Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
File:                     97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json)
Hash identifier:          ALmplvtPD6SuPWvYbsp1JfEdgtbjtYTKltMcbYbruZE=
Subject key identifier:   D8:8C:FD:88:CF:1A:C2:1E:41:49:C9:02:5B:CD:E8:9E:0A:65:96:A6
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Certificate issuer:       /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial:       01989524B0AEAFB6951E4E7FC2DE363BB6DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
Manifest number:          15BC
Signing time:             Sun 10 Aug 2025 18:01:06 +0000
Manifest this update:     Sun 10 Aug 2025 18:01:06 +0000
Manifest next update:     Mon 11 Aug 2025 18:01:06 +0000
Files and hashes:         1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: 1lxH25jAEjqGiwDy9qpr6BsmOL6J4B89G87ZD5tHFVU=)
                          2: VAC_6RsE2oq5MD0lqmXv6KCzwDQ.roa (hash: TCLZUvDrgjrJ7J3tgeNK3Sq6QP0EDUXeSD5NVO6xxj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 18:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:24:b0:ae:af:b6:95:1e:4e:7f:c2:de:36:3b:b6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
        Validity
            Not Before: Aug 10 18:01:06 2025 GMT
            Not After : Aug 11 18:01:06 2025 GMT
        Subject: CN=d88cfd88cf1ac21e4149c9025bcde89e0a6596a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:68:d4:c4:45:18:f1:c1:35:e4:f9:53:a8:
                    49:0d:67:8f:4b:f4:2e:f3:6f:22:83:e3:73:49:a0:
                    5f:a8:62:6f:01:28:e6:a6:14:95:a4:58:e1:e2:29:
                    2f:15:1e:9d:db:7d:e8:81:4f:df:d6:52:0c:8a:1c:
                    f5:08:6d:4c:41:a3:82:8d:cb:1d:9c:12:50:41:e3:
                    3f:72:c2:96:e2:ab:e3:43:86:fd:b0:17:a2:2f:4b:
                    20:4b:5d:17:7d:df:55:24:71:bf:94:bd:74:88:54:
                    98:8d:17:d2:05:bd:83:c0:0c:29:75:23:c5:eb:1f:
                    cc:af:51:12:24:9a:d1:ba:e3:89:07:23:f5:a1:ce:
                    c0:d4:4f:af:fd:97:35:c5:c4:29:37:6b:bc:54:45:
                    f1:4c:65:b8:3d:db:43:94:4e:81:17:d9:d5:82:fb:
                    9a:60:93:2d:7c:45:60:1c:aa:0d:7f:40:15:86:61:
                    9e:b0:61:92:e7:7d:ad:d5:1a:37:16:1b:7f:ba:78:
                    4b:dd:fa:71:6e:ba:f0:f6:4b:db:cb:69:0c:4d:8a:
                    d9:4f:e6:28:95:64:e2:9e:38:bc:5e:64:2b:03:39:
                    9c:38:6c:b5:f1:ae:45:6d:b4:33:6c:7d:90:75:78:
                    78:46:59:59:c1:d3:30:5c:23:1c:0c:68:08:d7:62:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8C:FD:88:CF:1A:C2:1E:41:49:C9:02:5B:CD:E8:9E:0A:65:96:A6
            X509v3 Authority Key Identifier:
                keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:3c:dd:1c:0e:4d:52:e1:18:c1:03:49:84:78:5d:8f:f1:bf:
         64:19:13:be:44:66:b2:a4:89:37:c7:27:e7:f6:36:ba:71:8d:
         91:af:a3:a3:07:21:df:85:b8:79:46:6e:38:d4:ed:3d:73:4b:
         14:8e:57:38:7f:e8:0f:46:be:9a:06:5d:a5:6b:66:5d:69:06:
         4b:2a:18:64:63:7f:33:8a:27:d9:dc:a2:fd:3e:b0:19:b1:4f:
         56:fa:00:de:4e:9e:27:ee:6f:62:a4:d1:71:10:89:e9:d1:d4:
         39:ea:cd:08:cb:31:67:f5:36:5d:90:f4:95:8a:c3:6e:54:f8:
         89:b6:2a:de:35:8b:cb:4c:00:7c:a1:cf:c6:04:84:44:1d:c3:
         e9:d2:0b:1a:ac:cf:99:c4:e9:3b:d2:07:d6:06:10:f9:7f:b2:
         1f:00:7d:3f:0c:cb:41:1e:3c:15:cf:fb:76:eb:53:a3:2c:a5:
         96:31:75:c4:19:8f:8b:e7:a3:d9:83:9c:d7:0b:01:5a:57:3c:
         70:6b:c9:2b:1e:8a:3b:6e:c6:67:d7:dc:49:69:6d:58:30:cb:
         9e:76:b7:0b:35:c8:02:20:8c:6d:85:58:1b:fd:93:03:b5:41:
         d4:89:d6:f0:47:49:2b:ed:8e:00:c7:36:bf:c0:6b:6d:65:b4:
         63:c4:40:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:16 2025 by rpki-client