Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
File:                     996iwVmT1oMXUKpjDg5oDZ7viIo.mft (raw, json)
Hash identifier:          k36cfvcWnbj7iNC1A0G2hqCl8HeR9OuqwHliLsIYMrs=
Subject key identifier:   15:B9:B9:AD:1D:D9:41:A8:4B:82:1C:C2:16:84:55:11:99:3D:9E:DA
Authority key identifier: F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
Certificate issuer:       /CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Certificate serial:       0198963718A68BD0AA11C285AA81E397740C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
Manifest number:          DE
Signing time:             Sun 10 Aug 2025 23:00:49 +0000
Manifest this update:     Sun 10 Aug 2025 23:00:49 +0000
Manifest next update:     Mon 11 Aug 2025 23:00:49 +0000
Files and hashes:         1: 996iwVmT1oMXUKpjDg5oDZ7viIo.crl (hash: For/OfvTGPaQZwk5HHh1O4n+2sBpEeBwruakne+rsV0=)
                          2: Q_OYedJWMY4R6WjcRHhbze4rY30.roa (hash: I5gaAF/DaFJrmNnPn+q8QcrAIPjnX3NXACdoAl2BzTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:37:18:a6:8b:d0:aa:11:c2:85:aa:81:e3:97:74:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7dea2c15993d6831750aa630e0e680d9eef888a
        Validity
            Not Before: Aug 10 23:00:49 2025 GMT
            Not After : Aug 11 23:00:49 2025 GMT
        Subject: CN=15b9b9ad1dd941a84b821cc216845511993d9eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5b:4b:5f:13:d8:d8:f7:1a:39:01:b7:16:a1:
                    e4:54:8b:7c:4e:14:9e:ea:0d:d8:74:e4:4f:f6:6d:
                    3b:f5:ee:fa:97:90:3a:1e:7b:1f:ae:bd:c0:f4:af:
                    bb:68:16:7b:28:7e:b4:3f:bb:50:47:00:14:96:3e:
                    e9:b5:0d:5e:02:0d:8d:15:08:69:6e:63:a2:32:8d:
                    94:81:99:bc:aa:11:c7:2f:25:a7:cd:2b:d6:96:05:
                    4f:0f:c6:e2:83:7f:c5:a1:28:32:cd:0f:d5:4f:31:
                    d0:e8:ad:73:b8:cf:d2:03:a4:82:cb:d1:46:f4:12:
                    00:76:8e:cb:e9:37:f6:08:9a:ab:df:b9:e5:da:af:
                    10:41:a8:cc:58:f2:bc:9b:97:46:03:d4:3b:af:a7:
                    ca:ae:c4:03:95:1c:ce:9a:da:76:8c:a4:29:1f:49:
                    e5:0c:3d:98:d3:cc:c9:f3:67:f3:66:8c:6a:16:8e:
                    52:65:bf:0b:4f:96:77:81:06:45:0a:3c:16:a1:da:
                    e2:0e:f7:c8:4c:d7:1c:f2:8b:74:9a:20:6a:8e:cc:
                    47:07:16:e9:a9:ab:4f:12:e2:63:89:ee:f6:bb:88:
                    95:1a:84:40:27:34:e9:cf:cc:3d:56:be:c2:3e:42:
                    fb:3d:7f:d5:59:27:fc:52:2a:1e:8e:39:0c:fb:10:
                    dc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B9:B9:AD:1D:D9:41:A8:4B:82:1C:C2:16:84:55:11:99:3D:9E:DA
            X509v3 Authority Key Identifier:
                keyid:F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:22:20:08:2a:ff:a7:77:2f:69:5d:a6:b8:b3:e0:b7:40:d4:
         02:04:df:18:2c:e8:61:a7:cb:bd:b3:ee:47:f0:bb:94:57:9a:
         c9:43:e4:c7:7c:88:66:71:19:36:15:1a:1a:43:d0:df:94:c7:
         cb:17:e9:24:4e:85:fc:8f:09:e6:21:cd:dc:7b:37:5b:ed:1b:
         1b:42:85:1f:cd:fb:33:6d:6b:bd:46:25:7d:f9:19:bc:47:22:
         60:4d:3b:fe:88:e9:1e:bb:4b:fd:61:b2:62:43:d1:b5:29:a6:
         b0:2f:86:49:13:0e:ab:0c:fd:30:70:27:04:fd:ad:27:d2:e7:
         32:02:41:ad:51:c0:08:2e:9a:7d:72:e2:6a:48:0d:42:3f:b6:
         b9:1c:d7:94:18:e6:98:5b:08:c0:18:5b:e7:6a:94:0e:82:72:
         af:0b:63:12:b7:84:e5:67:0d:da:ee:63:d5:66:e1:a5:ac:27:
         b5:53:11:bb:f3:c3:6e:f6:af:06:cf:8c:f9:ee:fe:78:a1:e1:
         0e:22:55:a8:56:2a:ac:9d:d0:84:df:41:a6:2c:9f:08:07:1d:
         9f:e9:80:55:54:46:ab:d1:8a:1a:8f:9c:4e:cb:7b:a2:d5:60:
         7a:ad:67:f7:d9:a5:b9:4c:85:f4:fd:76:f8:79:84:68:5a:a7:
         c0:25:19:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:33 2025 by rpki-client