Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
File:                     __RCr_uhz67zECyYHXVpUCzmUVw.mft (raw, json)
Hash identifier:          d1pXRb17Ta5jdaVPrQmuznuaI7Bi+I9LRt10aI6hWlI=
Subject key identifier:   84:83:84:00:6E:B6:10:EE:FE:92:15:64:E2:3D:D0:16:44:90:74:37
Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
Certificate issuer:       /CN=fff442affba1cfaef3102c981d7569502ce6515c
Certificate serial:       01988356C6F033F2DE7E1CE0930ABBE94062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
Manifest number:          1620
Signing time:             Thu 07 Aug 2025 07:02:38 +0000
Manifest this update:     Thu 07 Aug 2025 07:02:38 +0000
Manifest next update:     Fri 08 Aug 2025 07:02:38 +0000
Files and hashes:         1: __RCr_uhz67zECyYHXVpUCzmUVw.crl (hash: ZW7k+I68evuuAlUDDG9VqK/0Psjxjae0cGmiboZoJ/I=)
                          2: cfHPpH74hHCJK1pLDEwyQ7AMZJY.roa (hash: Gmnr746njngjtdW+doOVMtWLzbG5WcOtPqH2dI9MOLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:56:c6:f0:33:f2:de:7e:1c:e0:93:0a:bb:e9:40:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c
        Validity
            Not Before: Aug  7 07:02:38 2025 GMT
            Not After : Aug  8 07:02:38 2025 GMT
        Subject: CN=848384006eb610eefe921564e23dd01644907437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:15:67:b8:38:19:79:c1:4d:96:ff:2c:62:08:
                    30:35:33:b2:7e:46:ba:0e:1d:02:20:a1:3c:83:9c:
                    1f:79:1d:ab:75:98:e4:56:02:d8:b0:a9:24:a1:7b:
                    4f:b4:e4:ad:cd:15:f7:38:fb:4e:6c:f0:73:63:eb:
                    71:fa:a5:a1:98:1b:02:7e:23:a5:d6:16:95:4c:f8:
                    82:dd:e4:b3:a0:b4:a8:28:08:58:b2:9e:4b:74:f4:
                    02:cc:b3:e4:42:22:02:c0:b4:cd:98:54:58:b8:34:
                    c6:25:8f:cd:6e:01:b8:ba:d8:5c:da:6a:37:a1:b5:
                    78:b8:91:ce:b4:d8:40:d0:3f:92:b9:cf:ad:50:e7:
                    db:2d:b4:24:81:4b:c8:39:dc:a0:36:83:bd:55:53:
                    09:c7:34:c3:0a:8c:41:1b:70:4f:64:e3:a7:45:d2:
                    e7:6b:38:06:95:e4:53:9c:7d:71:92:a1:94:52:4e:
                    68:32:0a:ed:c8:fe:ec:00:51:0f:49:62:9d:97:9e:
                    03:e4:5a:20:2b:49:a7:9e:06:ab:cc:d5:5b:11:94:
                    86:71:51:c9:9e:0a:82:57:f2:a1:f6:73:e7:5f:fa:
                    9d:a9:13:10:d0:76:4d:6d:9b:a5:95:ed:74:53:d0:
                    af:59:39:79:8a:53:7e:90:22:e6:e3:4e:ba:45:d8:
                    9a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:83:84:00:6E:B6:10:EE:FE:92:15:64:E2:3D:D0:16:44:90:74:37
            X509v3 Authority Key Identifier:
                keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:46:35:ad:bb:82:58:45:38:b9:9f:ff:c9:1f:63:35:0e:8d:
         39:ef:cd:a9:15:2d:9c:a4:b0:87:cc:93:07:1e:9e:c2:cc:9b:
         ec:11:69:8f:5b:e1:f3:5c:65:6d:b6:67:c7:a8:41:4b:81:28:
         f3:86:da:6a:1b:94:2a:d6:08:66:fd:84:f4:26:99:63:4b:75:
         76:45:58:ee:d0:4d:80:dd:31:6e:ae:06:46:a9:36:3b:76:60:
         af:e4:7c:41:76:20:e5:9e:33:a8:09:b8:a8:ed:88:b6:11:2e:
         5f:8a:5c:8a:06:f5:ce:1e:ab:35:cc:cf:74:b1:85:e3:db:bd:
         fb:55:8d:7c:3a:1e:f8:c4:58:a0:68:31:d4:85:be:2a:6d:24:
         3a:fa:70:3e:7f:a2:c7:75:fc:73:98:2d:d9:bf:f6:bf:06:22:
         3f:6a:21:7a:02:18:3e:c6:03:9d:67:00:d1:85:60:9c:fd:be:
         a8:0c:c3:9c:3b:11:3d:f5:c6:88:53:24:59:69:78:9f:07:37:
         f9:d8:e7:88:63:f7:61:a2:0d:47:08:0c:a2:dd:ff:4c:c8:b2:
         a6:2d:ed:a3:9e:02:6a:01:81:2d:bb:41:46:c6:84:84:b5:a4:
         b2:82:1d:2c:c1:6a:0c:25:65:cd:49:ea:5e:70:2f:17:6c:d7:
         50:f3:68:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:12:10 2025 by rpki-client