Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
File:                     94WLkaZifyNY6q3NJrpcLFxG6gM.mft (raw, json)
Hash identifier:          7kmv0BQsIPL8oSP1nAbiN9iSItTN3SjHg9/RS76tE0U=
Subject key identifier:   4F:B6:BF:E9:6E:18:0B:3D:96:40:94:41:E1:EA:77:17:77:4A:5A:91
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Certificate issuer:       /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial:       0198808B716E0FE74A471B49096265705E1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
Manifest number:          0F03
Signing time:             Wed 06 Aug 2025 18:01:18 +0000
Manifest this update:     Wed 06 Aug 2025 18:01:18 +0000
Manifest next update:     Thu 07 Aug 2025 18:01:18 +0000
Files and hashes:         1: 94WLkaZifyNY6q3NJrpcLFxG6gM.crl (hash: L/ijUVcCKzOGuVYc5jjCbHuVw/PACPxgR/DUyJ5U2c8=)
                          2: t9eG9LA6EWmdW1u_qvOWiwX_nHk.roa (hash: /vgplaRmHDxSp3VJb5NRArFdYkLIBE7CLS2J04R2rkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8b:71:6e:0f:e7:4a:47:1b:49:09:62:65:70:5e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
        Validity
            Not Before: Aug  6 18:01:18 2025 GMT
            Not After : Aug  7 18:01:18 2025 GMT
        Subject: CN=4fb6bfe96e180b3d96409441e1ea7717774a5a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:0d:aa:2f:9a:12:64:18:65:da:19:59:9f:
                    50:3b:82:0c:b9:d7:62:dd:27:e1:f1:57:3f:cf:b2:
                    43:13:1d:51:95:a0:8c:53:de:a2:47:22:8d:95:56:
                    54:d1:e2:ac:fd:28:84:59:3c:09:cd:68:ed:f6:35:
                    dc:1d:05:a8:f8:79:e1:62:96:d6:e9:25:62:08:a1:
                    f4:d3:98:c6:01:ae:92:ce:94:2e:dd:b7:8b:dc:30:
                    1c:0f:bc:2a:ab:b2:46:50:e2:21:30:5a:25:d2:8c:
                    58:16:97:49:02:db:4e:18:43:f4:ea:01:51:47:ce:
                    02:07:66:da:99:ff:e7:78:16:aa:5a:97:40:b7:e3:
                    18:ae:0b:58:96:1c:3b:9d:a6:c9:4e:c4:03:66:53:
                    bd:d8:15:1c:8c:6c:8b:ff:73:a6:f4:4d:ea:9e:47:
                    27:3b:3d:4b:7b:7a:48:98:79:98:f5:ec:a0:22:6a:
                    49:c6:6c:2b:d2:2c:51:22:e0:f0:fa:c9:92:24:f4:
                    a4:c1:38:24:6d:9c:c8:06:fb:7b:86:6f:7a:84:cd:
                    eb:e3:da:4e:72:86:c0:e4:04:f4:77:da:6f:b4:c5:
                    40:e5:61:ee:b0:47:5b:37:69:d1:9a:44:8e:55:98:
                    a9:58:88:05:7f:6e:a2:c3:c5:d9:98:56:17:12:95:
                    da:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B6:BF:E9:6E:18:0B:3D:96:40:94:41:E1:EA:77:17:77:4A:5A:91
            X509v3 Authority Key Identifier:
                keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c0:49:c3:fe:42:42:de:8f:b2:ca:83:95:52:e3:f6:a1:6a:
         a7:f5:87:3e:a0:63:16:48:9b:3a:a7:70:9c:b1:56:db:f0:88:
         2b:ab:21:2b:8d:c0:f8:1d:e7:80:4e:00:74:24:7d:88:2c:58:
         81:bb:8f:b6:f6:ca:c9:21:60:3a:f8:50:4d:70:ad:f4:6c:e5:
         49:5e:86:53:ea:3d:6d:af:b4:71:06:47:09:75:e9:7f:7b:f6:
         2d:18:55:15:b8:d0:13:fa:3f:21:ef:3f:08:e4:9f:db:f0:e9:
         6a:31:ed:3f:76:d2:94:7e:a7:73:26:87:a0:e4:f2:a0:a4:1c:
         61:21:fc:c7:37:fa:83:4d:e3:01:71:69:1c:46:3b:05:0e:58:
         07:86:8e:55:a8:5f:a4:c1:b1:9e:c4:ba:9c:8e:76:61:17:dc:
         74:c6:4f:58:d3:d7:10:f2:91:58:59:98:ac:4d:6c:bf:1b:fc:
         72:ea:01:e8:62:d4:0b:76:7f:2c:d9:19:77:c7:85:ec:61:fd:
         aa:54:c0:b7:4e:16:60:da:f9:0f:bd:1f:ba:fc:6a:bb:d0:72:
         88:2e:7d:28:16:4b:6f:06:12:f5:87:fc:f1:ec:6e:2a:9a:ff:
         1e:d4:a8:76:03:70:a6:90:60:55:d4:4a:21:ea:b3:e0:f4:67:
         d3:f5:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:23:00 2025 by rpki-client