Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
File:                     SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json)
Hash identifier:          9u73lw16pk65L7EUov/i5RN9bofCvpJXruFrc+7p/tY=
Subject key identifier:   6F:0D:89:2A:F4:1B:FD:4A:12:27:A8:A5:7E:AD:28:84:41:E3:D1:5C
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Certificate issuer:       /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial:       019844E3D9673428A68376B08BB947B32358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
Manifest number:          15FD
Signing time:             Sat 26 Jul 2025 04:00:39 +0000
Manifest this update:     Sat 26 Jul 2025 04:00:39 +0000
Manifest next update:     Sun 27 Jul 2025 04:00:39 +0000
Files and hashes:         1: KUfFcY4n_r75t21wBTn8NHwpPWo.roa (hash: Vj4b0HHRAbzzjfGSfe71X4pK6wA9f27I+UmGi3mJNYI=)
                          2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: XO6g5uLjuRbj7/ypUWd1WkIvDdNtqkaUzX/HLMUqTSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:e3:d9:67:34:28:a6:83:76:b0:8b:b9:47:b3:23:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
        Validity
            Not Before: Jul 26 04:00:39 2025 GMT
            Not After : Jul 27 04:00:39 2025 GMT
        Subject: CN=6f0d892af41bfd4a1227a8a57ead288441e3d15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bc:b1:a4:ef:ef:44:b0:a5:a5:cd:32:f8:e9:
                    e6:32:d6:e2:42:5e:d3:8f:d1:5b:81:aa:67:33:0f:
                    92:d8:f9:7c:19:df:f3:28:dc:77:3b:e2:7d:d2:b1:
                    65:2d:18:96:36:ab:c3:5e:c9:ab:ed:12:d1:c0:43:
                    d9:9c:fd:ef:7e:f7:16:95:97:db:82:50:d6:2d:2e:
                    f4:76:ff:ee:d7:78:5e:51:d8:e7:b9:d1:0a:6b:87:
                    51:01:20:c7:51:f3:ae:60:b4:22:36:7d:28:ca:41:
                    63:d4:e5:5f:7c:23:ac:03:9b:3c:84:9e:1e:20:a7:
                    f2:9c:56:6c:d1:35:93:4b:11:01:de:98:44:f5:ce:
                    d3:b0:6f:da:e8:85:90:c7:36:57:82:6c:04:25:66:
                    4f:b0:26:0d:75:6f:8b:2c:03:65:5c:b0:62:a9:32:
                    fb:ef:a7:12:a5:ef:45:be:94:53:0a:11:2b:b1:35:
                    be:c6:6c:19:65:59:71:bf:f3:ac:80:54:74:fd:34:
                    96:75:be:96:af:d0:2a:56:cf:34:f3:9a:bf:da:ef:
                    eb:fb:22:6f:56:70:14:d7:85:69:a1:f3:f9:a0:8f:
                    82:c7:fb:ce:09:8e:21:b8:c3:04:16:d4:32:53:56:
                    2c:6d:8f:33:1d:19:1f:97:6c:61:a6:c3:4e:18:5a:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0D:89:2A:F4:1B:FD:4A:12:27:A8:A5:7E:AD:28:84:41:E3:D1:5C
            X509v3 Authority Key Identifier:
                keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3e:66:be:52:5c:04:ae:8e:aa:3b:e7:c0:79:b3:9f:7e:30:
         e3:c5:ba:9d:7e:42:93:67:c1:69:4b:ad:24:70:70:3a:e9:3e:
         84:27:0b:81:85:af:ec:ff:ba:8a:71:04:2c:d9:c9:25:c1:20:
         2e:d6:be:71:7b:fb:a9:29:b9:fd:2b:47:a5:17:03:7c:a1:ab:
         4b:f0:a5:76:5c:9e:72:5e:8e:a3:ce:07:95:21:34:03:07:ba:
         3a:52:5d:6f:fb:69:bd:df:44:8b:cc:38:e5:1e:8c:a8:3a:24:
         17:3f:d9:13:a9:0c:08:e1:72:ea:11:a4:44:5c:79:03:5a:4a:
         19:b0:20:be:19:95:15:89:ef:97:68:07:64:2a:31:cf:cd:f6:
         55:10:3f:db:2a:23:27:50:7a:45:32:e8:25:30:ea:4d:ab:80:
         25:f7:6d:a4:42:f5:d3:f9:10:49:ff:34:bb:b9:d4:bb:49:27:
         79:37:89:d0:97:7f:a5:07:a7:a9:3f:d6:44:c8:1e:0a:ec:54:
         b7:99:a6:fd:3e:20:4c:8d:d1:94:bc:0c:64:ce:b9:ff:7a:53:
         11:d4:ae:83:3c:97:74:35:a8:29:fc:fd:c7:f7:15:5e:b9:03:
         fb:f2:b3:96:25:61:74:d6:29:ad:33:38:72:72:87:63:6a:8f:
         fe:b7:56:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:05:20 2025 by rpki-client