Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File:                     FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier:          vdLMWypBKMoLCbWduAwoCP3E946I2CAI5yLP1+0ndxk=
Subject key identifier:   B0:B8:85:26:A3:3C:13:31:47:34:E6:25:DB:7D:2E:AB:09:33:CF:7B
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer:       /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial:       019846D217FAE984E97E1381942EE428B728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number:          156B
Signing time:             Sat 26 Jul 2025 13:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:30 +0000
Files and hashes:         1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: 1Aq3WuwY0xjoKdBS2qSdkIExVkEx5BmlHTpKHfMbsKc=)
                          2: kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa (hash: K3F9IA4gy3lGNBan+gMrBm2P+dEVmz4mQ6ObmV/2TV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d2:17:fa:e9:84:e9:7e:13:81:94:2e:e4:28:b7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
        Validity
            Not Before: Jul 26 13:00:30 2025 GMT
            Not After : Jul 27 13:00:30 2025 GMT
        Subject: CN=b0b88526a33c13314734e625db7d2eab0933cf7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:4b:5c:5a:4d:06:cb:6b:2d:ce:24:c9:d4:
                    83:b0:19:22:86:97:99:7d:13:60:f7:68:53:2a:29:
                    76:5b:a7:00:b3:b3:86:ae:37:44:c0:f9:19:b0:db:
                    f9:07:be:90:e7:72:91:d3:76:7a:41:e7:77:6d:a7:
                    81:9e:e0:15:e9:da:57:9f:c5:06:83:9d:ab:bd:66:
                    16:be:30:0b:53:bf:c9:13:70:88:9e:86:d3:49:69:
                    1f:1f:6e:a0:3b:5c:07:f1:79:9e:08:c8:3a:89:00:
                    d9:b5:12:f3:cd:da:34:22:e7:d5:8c:78:c1:5c:8c:
                    06:ae:08:74:1f:d2:a9:0a:53:bd:20:66:c8:5d:43:
                    30:f7:79:b3:e9:da:43:ac:c1:76:00:fa:9b:35:db:
                    53:c4:95:88:88:fd:76:20:fc:86:e4:15:94:d3:d8:
                    a5:43:6d:04:99:54:0b:c2:81:c5:28:d3:02:c4:38:
                    de:88:20:65:df:da:29:96:ea:9d:6f:0d:0d:a9:bb:
                    7a:dc:11:68:77:e2:42:76:b9:85:7b:21:1f:7f:41:
                    a4:b3:67:8b:44:e1:66:df:cf:0d:87:af:91:f2:70:
                    15:54:7c:93:b4:1d:6e:59:89:7b:b1:78:8e:f6:d9:
                    17:ac:75:f2:5f:ce:1f:11:72:e7:4a:4e:98:83:cd:
                    43:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B8:85:26:A3:3C:13:31:47:34:E6:25:DB:7D:2E:AB:09:33:CF:7B
            X509v3 Authority Key Identifier:
                keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d6:bc:d8:8c:8d:84:f9:0d:f4:43:27:ff:4c:ad:13:d8:2c:
         9e:55:50:24:f8:f0:bf:a1:3b:8d:c8:33:22:19:19:86:9b:dd:
         4d:12:27:84:b1:47:7f:1f:b5:31:02:63:09:1f:fa:bf:38:6e:
         be:97:46:49:3d:3c:0d:eb:ba:aa:b9:46:89:c3:4d:21:af:9d:
         e1:a1:c5:75:1b:28:11:c6:78:7f:16:32:66:67:5f:ce:32:34:
         50:79:68:83:b0:e5:91:0c:c3:a0:fd:92:82:76:25:ad:a3:81:
         77:e6:55:74:98:9e:90:72:ec:6c:a3:bd:4f:74:a8:be:e6:2d:
         15:6a:ef:03:77:dd:93:db:ad:9d:1f:47:4c:df:b0:be:29:87:
         a1:c7:c6:06:40:65:ba:64:13:ba:6e:5c:b2:3a:46:dc:47:14:
         ea:00:31:c2:18:39:0a:93:07:e0:2c:1f:75:06:97:60:0d:aa:
         1c:ea:5c:b5:ff:81:b0:01:18:48:be:1c:02:ea:04:98:fe:f6:
         85:ce:3f:b4:06:bf:0d:a6:c0:be:15:e2:14:12:0c:3e:1d:68:
         b7:b3:ca:1e:70:ce:38:f8:55:ff:11:76:85:1e:3e:bf:bb:33:
         c0:fb:9f:f8:ce:c1:b2:ec:40:3d:23:ab:1d:7f:bf:46:26:9d:
         96:18:c4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:24:13 2025 by rpki-client