Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File:                     k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier:          z1Y/39tn3fVYpD+D9IBpJ9f+tUI1Aau502FPuirwthw=
Subject key identifier:   BA:2D:11:35:81:19:78:A8:18:AE:39:B6:B8:22:D9:98:D5:B4:C4:E0
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer:       /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial:       01984287782527B3EF1237F8DCD9EF7FBA26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number:          0EBE
Signing time:             Fri 25 Jul 2025 17:00:30 +0000
Manifest this update:     Fri 25 Jul 2025 17:00:30 +0000
Manifest next update:     Sat 26 Jul 2025 17:00:30 +0000
Files and hashes:         1: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: dXKEvdVi+gf1l6oY2gT27F2JlADGMzSOYQkA6hHwxvc=)
                          2: rqMllQ155A2S7SS_4PQfBNAn4gw.roa (hash: fS87JWrPgH68/hK1SJfJVRTn1bsQGrCVPuQ1+n82lao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:87:78:25:27:b3:ef:12:37:f8:dc:d9:ef:7f:ba:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
        Validity
            Not Before: Jul 25 17:00:30 2025 GMT
            Not After : Jul 26 17:00:30 2025 GMT
        Subject: CN=ba2d1135811978a818ae39b6b822d998d5b4c4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:b9:55:5c:7b:fb:a5:39:b9:6f:e9:70:ea:
                    47:1d:17:7c:f3:c4:a9:8a:57:3a:1e:a5:73:3e:84:
                    54:75:48:a1:2e:e6:ca:a2:cc:cb:a9:1c:bc:de:31:
                    0f:a2:73:ea:c8:90:a1:40:93:d5:a7:72:39:98:e8:
                    71:20:dc:1c:5a:63:08:10:17:95:e0:41:50:32:37:
                    2a:59:1a:7d:8e:e6:84:39:64:17:e2:23:b9:c9:f9:
                    11:3e:04:78:7a:b0:7d:ba:3c:cb:af:e8:b5:af:69:
                    b6:14:8f:99:8e:01:50:7c:5a:d2:81:8b:1a:06:a5:
                    f9:7e:bb:92:85:27:98:d6:a4:49:b8:8c:ed:1f:a7:
                    2b:ea:24:89:87:80:05:88:d1:a9:1c:e1:6a:30:9d:
                    97:e5:a8:89:c1:85:fe:98:5d:8c:e6:b8:9d:dc:35:
                    7b:1f:8e:62:5f:30:64:3f:a5:85:8b:e9:6f:b9:de:
                    da:46:0c:32:d3:44:e5:80:e1:2d:fd:76:b0:a1:ae:
                    84:b9:40:3d:35:4a:ef:96:a7:cb:22:c0:8a:b0:96:
                    22:fc:af:73:c6:7b:92:c1:ed:a3:d7:f2:10:38:16:
                    b8:05:a7:ad:c4:18:cc:3b:69:c6:24:fc:23:37:fd:
                    0f:3f:6d:b3:1d:11:5e:df:b3:89:85:56:d2:02:f4:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2D:11:35:81:19:78:A8:18:AE:39:B6:B8:22:D9:98:D5:B4:C4:E0
            X509v3 Authority Key Identifier:
                keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:1c:17:ab:27:7e:21:53:d0:ef:9e:f5:dd:a1:fb:c5:e6:8c:
         e6:df:97:63:b6:4b:38:79:7e:66:a0:4f:e8:c4:47:ca:ac:31:
         5f:5a:32:85:0d:60:57:38:f3:e4:a6:b6:64:1b:ca:e8:64:b3:
         36:46:99:53:f1:22:e1:3e:5d:b2:9c:ce:1d:dd:21:69:19:6b:
         7a:90:31:eb:e1:bf:95:a9:9a:75:9e:d2:c7:fe:d5:a9:d1:25:
         89:81:30:e4:11:60:13:e6:e4:af:09:ca:13:d5:57:2f:e4:92:
         25:5c:ab:8c:32:e3:be:0c:c7:aa:8a:b5:f7:37:40:0e:dd:1a:
         ac:70:c0:9f:4b:00:37:1f:b1:a8:32:8e:10:a4:cd:8a:63:70:
         57:30:f7:06:d9:c0:80:56:94:32:38:34:b1:18:a9:45:9c:a2:
         e3:66:f8:b1:23:c5:7d:b1:cd:69:69:0b:66:04:84:32:9f:06:
         ab:4a:ea:4f:21:c8:ad:6a:3e:61:ab:5c:c8:6c:53:81:24:c5:
         7d:83:fd:bf:fe:c9:ec:b1:15:eb:96:88:20:bf:68:6a:af:14:
         e3:1c:2f:59:a2:23:26:68:23:6c:72:e8:2f:82:75:26:dd:47:
         84:ce:a1:c8:d9:20:1c:8b:12:2c:6f:d4:83:60:b2:38:3e:ef:
         cd:14:f9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:43:58 2025 by rpki-client