Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File:                     RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier:          c+BRfyxV5Mrb39tmrHUjHPOhhDyu4U87DJqkIvYzMfo=
Subject key identifier:   FC:35:48:4D:E0:23:F4:9C:0C:3F:31:14:82:5E:94:86:C3:12:00:A9
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer:       /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial:       0198345DF004CFE5A78DC8478344D9D565FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number:          15F5
Signing time:             Tue 22 Jul 2025 23:00:27 +0000
Manifest this update:     Tue 22 Jul 2025 23:00:27 +0000
Manifest next update:     Wed 23 Jul 2025 23:00:27 +0000
Files and hashes:         1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: YrvcP9w9subdBEVnCdaWsTJw/zrC2x2oIc/Jhmzo6VI=)
                          2: zUnV9ug3DC1aZ-iIErb5v566M9c.roa (hash: 6FsHFRxJPUFm1fS2P0PMN2T/cQiz6Vr2yCENn0tZp3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:34:5d:f0:04:cf:e5:a7:8d:c8:47:83:44:d9:d5:65:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
        Validity
            Not Before: Jul 22 23:00:27 2025 GMT
            Not After : Jul 23 23:00:27 2025 GMT
        Subject: CN=fc35484de023f49c0c3f3114825e9486c31200a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bc:86:d9:07:b2:8a:6e:d9:e8:12:92:83:49:
                    19:7b:38:63:68:ca:09:69:38:1c:65:5e:db:bc:d4:
                    9c:4a:43:84:ab:f2:23:61:8a:79:08:d9:58:53:f1:
                    11:a2:a8:b0:df:3c:66:a2:57:0c:0d:29:22:d9:08:
                    71:17:82:47:f4:fa:ae:02:dc:29:41:45:75:ec:40:
                    77:2b:89:3d:9d:53:eb:47:0d:36:7a:5a:dd:84:2e:
                    e3:7f:89:66:0b:ff:62:44:34:59:37:f6:75:a2:32:
                    c5:7d:6f:11:49:53:e3:6a:1d:6d:aa:5e:31:43:81:
                    e1:29:5d:0c:66:f7:36:b3:0a:33:ec:8f:f8:8a:ba:
                    22:da:4e:12:94:68:4a:f2:9a:f7:cb:f1:22:f2:df:
                    c1:2d:b0:9a:4f:c5:c9:8d:59:f2:0b:07:7f:2a:9b:
                    39:57:93:d3:23:d9:89:d1:4f:36:ad:1e:79:1d:17:
                    d9:86:83:e7:94:7b:da:24:1e:a3:e2:83:1b:da:8e:
                    33:79:3c:17:e8:f1:68:e2:a2:e4:be:1a:08:dc:db:
                    4b:5a:af:24:0a:9a:5d:25:d3:5c:c1:f8:e8:5b:29:
                    b8:21:28:ed:65:7a:2f:a8:7c:2b:1b:59:15:21:70:
                    99:f7:8f:6b:e2:7e:3d:77:08:2d:c7:3d:0a:74:aa:
                    4f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:35:48:4D:E0:23:F4:9C:0C:3F:31:14:82:5E:94:86:C3:12:00:A9
            X509v3 Authority Key Identifier:
                keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:53:f2:52:21:f6:a6:c7:57:86:85:89:8b:91:37:5c:bd:44:
         dd:84:44:0d:4a:30:d5:8b:4b:9e:11:6d:c5:5e:6b:7d:d6:08:
         9a:1e:f5:87:9a:69:22:c5:ed:5a:43:b6:81:d4:f4:c9:c2:c8:
         4d:8b:d2:1d:35:99:8b:e5:b4:31:a6:f7:8b:6c:ab:5d:fa:53:
         97:e9:a6:5d:31:68:e2:1b:b0:5a:79:f4:05:c6:b6:ca:86:dc:
         3b:b9:6b:22:66:87:37:e0:0c:df:39:12:55:d8:38:4e:13:e0:
         da:29:73:b4:a2:11:7d:ea:6b:d1:d0:15:93:06:ee:8a:00:3d:
         08:ea:68:bb:03:46:a7:cc:52:c4:5b:ac:7f:3e:51:9d:a4:1a:
         dc:e4:7f:83:79:02:ce:19:88:1d:0d:48:62:12:ff:1b:5c:01:
         d4:c5:8e:1f:d8:81:47:9c:ba:10:24:7e:bb:7b:ad:bd:95:62:
         f5:18:5d:87:5f:a9:58:af:cd:bb:2a:43:16:c2:bf:bd:b0:f2:
         f2:27:11:bf:80:1b:7b:71:8f:f7:50:cf:0e:ef:72:31:9d:25:
         31:69:36:71:a4:0b:6e:fd:48:54:1a:f9:1b:c3:6e:fd:e7:88:
         3b:e0:f4:8a:19:2c:94:a2:37:27:30:19:87:5e:25:d6:bf:fc:
         e3:df:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:08:04 2025 by rpki-client