Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
File:                     88huoplek0tlBBkRy562WHLCKJ8.mft (raw, json)
Hash identifier:          wm5tD1HFhyUfMflrfO8XjORiORdvOcQMO91vmTxiBj0=
Subject key identifier:   D4:D4:DB:EA:5D:5A:22:AD:E6:BF:40:39:16:7C:BF:CA:2B:42:26:D3
Authority key identifier: F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
Certificate issuer:       /CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Certificate serial:       01984966EF981B4C36F27E6DF468C3D1CD9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
Manifest number:          14F5
Signing time:             Sun 27 Jul 2025 01:02:19 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:19 +0000
Manifest next update:     Mon 28 Jul 2025 01:02:19 +0000
Files and hashes:         1: 88huoplek0tlBBkRy562WHLCKJ8.crl (hash: zHdgCuwnWtYOae+pr9bpbvXHPcvAt02qNKDOK1XjD5k=)
                          2: hvBR5Lh2V5nBCkDL4kLbjgOv4x4.roa (hash: roHQdZzbDc98BWIijFr4uNTSgf0x5DY16Sjtlk2cSOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 01:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:ef:98:1b:4c:36:f2:7e:6d:f4:68:c3:d1:cd:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3c86ea2995e934b65041911cb9eb65872c2289f
        Validity
            Not Before: Jul 27 01:02:19 2025 GMT
            Not After : Jul 28 01:02:19 2025 GMT
        Subject: CN=d4d4dbea5d5a22ade6bf4039167cbfca2b4226d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:0c:96:2d:1e:18:e0:a9:07:e2:fd:ff:c7:
                    5d:fc:da:eb:80:b9:29:d6:e0:69:71:91:b0:37:86:
                    90:57:21:f0:31:c6:e0:74:46:99:f7:45:f8:46:c9:
                    1d:e8:f2:0b:ce:34:88:eb:87:36:0b:05:52:19:99:
                    e3:05:e2:12:c0:d2:1b:0d:5a:64:d6:c2:78:61:b5:
                    71:06:de:c5:9d:ae:39:1b:e1:4a:a9:3c:cd:28:bd:
                    bb:ff:bd:00:78:b6:7a:60:6c:1a:54:54:96:36:a0:
                    ef:2f:16:18:ba:56:97:3e:59:8b:c4:ac:ae:11:b6:
                    f8:9b:7a:1e:a5:cd:ec:0c:af:0f:c7:64:a5:f1:0f:
                    e6:7a:c0:3f:6d:17:4b:91:ed:4b:4b:82:1f:8a:20:
                    ad:2c:3b:a5:cb:b2:a4:06:fe:a5:29:b1:2a:6f:45:
                    d3:1a:f6:2a:bc:7f:92:30:cc:3e:30:a6:db:c8:c4:
                    ae:3d:ee:83:f7:af:a7:29:5d:91:86:95:f6:8e:75:
                    ae:8d:84:57:20:b5:4f:54:92:d7:23:5b:da:86:ae:
                    1a:c0:d6:78:64:1a:80:49:55:09:34:4f:07:34:97:
                    e9:88:95:98:1a:98:01:50:ed:cd:4b:ea:9e:68:46:
                    5a:0f:6b:ce:d9:0e:28:fb:d6:a8:84:3f:a9:aa:79:
                    c3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D4:DB:EA:5D:5A:22:AD:E6:BF:40:39:16:7C:BF:CA:2B:42:26:D3
            X509v3 Authority Key Identifier:
                keyid:F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:95:f0:97:15:0d:d6:16:0b:36:f2:8e:e8:58:5e:dd:51:6c:
         ef:fe:26:70:49:4f:9b:87:47:7e:4b:c8:9e:4a:46:8e:93:26:
         fe:21:94:bf:fb:77:70:1e:f5:68:05:f0:76:39:ba:11:a5:7e:
         81:c5:3a:c9:f1:cf:33:ec:0f:dd:b0:6e:e7:39:1b:ac:ec:6b:
         c3:ee:d7:7a:b0:9c:85:c8:a8:ba:1b:cd:3b:81:b2:4a:6a:81:
         52:99:9e:dd:ae:38:9e:88:b5:b1:5d:8c:c4:a9:a5:eb:63:9d:
         2e:80:61:ed:86:f9:47:0c:79:c0:71:97:6c:66:9b:9f:ba:a1:
         ab:cd:6f:3a:4f:ad:18:80:f1:d8:de:ac:14:3b:6b:9a:bd:e6:
         7d:51:5f:e2:90:db:c7:fe:ea:bc:6b:54:1e:6d:65:8b:f4:58:
         4d:db:b6:7a:79:42:c8:3b:56:a0:dd:dd:ea:c5:09:7e:97:b4:
         a8:c6:cc:31:85:f0:3b:81:25:ce:4a:3a:9e:23:20:98:29:e9:
         c1:3d:cf:b6:9f:f2:41:00:fc:34:63:d5:1c:7a:16:34:d0:52:
         e3:d8:62:31:2e:32:dc:9f:32:07:64:c6:6f:5e:33:c5:75:b0:
         3d:98:5a:f0:81:e7:42:65:11:5e:c6:ee:0d:41:b4:25:63:87:
         6e:52:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:21:18 2025 by rpki-client