Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File:                     FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier:          ++mwdat24CIfXTgKxWt+FMTtW6v/+R+/W2qsRR5cOtk=
Subject key identifier:   94:8D:46:F9:18:7D:D7:EF:F3:FF:91:E0:18:52:7A:06:7A:34:E6:FD
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer:       /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial:       01984664A2F4057C6250AACE1CDB1931E4BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number:          0BF6
Signing time:             Sat 26 Jul 2025 11:00:57 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:57 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:57 +0000
Files and hashes:         1: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: CBBDqzWG1BG99kBZsyAUhOFMMBaRSpBfQ1+ClITA8fI=)
                          2: T8jVRfNtgOkoesNchTYMyWBMejA.roa (hash: odUOdpKN+tr75AiaB4U/yYO30gvxGiZ+PPW0U2k0wWk=)
                          3: _oI5hyBnCt55tCVsP54xRvG07cg.roa (hash: siBfTW9OHIW7tDQ3Efjyi7KuTusgOUvikxuMwP5Dkrs=)
                          4: h09V_pfLhbG06t0gQbFrPM7mXKs.roa (hash: 5yQRSQYWk0Fc992YjmOb7t6zzDvUZZ6yh9Kn/c45gMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:a2:f4:05:7c:62:50:aa:ce:1c:db:19:31:e4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
        Validity
            Not Before: Jul 26 11:00:57 2025 GMT
            Not After : Jul 27 11:00:57 2025 GMT
        Subject: CN=948d46f9187dd7eff3ff91e018527a067a34e6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:01:d5:5c:fa:53:ff:29:88:4d:4b:ea:df:96:
                    07:3c:4d:e5:37:af:a0:42:ba:42:37:0b:43:dd:eb:
                    63:bf:aa:c4:18:70:b7:75:79:d9:25:72:c1:0b:50:
                    9b:06:1e:fd:c0:10:d9:c2:c3:7d:09:76:63:85:0f:
                    7c:f3:33:7c:c4:ff:f9:ba:af:8c:ef:50:6d:b5:f3:
                    7a:ae:ed:72:9f:5a:33:74:aa:bb:1b:dd:97:98:07:
                    e1:08:eb:9e:4f:af:15:1a:bc:f2:e1:bd:73:97:71:
                    34:56:36:33:0a:0c:e7:b4:e7:02:cc:b6:e3:75:e4:
                    a3:69:8a:d5:03:a5:37:d4:29:05:27:01:43:28:cb:
                    4f:54:fd:f0:f4:5d:1f:d0:df:67:57:10:2f:23:0b:
                    8b:87:f3:6d:94:6d:6d:e5:bb:20:b4:a8:c6:3b:7d:
                    ed:38:8c:ee:12:19:06:28:52:17:e9:f4:26:dd:03:
                    fc:f7:b4:54:fd:42:fa:29:96:64:5a:4c:fa:a4:95:
                    ec:1e:f9:80:54:c2:8c:90:1a:45:66:6d:39:00:e1:
                    28:af:72:84:4e:94:37:68:0e:f4:0d:26:29:0c:cc:
                    31:d1:77:37:7a:92:10:58:de:56:fe:8d:1b:82:47:
                    f1:d3:71:09:25:dc:a2:65:9a:55:f7:0e:b3:6b:39:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8D:46:F9:18:7D:D7:EF:F3:FF:91:E0:18:52:7A:06:7A:34:E6:FD
            X509v3 Authority Key Identifier:
                keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d6:2c:e3:27:e1:3d:9d:f3:ff:da:68:50:c2:a8:f7:ae:ad:
         bb:b6:cd:5e:90:cd:a8:30:9c:5e:64:87:aa:33:96:31:a5:88:
         78:b5:c2:7b:45:47:2d:0b:34:67:d2:fe:a3:86:e3:a3:45:a8:
         92:9f:c5:61:2a:74:1e:3e:90:8e:db:62:68:38:ad:d3:71:e5:
         43:ac:23:62:56:cd:88:08:51:1a:00:57:9f:c4:cc:7e:d8:eb:
         90:2b:4f:53:2f:73:a0:17:47:f2:3e:5f:7c:b3:37:d4:25:4e:
         08:c0:6a:8f:9c:b7:33:7f:00:5f:5f:f5:81:97:50:8c:45:0f:
         8a:bc:27:39:bf:13:b5:e4:d0:71:73:a5:07:c9:8b:7d:b1:e1:
         5c:57:15:74:bc:e9:e3:e1:6e:fa:50:e6:9d:0a:1f:51:ec:bb:
         75:66:2b:84:43:4c:f3:47:d1:8c:58:15:c6:0b:02:f8:35:95:
         f1:ba:cc:6a:ed:62:93:0d:74:f8:63:1d:a5:23:84:ac:99:31:
         ea:79:1a:55:71:53:67:79:d5:d5:8e:78:a9:56:b3:c4:9d:73:
         32:78:66:67:c3:8e:7c:05:03:f8:bb:2f:7d:59:89:a2:61:fc:
         87:61:19:67:ba:ee:6d:37:ab:76:e5:ff:92:44:a4:30:1b:30:
         39:6d:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:19:18 2025 by rpki-client