Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
File:                     1-c0pgMHHi89rubgKB5IFiwvK7Us.mft (raw, json)
Hash identifier:          O/ppqcpChxRjILPs4ATGV9CetO0SSAjyxkOl1gTl1ZM=
Subject key identifier:   87:0E:C4:B4:BB:BC:72:B3:09:BD:7A:D7:34:FC:9F:70:A1:C1:62:30
Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
Certificate issuer:       /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Certificate serial:       01987373FD56D12B0326CEA6525C7E22E574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
Manifest number:          15D5
Signing time:             Mon 04 Aug 2025 05:00:38 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:38 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:38 +0000
Files and hashes:         1: 1-c0pgMHHi89rubgKB5IFiwvK7Us.crl (hash: Cyo2BjDbHYHrIW6yTF6TDxg4Uyfpy+FpCKHUjku4lwI=)
                          2: DBBkmAjtiZvJk178YbVOfqGzI3Y.roa (hash: 8eJVP5XAdO67of9omWg+boW49giOURgUcnG9ZjC9lgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:73:fd:56:d1:2b:03:26:ce:a6:52:5c:7e:22:e5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
        Validity
            Not Before: Aug  4 05:00:38 2025 GMT
            Not After : Aug  5 05:00:38 2025 GMT
        Subject: CN=870ec4b4bbbc72b309bd7ad734fc9f70a1c16230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:8b:8d:e9:86:54:4f:4e:f2:4c:ae:46:2f:
                    46:51:06:93:78:0d:b7:b0:5e:c8:da:c0:f4:91:ca:
                    68:7c:62:91:6d:08:0b:85:9c:73:c2:e7:e6:3b:fb:
                    4f:34:0e:eb:6b:0d:7a:41:e0:f3:a2:ed:00:8e:e8:
                    5e:5a:d1:72:f8:7d:6f:d3:a9:2b:90:a1:07:72:79:
                    7e:2b:05:f6:2f:5e:02:6c:45:4a:48:b6:0d:18:dc:
                    9d:ab:a5:2a:3b:ab:37:51:82:5f:fa:88:5f:99:61:
                    90:65:6d:f8:c0:a6:aa:dd:5b:53:97:4c:8a:7b:13:
                    36:16:83:54:86:89:86:1b:c9:66:15:8a:a1:62:4b:
                    2f:03:a0:4d:de:1a:6d:32:0d:33:66:67:12:61:2d:
                    33:bf:71:32:e3:50:1d:95:e8:98:da:68:96:25:10:
                    c3:75:70:53:30:47:77:c3:24:3a:78:e5:b9:90:28:
                    0f:f5:d0:78:fd:14:3a:b0:7b:f7:ed:72:ff:ea:ac:
                    9a:c9:b9:3a:03:64:4a:58:d1:35:53:8f:ae:20:af:
                    7d:f2:fd:d0:89:d3:5a:ee:7a:5d:d7:3e:0d:80:d6:
                    d9:d9:89:df:7e:96:7c:4b:e2:f4:7e:75:08:d5:4f:
                    0b:25:47:98:8f:b1:88:0b:96:93:66:e7:7f:1e:2e:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0E:C4:B4:BB:BC:72:B3:09:BD:7A:D7:34:FC:9F:70:A1:C1:62:30
            X509v3 Authority Key Identifier:
                keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:47:77:c7:d2:97:8a:16:c2:6c:3c:fc:7a:4c:36:35:6d:2c:
         69:4b:32:b7:e5:4f:45:c7:40:af:49:3f:9b:a1:e0:6e:a1:3c:
         41:65:53:f1:5a:af:01:84:bb:a0:49:c5:1a:28:87:08:24:a6:
         5d:8d:b5:f3:9e:dc:5f:97:a1:46:a3:ea:c7:61:d3:ce:4e:fb:
         4b:ba:21:56:6c:78:dd:0e:a7:8e:84:f2:44:6f:12:fe:77:70:
         b8:d8:82:da:9e:7a:82:bf:c3:22:f6:c1:d1:06:20:be:11:a6:
         06:69:d1:40:1a:79:16:19:8c:0f:46:bc:d5:b3:12:99:38:0f:
         66:94:a2:6f:a6:bd:19:57:61:09:22:32:ec:57:ac:34:f9:d4:
         31:ab:5d:bd:cd:a4:93:d6:1a:20:28:39:f4:ef:90:54:09:61:
         e4:c3:db:37:f3:95:c6:98:7f:47:86:84:eb:20:d5:da:b3:b7:
         f9:77:16:d4:b7:cd:0b:5d:f5:ed:f1:45:a6:53:ad:63:53:cf:
         53:78:e1:c9:c8:c8:11:b7:dc:a3:d1:03:39:b7:2b:2b:77:cf:
         19:77:13:9a:6f:f3:47:db:02:cf:35:d8:70:9e:e2:d3:aa:c6:
         38:91:de:0d:b9:8a:cc:fb:54:d6:8b:bd:11:80:c4:50:20:05:
         fd:cd:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:40 2025 by rpki-client