Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
File:                     owVfB71HqGR4w79HOSVzrNU9Y24.mft (raw, json)
Hash identifier:          76KfE/r61j9Ut9k6Z2GxqAMNAkVH3c9vOpBM1BLOy8g=
Subject key identifier:   14:00:9F:CF:FC:88:BD:7C:03:54:8E:F3:3B:05:69:BC:05:A8:43:37
Authority key identifier: A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E
Certificate issuer:       /CN=a3055f07bd47a86478c3bf47392573acd53d636e
Certificate serial:       019849D2DA94343068B8D49572EA932288D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
Manifest number:          15FD
Signing time:             Sun 27 Jul 2025 03:00:11 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:11 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:11 +0000
Files and hashes:         1: owVfB71HqGR4w79HOSVzrNU9Y24.crl (hash: Mr4ajKgjtYtILciCQ3UjVA/SvNkBHraO2DEoTs4cno8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d2:da:94:34:30:68:b8:d4:95:72:ea:93:22:88:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3055f07bd47a86478c3bf47392573acd53d636e
        Validity
            Not Before: Jul 27 03:00:11 2025 GMT
            Not After : Jul 28 03:00:11 2025 GMT
        Subject: CN=14009fcffc88bd7c03548ef33b0569bc05a84337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:7b:df:b9:a8:ac:4f:d1:d9:15:91:ce:42:
                    f3:6c:0d:e2:27:82:4e:58:36:19:59:d6:fa:fc:6d:
                    e5:5e:1c:a7:94:b1:71:82:3e:35:de:da:f9:d5:e6:
                    aa:b2:0a:0a:43:91:6e:07:57:c2:b3:cd:68:5e:eb:
                    49:ca:f9:8d:7e:f6:f8:7d:b9:2a:2b:3f:4e:3d:47:
                    22:5b:95:5c:fb:1b:b0:db:82:4d:39:f4:14:cb:f0:
                    36:75:21:82:c8:0f:8f:87:c0:16:1b:66:31:af:d3:
                    0a:53:f0:b2:54:37:a9:9d:74:8f:cd:e6:61:fd:de:
                    34:30:ec:f0:17:48:15:27:da:99:51:28:17:43:40:
                    ad:62:17:60:c9:e6:6e:b3:ab:3a:39:d4:40:1d:c6:
                    e7:f8:0e:c6:bd:a8:00:0b:13:a1:59:b5:2d:54:41:
                    e6:18:71:2a:49:1a:ea:08:80:4a:d7:26:fe:19:e0:
                    cb:22:24:29:b0:ce:34:d4:25:eb:ea:bb:b8:dd:93:
                    0f:91:ae:ee:bb:91:c3:3e:03:cf:cc:ee:86:f7:22:
                    a2:72:4e:1f:60:57:30:e4:c2:81:ae:97:8a:d7:cb:
                    81:19:e2:cc:46:5b:19:db:44:a9:04:75:5c:7e:91:
                    97:9a:15:80:be:62:ce:53:b0:f3:d6:10:a6:a1:2c:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:00:9F:CF:FC:88:BD:7C:03:54:8E:F3:3B:05:69:BC:05:A8:43:37
            X509v3 Authority Key Identifier:
                keyid:A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a3:f4:8a:c3:d2:96:87:ce:63:ff:3c:6e:d0:b5:b6:5c:97:
         cc:d6:5f:f0:1c:80:d8:b7:74:64:a4:8d:ab:ce:88:08:82:9a:
         0e:57:ae:32:19:56:40:e1:af:6c:c5:f3:aa:15:4c:66:10:dd:
         40:ad:c7:59:52:27:85:36:63:5a:78:c4:eb:18:57:05:2a:8d:
         a8:d8:ea:4a:95:a7:11:bd:48:38:bf:ba:bb:9a:5b:34:83:d1:
         5b:1c:ab:8d:3e:23:1e:fe:12:a0:88:93:d5:ba:2f:09:cb:05:
         31:35:89:25:01:3a:1b:a0:92:c3:41:a4:cf:f8:2d:bd:41:7d:
         5d:a1:a5:18:5b:f2:c0:b5:94:0f:e2:01:aa:4f:da:5e:4f:47:
         4f:a7:df:cb:a6:ad:db:4f:d9:6d:8a:96:60:4a:85:8d:be:a6:
         db:28:da:5d:70:e6:3d:95:22:48:e2:56:de:17:2b:b4:d3:fc:
         fe:a1:56:1b:31:79:62:a8:e9:6d:5f:98:04:57:3e:30:32:17:
         ae:40:fa:5c:52:77:ed:a1:12:ad:fa:f9:2e:c9:e9:2b:70:07:
         49:37:3e:5e:a0:db:a4:ab:5d:f0:4e:92:f6:89:51:8e:a7:77:
         4f:49:59:9f:53:92:59:65:a2:09:01:da:0a:3d:f5:dc:42:7c:
         ac:f9:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:48:42 2025 by rpki-client