYnTxjtD8xeSlMxYU=)
                          2: dkZNbopwMIyrpNTLtKS1BEFrSe4.roa (hash: WHiCQDL82pBvjlz/Bz6xK48gzCLCBs8LyNMasCyQoiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:ba:ff:4c:96:10:a6:7c:b0:8f:9e:19:cf:07:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
        Validity
            Not Before: Jul 27 03:01:09 2025 GMT
            Not After : Jul 28 03:01:09 2025 GMT
        Subject: CN=b4fef23b7e3f4d1f59493ca45a30418512f45523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:03:8a:ec:35:d4:13:25:54:50:52:4c:70:c2:
                    93:d6:55:f5:9e:e9:bb:0a:f1:73:88:17:ce:7f:9d:
                    f0:10:3a:c2:f6:2f:79:c3:00:7b:9b:3c:f8:83:bb:
                    06:38:f5:eb:61:d6:3b:ef:a8:53:cd:91:7f:27:54:
                    7d:b3:17:08:00:ef:f4:e8:e0:74:93:c0:0b:24:73:
                    e5:75:a6:a6:10:45:b2:2d:4a:83:b3:63:1f:b8:37:
                    b5:b3:ec:00:af:61:8d:bf:fc:c7:48:db:45:1d:a3:
                    7a:a9:49:b8:87:0a:bd:e8:07:9c:10:c8:36:2a:61:
                    4d:38:7e:fc:47:b6:5e:3c:e8:d6:19:cf:e0:a0:cc:
                    42:37:f5:47:21:81:86:ee:d6:b6:d0:54:f0:bb:d7:
                    7a:f1:c7:6c:75:29:14:81:c1:80:e0:ae:17:35:ea:
                    35:cc:bd:47:75:c8:23:62:2d:07:d0:4c:61:cc:4f:
                    46:a9:3b:5e:0b:d4:ca:2f:4d:d4:6c:79:21:54:31:
                    12:7a:a2:b5:ef:ec:e1:76:fb:6d:c4:14:77:8c:58:
                    b7:89:0b:51:9c:56:f0:1f:5e:98:61:75:9a:46:52:
                    ca:40:4b:f8:77:42:fc:fd:8a:c1:30:36:08:43:31:
                    15:9c:fd:d7:ac:10:4c:04:83:2b:1c:34:9d:91:23:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FE:F2:3B:7E:3F:4D:1F:59:49:3C:A4:5A:30:41:85:12:F4:55:23
            X509v3 Authority Key Identifier:
                keyid:ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7f:0b:ed:2d:c6:86:0d:0c:25:8d:45:f7:30:7d:75:e5:7b:
         c2:74:26:60:8a:5f:bc:91:3e:8d:1b:88:57:64:a5:00:2e:06:
         77:77:8d:20:8c:ce:bb:f8:c1:f5:40:d5:46:e2:b9:75:57:49:
         db:e2:50:fa:3d:fb:ad:2c:75:fc:2c:a9:f0:33:f3:d2:65:fc:
         e6:e1:b0:8c:d5:f7:19:d6:e8:41:79:a1:7f:3e:23:36:b6:b7:
         2e:1d:4f:49:6c:8b:d8:7e:35:a5:16:dc:b7:67:98:36:28:94:
         9a:e3:97:38:eb:0a:d0:0f:34:b0:ca:ac:d3:c4:13:c9:f0:75:
         76:f7:42:2a:e8:93:c7:a5:7b:3f:c4:48:95:8b:eb:40:4f:4e:
         e8:7e:28:72:4b:0b:6b:57:59:fb:49:5d:2f:71:7f:48:f4:8c:
         ff:67:7d:26:a2:0d:88:13:bb:0e:0e:0a:ae:a4:df:dc:13:3e:
         ee:94:83:b3:05:05:af:28:33:43:b0:22:c7:57:2d:bc:92:ff:
         df:fd:4d:02:8b:56:d5:c9:ef:7a:f8:44:e1:da:3d:f2:9e:1a:
         d5:64:5f:24:92:9a:17:41:69:f7:41:55:2a:55:d1:1e:ad:67:
         df:cb:ee:9a:cb:cc:7b:42:7b:86:a2:fc:15:99:a8:56:2c:56:
         78:b4:00:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:58 2025 by rpki-client