Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
File:                     9r15bwtjNc_hKKXPm5fudoCC7Y0.mft (raw, json)
Hash identifier:          s5o+BnEMPXK4tAAE8oAMl2l8uhDYwoPfpNJEvoGXe8g=
Subject key identifier:   05:F9:15:93:28:AE:C8:FE:27:81:EB:C1:FC:96:01:23:22:5C:DF:8E
Authority key identifier: F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
Certificate issuer:       /CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Certificate serial:       0198530D83CE34AA4A4FCD94E15E29F13048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
Manifest number:          FE
Signing time:             Mon 28 Jul 2025 22:00:51 +0000
Manifest this update:     Mon 28 Jul 2025 22:00:51 +0000
Manifest next update:     Tue 29 Jul 2025 22:00:51 +0000
Files and hashes:         1: 9r15bwtjNc_hKKXPm5fudoCC7Y0.crl (hash: VTQIytAkrzDIbnJ3i/SIp+uYc3ZvchAtwT03T3cXfOs=)
                          2: RIbTLj7txNwoYxh7oe27Ga8iD9g.roa (hash: b58BSl0OG9Cy3uXrPooEMPlzPzUnf3IVg7gnhdmepqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0d:83:ce:34:aa:4a:4f:cd:94:e1:5e:29:f1:30:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
        Validity
            Not Before: Jul 28 22:00:51 2025 GMT
            Not After : Jul 29 22:00:51 2025 GMT
        Subject: CN=05f9159328aec8fe2781ebc1fc960123225cdf8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:71:79:ab:5b:92:22:4a:7d:7b:95:26:03:
                    59:a9:86:19:da:07:54:a0:52:e8:5e:c5:6c:42:41:
                    e3:98:88:55:0d:26:73:b5:93:02:96:5f:c0:6a:9e:
                    29:33:1d:09:0b:0a:41:31:11:95:c3:2b:4f:b0:e6:
                    c3:3d:ee:79:fe:a6:6d:85:f2:a8:3b:ff:26:b7:41:
                    fd:86:f4:cc:a7:b2:77:84:e4:99:b6:d8:1d:e4:0d:
                    da:50:53:2d:c4:72:f4:4b:41:b7:1f:d3:2e:51:65:
                    89:5a:62:0b:d7:b3:0c:20:a2:b0:98:c1:90:c7:77:
                    7a:63:18:fa:28:3f:7d:55:ee:b9:f7:7c:59:35:6c:
                    15:ef:bf:91:e4:8b:8f:40:50:f2:ae:0e:a8:4d:65:
                    8b:52:1e:35:1a:de:be:93:93:b1:37:cf:b4:5b:33:
                    1a:40:2f:77:75:5d:ab:fe:26:12:b5:0d:9c:b7:fc:
                    3c:ae:4c:ac:cc:90:c9:61:8d:12:c3:04:8d:e5:b2:
                    ea:08:f2:d2:33:b0:c2:5a:e2:29:70:80:d3:f5:48:
                    92:cb:24:08:31:a9:82:28:69:df:75:92:df:11:2e:
                    59:24:1e:dd:1f:32:98:e0:0c:58:ed:9c:34:0e:89:
                    e5:20:ba:0c:66:8d:cb:06:ba:6f:24:ac:01:5c:92:
                    0c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F9:15:93:28:AE:C8:FE:27:81:EB:C1:FC:96:01:23:22:5C:DF:8E
            X509v3 Authority Key Identifier:
                keyid:F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f1:85:45:91:ab:84:6b:9b:57:f7:f7:b0:a7:6c:bb:39:4b:
         a6:af:5e:da:73:87:9a:67:48:4e:8f:92:79:c6:f7:a3:45:fb:
         22:e9:8a:13:30:51:d9:c1:90:3a:3f:64:83:ff:c2:ba:df:75:
         72:70:c5:05:52:50:87:50:79:b0:99:4d:e5:76:21:6b:87:14:
         8c:0b:f4:a2:a8:45:2d:95:f1:7f:e0:54:e0:35:87:6a:a1:cd:
         19:4b:25:d3:b3:90:4c:6a:62:c5:d2:ce:29:6c:be:a0:bb:fe:
         b9:51:10:a8:50:f0:0f:73:cf:a4:59:a6:7b:c6:36:1f:50:67:
         ac:b7:ee:86:ac:8a:c8:70:f6:41:ba:4b:2c:c0:f6:de:36:05:
         b4:a1:45:d9:f4:a4:e1:fd:1e:95:27:50:35:90:2c:51:f3:a7:
         c0:88:da:a9:eb:cc:81:44:e8:2a:1d:80:3e:5a:bc:c3:80:67:
         06:ff:23:35:6c:64:17:87:da:ca:54:1c:db:65:4a:04:4f:57:
         c9:e4:7b:9b:1a:40:ce:c5:03:5f:37:51:cf:00:f1:37:1c:7d:
         61:fa:94:96:c8:3d:ff:4c:c1:a2:26:5e:03:d6:d2:70:a3:a8:
         5a:db:b2:f1:b5:f2:5c:cf:35:b6:c5:84:ee:ca:fa:72:32:4e:
         8a:6c:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:30:04 2025 by rpki-client