Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
File:                     FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json)
Hash identifier:          uT73xoloeWw2kYTXUz7GnK3XKgo2uN5JCEsXiAR2/+4=
Subject key identifier:   0A:B0:7E:AC:84:B6:02:22:F2:C5:81:89:E7:AD:0F:A5:B8:50:0E:6D
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Certificate issuer:       /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial:       01987E2EFF29D15193E616BDF2FA19DAC0CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
Manifest number:          0EA2
Signing time:             Wed 06 Aug 2025 07:01:05 +0000
Manifest this update:     Wed 06 Aug 2025 07:01:05 +0000
Manifest next update:     Thu 07 Aug 2025 07:01:05 +0000
Files and hashes:         1: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: 4BPYHjee0Cai49nLd6VeMyTdni4Qo3KzcO13ngWE4Ls=)
                          2: saR7C8jPhSxxp1U0l0fw1iLpggA.roa (hash: YzILylPp9VZQ/IVzqGiVAC4yp8xtNGEqB65NyOh5ynQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2e:ff:29:d1:51:93:e6:16:bd:f2:fa:19:da:c0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
        Validity
            Not Before: Aug  6 07:01:05 2025 GMT
            Not After : Aug  7 07:01:05 2025 GMT
        Subject: CN=0ab07eac84b60222f2c58189e7ad0fa5b8500e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:db:2d:2a:6f:49:28:1c:17:43:a8:3f:7a:
                    d6:61:28:95:e5:c7:45:ad:8f:d9:d2:2e:70:0b:e7:
                    34:ff:02:af:6f:29:d8:c8:84:21:08:db:10:25:10:
                    bd:54:cb:fe:14:fa:96:ad:cf:ec:09:52:ef:0d:22:
                    4a:5e:d7:34:9e:c9:7f:a8:24:3e:fa:d8:52:40:1d:
                    08:70:c4:0d:7d:01:56:fe:ac:94:d1:c6:9e:20:8a:
                    d5:50:44:29:b2:7f:27:4d:92:72:2b:33:af:96:2d:
                    5e:99:47:d0:3a:fc:fb:da:28:1d:3b:27:23:2e:ad:
                    eb:5a:69:c2:40:63:7f:05:63:a4:2b:f6:86:ae:8c:
                    5a:e2:54:fd:7c:0a:ee:2c:53:c9:98:7f:92:1f:26:
                    ad:38:8c:69:cb:fd:0e:e9:23:97:d0:43:ea:59:83:
                    88:85:d7:2c:8a:76:f3:b6:c2:48:87:3d:83:69:5e:
                    20:15:ae:0f:6f:77:d7:3f:bc:80:d4:71:76:62:6f:
                    a4:00:47:0a:30:8c:69:62:c4:dd:45:4b:07:9e:0f:
                    d7:6a:10:c6:b2:c2:38:0b:1c:76:60:4f:41:f5:e5:
                    03:a9:15:70:94:e7:57:5f:ca:6a:36:a7:02:2c:ca:
                    54:0b:03:ed:01:25:ca:a9:78:13:f3:f0:20:9e:aa:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B0:7E:AC:84:B6:02:22:F2:C5:81:89:E7:AD:0F:A5:B8:50:0E:6D
            X509v3 Authority Key Identifier:
                keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f9:d3:6b:62:5c:f6:1c:b8:21:5e:17:6c:73:62:36:0a:de:
         f3:50:46:e6:f4:c9:23:53:42:b6:a3:ed:53:28:cd:40:e9:97:
         b8:fa:e2:ea:37:ac:91:a3:d4:35:5a:0b:7e:96:39:fc:38:49:
         73:a3:65:0e:ef:f7:3f:2c:97:23:8c:38:6f:2d:e5:ab:aa:bd:
         ba:f4:7e:8f:04:69:00:45:77:bc:af:49:9c:6c:75:c8:e4:3e:
         2a:65:e8:62:e9:68:11:d4:76:7a:52:fd:4f:e0:fc:e6:44:3c:
         9c:c1:b9:0a:66:7b:bb:91:c3:40:0f:bd:e5:54:32:92:42:4f:
         dc:3e:27:7c:c3:c8:94:69:51:d3:5c:22:c9:4c:32:dd:ec:fc:
         2b:19:3f:4d:d0:bb:54:f8:17:26:1d:e8:b9:7a:39:b3:63:a6:
         79:44:ad:a9:bc:c6:a8:63:fa:7f:d5:f0:ba:b0:ce:f2:52:24:
         86:24:71:e8:b7:0c:e4:c1:7a:38:a3:15:02:4b:f7:51:3a:40:
         74:eb:c7:a5:e4:c0:c5:2e:0f:b4:31:98:0d:41:04:9d:89:fe:
         33:17:63:a5:48:51:20:14:1c:51:52:58:34:25:f2:b4:d5:2c:
         9d:68:fd:5e:b9:7d:ae:51:1b:d6:29:5a:ed:ff:d1:33:f5:0c:
         1b:32:08:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:19 2025 by rpki-client