Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File:                     Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier:          8OwSOJXjzWmPQmYATB67jzHUxdEAm+EzHkZe8vcuHSY=
Subject key identifier:   19:1C:B2:2D:45:E5:9A:A5:D4:40:C6:00:38:ED:AC:D1:DA:59:E9:CD
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer:       /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial:       019877C0A09B3BD4D499E92D317C08F60B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number:          1618
Signing time:             Tue 05 Aug 2025 01:02:49 +0000
Manifest this update:     Tue 05 Aug 2025 01:02:49 +0000
Manifest next update:     Wed 06 Aug 2025 01:02:49 +0000
Files and hashes:         1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: uy3rG27MYITqsmQKx86PvFACHnTn69r3lAsPiyLqBWY=)
                          2: Qv45l9CC_OtB7OS_57aAR1sJyvc.roa (hash: Mv6sqdxR24sbzw3gEqGiuaVF1p5QjBnxJTiW3StRP2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:77:c0:a0:9b:3b:d4:d4:99:e9:2d:31:7c:08:f6:0b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
        Validity
            Not Before: Aug  5 01:02:49 2025 GMT
            Not After : Aug  6 01:02:49 2025 GMT
        Subject: CN=191cb22d45e59aa5d440c60038edacd1da59e9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:fe:46:9e:4b:3b:65:0b:3f:4b:66:2f:a1:
                    3d:7d:23:19:bc:9c:7d:8a:c3:4e:31:26:84:f3:b0:
                    3c:89:71:0f:0a:44:8c:8b:4b:22:5e:15:96:db:42:
                    1f:b2:8a:30:ce:f0:97:52:1a:fc:0c:6e:a4:df:52:
                    95:7f:15:57:0e:32:0d:6b:5c:ad:4e:30:e2:4a:9a:
                    cf:92:03:ba:0f:04:8e:2d:ae:44:29:65:35:3a:a1:
                    1f:48:f3:27:7d:6a:71:f2:6a:d7:29:3b:13:cc:09:
                    82:e2:0e:bc:05:ec:87:38:36:c7:86:e5:d1:44:43:
                    fa:74:f6:15:1b:78:46:54:6d:4d:19:6e:c8:77:b8:
                    27:e4:ac:35:73:c5:31:78:2b:a9:ba:ac:b2:11:05:
                    0b:ec:f1:de:88:53:0e:63:2a:d2:6a:59:70:a3:a7:
                    1e:fd:01:ef:39:5b:32:6d:1d:29:f1:73:76:0c:bd:
                    62:80:27:b3:32:d1:e5:09:ce:6d:6e:90:cc:88:3a:
                    b1:ec:ec:30:02:fb:e6:52:b2:66:a5:c3:87:7a:66:
                    f3:cf:a4:e6:c2:00:da:ec:b1:4e:5c:eb:68:a4:6e:
                    81:6b:ae:4e:20:ba:92:9d:7e:f7:57:08:6b:dc:41:
                    c4:66:19:9b:7a:55:a3:95:cb:c2:49:7d:cc:d7:55:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1C:B2:2D:45:E5:9A:A5:D4:40:C6:00:38:ED:AC:D1:DA:59:E9:CD
            X509v3 Authority Key Identifier:
                keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:81:41:ab:cf:d9:ae:0c:b1:a8:48:87:fa:59:8d:c8:e3:79:
         e0:b9:df:1e:8e:43:b1:f7:77:af:b3:a0:15:ae:47:0a:08:bd:
         16:d4:d7:9c:71:50:1d:9c:ff:8a:e4:9b:15:72:3e:dc:74:20:
         d9:9d:f7:1f:2d:77:36:ef:62:23:25:0b:35:51:5d:ec:bc:7e:
         5f:9f:b6:20:09:bc:65:f1:ba:aa:0f:1b:e5:d2:d6:e6:d4:30:
         35:52:0e:49:a2:5f:e1:ff:18:3b:27:b1:90:22:ce:28:a5:1f:
         71:f2:06:d7:8a:d4:95:57:c2:5a:dd:ea:4b:8d:7f:eb:04:b7:
         40:97:2b:4c:ef:5f:e7:01:bd:08:2b:06:d9:d2:56:d8:09:fc:
         9d:94:fd:12:14:62:40:9f:94:49:c8:49:18:b7:99:60:fd:1d:
         6c:fb:f2:00:89:ec:02:55:9c:0b:03:d9:3c:2a:5a:c4:dd:e9:
         8d:0b:fc:e5:3c:c7:f3:de:e0:80:2d:ec:4b:df:19:06:f5:41:
         94:05:71:a6:8c:71:c2:ff:e6:cf:60:9f:5a:b0:9a:cb:72:83:
         83:a3:e4:e8:09:56:0d:ee:54:76:55:00:4a:48:fe:8c:58:f7:
         f3:6f:a2:da:51:21:a9:2d:af:a3:8e:6a:55:98:ec:00:7f:9a:
         ba:96:dd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:14:33 2025 by rpki-client