Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
File:                     fWNA43zPwSrrqsKl8z1F6gqIeoo.mft (raw, json)
Hash identifier:          pCO5ZNu9IKy+dDgGb/2445rQGxS00SdP3AsyiMiljCY=
Subject key identifier:   1C:4A:B7:CA:17:81:CD:3F:59:95:CF:E6:27:F0:91:7A:EB:B3:44:AF
Authority key identifier: 7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A
Certificate issuer:       /CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
Certificate serial:       01988F22758793D4F9CA8AD417FABF976586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
Manifest number:          106E
Signing time:             Sat 09 Aug 2025 14:00:56 +0000
Manifest this update:     Sat 09 Aug 2025 14:00:56 +0000
Manifest next update:     Sun 10 Aug 2025 14:00:56 +0000
Files and hashes:         1: fWNA43zPwSrrqsKl8z1F6gqIeoo.crl (hash: +PvAex46M8/rbKm5uMKhjNI5VLJ4cfIB/ImdGqHQcVQ=)
                          2: jRJwX_ZKuADln4pES5WgoVS__88.roa (hash: K3aJVjlqhUCHgSM5vEOmY3eFV+XqReoMzhLc+qeCd0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:22:75:87:93:d4:f9:ca:8a:d4:17:fa:bf:97:65:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
        Validity
            Not Before: Aug  9 14:00:56 2025 GMT
            Not After : Aug 10 14:00:56 2025 GMT
        Subject: CN=1c4ab7ca1781cd3f5995cfe627f0917aebb344af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:80:50:68:78:3b:c5:f9:72:cb:a5:ea:03:e7:
                    47:53:f7:53:80:93:5e:32:c7:b3:55:6f:64:76:02:
                    7b:61:9e:fb:78:a0:68:06:04:dc:81:95:29:ba:ee:
                    a0:ca:54:34:f2:ce:2d:9c:56:f9:1b:94:f4:74:3b:
                    f2:41:3a:10:4c:bf:73:ef:4b:89:1c:27:86:a4:fb:
                    d1:44:45:6c:3e:1a:b3:7f:64:c1:c9:d0:58:73:90:
                    99:72:f1:da:b4:69:27:5d:7f:e8:5f:95:04:95:f6:
                    95:d4:e3:94:42:3b:9e:de:ad:4a:03:94:e7:69:d2:
                    9d:65:0d:5e:63:b3:01:b1:53:4a:32:1f:65:7a:20:
                    27:2b:0f:71:2a:a0:3c:e5:ff:8a:3d:51:f1:45:30:
                    97:ed:0c:b9:22:7b:ca:83:44:a5:44:2f:e2:2b:2b:
                    c1:af:c3:d4:2d:9a:c1:a8:29:b6:ba:17:bc:79:77:
                    27:b3:f0:e1:c5:87:95:11:40:3f:b1:7e:16:6d:85:
                    3b:29:c8:4b:ad:97:b1:54:5d:6d:99:ba:9b:40:3f:
                    c2:14:f9:ea:f9:30:e3:9b:3d:6c:9e:e8:f9:3d:e2:
                    b2:52:76:6f:18:e4:15:e7:78:14:0c:4e:60:60:f0:
                    66:9e:65:13:68:53:44:22:81:ac:5e:fa:50:d8:56:
                    28:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4A:B7:CA:17:81:CD:3F:59:95:CF:E6:27:F0:91:7A:EB:B3:44:AF
            X509v3 Authority Key Identifier:
                keyid:7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0c:b8:58:84:b4:51:50:15:7a:27:cd:3d:e0:b0:56:1c:c4:
         22:4c:60:3a:b5:18:63:14:cf:77:fe:5d:b3:13:d9:eb:ba:33:
         af:86:42:f1:47:a6:61:cd:8d:b0:07:eb:80:d0:6b:14:e7:6c:
         01:f2:0f:ee:ec:ec:8f:4f:64:3c:b4:79:8d:cf:f2:fd:75:e8:
         20:52:1d:01:22:53:be:dd:bb:bd:58:2d:e9:d3:3f:44:f8:77:
         45:31:53:ef:42:77:26:c7:80:a5:e8:2c:14:d8:a9:9e:96:1b:
         26:bf:15:88:0e:80:8b:76:1e:97:96:f4:e3:91:58:96:62:69:
         95:59:dd:ac:1f:fe:28:e6:aa:86:bd:34:47:0e:9d:c0:51:8b:
         4c:72:b0:09:81:1e:af:13:3c:21:4e:b2:c7:ae:c6:cb:c4:b6:
         72:8e:5c:95:12:96:0a:69:26:e1:4e:32:03:3e:e9:c1:c5:99:
         98:fc:8d:74:bd:b7:48:75:04:65:1e:fd:df:36:ac:32:14:91:
         e7:9c:ea:9d:f4:00:5b:c5:48:f7:4a:03:63:88:13:2f:31:2e:
         4c:13:02:8a:c2:cb:e7:d7:5d:24:b2:90:46:3a:d5:96:80:87:
         53:d1:0f:e3:cd:e8:c0:5e:db:73:7f:17:ac:dc:65:8b:93:51:
         65:20:af:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:15:09 2025 by rpki-client