Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File:                     Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier:          8TT+SmuT2veL+0SJrfXIWZEYKxAz6Z6USzkoEdf2vvE=
Subject key identifier:   58:D9:87:8C:84:B7:7B:22:2B:4E:A3:64:D8:15:11:72:C7:18:FD:D8
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer:       /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial:       01975CEF051415AD5A2FB3AF1A2112EFF336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number:          98
Signing time:             Wed 11 Jun 2025 03:00:57 +0000
Manifest this update:     Wed 11 Jun 2025 03:00:57 +0000
Manifest next update:     Thu 12 Jun 2025 03:00:57 +0000
Files and hashes:         1: 1aDxtk8JRh6i0kM7vqlHAaQrJ3c.roa (hash: Q9hOadBBuPPxo3375iiCb6IfTPJTRKVivBWjEk+2yzQ=)
                          2: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: ffH2HOFL6/4Q8XOiDbvLSOzcvE85jcVOjOSEhZmDk+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:ef:05:14:15:ad:5a:2f:b3:af:1a:21:12:ef:f3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
        Validity
            Not Before: Jun 11 03:00:57 2025 GMT
            Not After : Jun 12 03:00:57 2025 GMT
        Subject: CN=58d9878c84b77b222b4ea364d8151172c718fdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:a6:04:bd:a7:62:69:ba:ab:69:76:e3:8c:
                    a7:e2:c2:4f:de:71:89:cc:f6:c2:05:28:2f:b6:42:
                    58:49:3c:fd:bf:99:3c:11:27:0d:a8:18:5c:f1:ec:
                    4e:3c:d2:30:d7:59:a5:07:9e:3e:19:b8:d2:59:d0:
                    be:9a:45:f0:50:c1:aa:91:4d:af:db:90:c8:ad:de:
                    16:6f:c8:73:3e:e6:41:43:0b:4c:97:47:a8:44:59:
                    27:3e:b9:2b:52:3f:bb:b2:d0:71:54:64:9d:c8:28:
                    ef:35:90:cf:e3:12:73:bf:c3:71:58:c5:7a:9c:c9:
                    2d:5d:d8:97:1d:e5:d3:c7:7d:37:77:78:93:59:26:
                    17:d0:77:26:55:ab:cc:b6:06:ce:7e:f7:43:dc:86:
                    73:f6:a5:cd:3b:6a:e0:d4:b4:7c:21:23:64:a0:56:
                    d0:2f:04:73:cd:f4:49:76:96:04:96:28:bb:c0:ee:
                    e0:d2:cb:82:1e:e5:32:c5:87:02:2e:2d:3b:70:c5:
                    13:27:fa:06:30:c8:70:7f:c4:f3:ff:e9:a5:a0:99:
                    e8:37:70:fb:ea:80:a2:b2:55:72:f1:14:db:2a:41:
                    ba:45:e2:59:73:e4:c7:81:95:fb:0e:bf:17:55:74:
                    42:ee:63:69:1c:3b:a6:2c:6e:b4:b3:87:43:dc:6f:
                    39:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D9:87:8C:84:B7:7B:22:2B:4E:A3:64:D8:15:11:72:C7:18:FD:D8
            X509v3 Authority Key Identifier:
                keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e9:2f:7f:01:30:7c:e1:36:50:9b:17:89:3f:a7:f4:c7:e3:
         ec:d7:06:36:ce:c8:69:c0:89:49:ab:96:1f:7d:91:52:bf:03:
         10:a4:8c:10:97:b5:87:95:1f:6f:37:a6:37:bc:5d:a8:e8:24:
         47:8e:e0:1e:73:8b:24:ad:0b:b1:ff:3a:23:bb:34:7f:26:bd:
         1b:db:f2:fc:1d:d8:39:52:d0:dd:56:da:7f:c8:c7:40:b4:b6:
         a1:40:83:29:46:8a:67:52:f7:46:e2:d7:a9:d0:d4:ab:89:db:
         fb:cc:6a:11:93:5a:c3:47:e9:e7:b1:05:b2:d3:71:97:12:62:
         14:28:c1:2c:bb:aa:e7:d6:be:c0:20:e1:e7:29:60:8d:fd:3c:
         e9:3a:10:46:ce:f6:09:c5:ab:9d:6a:47:fd:fb:3b:9b:2d:c7:
         05:4d:68:4b:a8:dc:f7:b9:a6:39:e5:24:d2:60:8d:08:84:e9:
         ca:5e:2c:02:13:d3:00:d7:74:ec:9e:bb:fe:28:e1:25:5e:0b:
         43:8d:09:2c:ae:2d:93:33:c0:a2:28:7b:e9:35:6d:ea:ff:ec:
         d5:09:65:f5:0b:95:fc:6a:20:e7:af:c4:e1:35:80:ad:5a:74:
         f2:7d:65:ff:85:42:26:ea:a8:0b:db:38:ea:06:d2:ba:d9:6d:
         11:8c:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:54:04 2025 by rpki-client