Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File:                     r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier:          GcQQBaVIC+WVzSYfI0jIq8FVcGD8Feall21e5hBRxxM=
Subject key identifier:   F9:A6:FB:CC:C1:77:C2:70:A6:60:BC:15:F7:32:F2:ED:81:56:20:FB
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer:       /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial:       01983B729BB086591804F09E9EEA5CB8C40F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number:          15FA
Signing time:             Thu 24 Jul 2025 08:00:23 +0000
Manifest this update:     Thu 24 Jul 2025 08:00:23 +0000
Manifest next update:     Fri 25 Jul 2025 08:00:23 +0000
Files and hashes:         1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=)
                          2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: epnhC4K7nENyOREK30pu4JMpeiuiguoo8Ijv2L9ZAC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3b:72:9b:b0:86:59:18:04:f0:9e:9e:ea:5c:b8:c4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
        Validity
            Not Before: Jul 24 08:00:23 2025 GMT
            Not After : Jul 25 08:00:23 2025 GMT
        Subject: CN=f9a6fbccc177c270a660bc15f732f2ed815620fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:b4:d1:36:ec:4b:38:0a:8f:97:08:86:2d:
                    e9:fe:e6:5e:b1:3e:ab:e6:a1:a0:f3:b0:a6:b0:9e:
                    13:0e:5f:82:2c:b3:25:8a:09:d4:29:1e:ee:5d:63:
                    12:d1:1d:30:b2:5b:e4:9e:4c:66:6d:93:48:be:cd:
                    4b:28:33:62:27:16:cd:76:43:f7:ca:2e:5f:05:97:
                    bb:ac:2c:39:7b:a9:00:61:8f:4c:a4:56:2c:b7:3f:
                    c0:7d:8e:ea:4e:6c:d4:d0:b0:58:ea:2c:17:86:e7:
                    e4:f8:9f:d8:c3:5b:73:02:f2:87:fe:8d:df:39:52:
                    0c:6e:1f:23:2f:c9:63:0e:19:c3:9f:42:4a:e8:d7:
                    64:24:28:42:31:c9:8b:90:c5:7a:5b:40:c8:d2:0f:
                    83:8b:13:27:08:ae:d4:6b:2c:ca:cb:f8:b2:7c:d8:
                    6c:34:54:e6:0c:66:42:a2:a8:ba:da:c9:ae:82:15:
                    ab:66:ad:ff:d7:b3:93:21:2f:03:c9:d5:5d:89:41:
                    3e:e2:13:d0:99:3b:e4:d9:bf:9d:70:8c:e6:90:b3:
                    ce:a9:4a:cf:11:8a:05:b2:30:62:fe:b3:71:3a:39:
                    a0:e9:65:6a:eb:e6:ea:76:8a:cc:bd:f6:1c:66:84:
                    e9:9e:d8:fa:9d:69:de:01:40:26:72:45:32:b6:38:
                    95:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A6:FB:CC:C1:77:C2:70:A6:60:BC:15:F7:32:F2:ED:81:56:20:FB
            X509v3 Authority Key Identifier:
                keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:45:86:44:b8:6c:12:e4:85:d2:b3:fe:75:3e:61:e8:d4:
         22:c3:5e:ba:22:64:fa:e9:56:f5:05:37:15:88:3a:a9:ac:a3:
         9c:d7:9c:41:82:27:f2:5d:b4:74:03:5d:5a:bb:29:42:35:b5:
         f1:99:08:3b:85:6a:87:66:28:30:6d:9a:c0:41:09:3f:cc:d5:
         c1:2f:56:29:bb:67:49:83:d3:da:7b:88:7c:10:24:ae:93:a3:
         bc:fe:cf:3b:ea:0b:2b:cf:42:dd:82:df:a4:c6:ef:06:21:af:
         7a:a0:6f:25:dd:fd:2a:3b:a3:e5:9b:9f:20:5f:56:b0:31:02:
         e7:a5:68:cb:51:ab:34:74:d1:8c:b0:f0:ed:42:a7:06:1b:4c:
         dd:94:21:43:bc:90:1d:79:11:34:60:28:e8:a4:71:fe:aa:62:
         8d:a4:87:28:28:14:cb:34:21:dc:a4:02:f2:6c:b7:fd:cc:fe:
         15:f5:5e:76:7d:c2:f0:e7:18:7e:32:31:0c:dc:f2:d5:4d:d8:
         4e:1a:bc:46:e8:7c:28:fd:65:1c:0e:22:57:81:1f:ab:0c:2a:
         bc:f7:6a:5b:19:de:51:40:15:c9:8f:e0:d6:39:f1:b4:28:e1:
         12:7d:ea:86:0c:70:ee:ed:2c:e7:04:ee:24:46:cb:e8:61:82:
         0b:df:98:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:49:05 2025 by rpki-client