Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
File:                     F564e9wyeT2_7RhKb_vBTtFdMqQ.mft (raw, json)
Hash identifier:          knCrCQuz2Z0X9kITC4+E8Suo4uFg3fGipxUlvHtzUZE=
Subject key identifier:   50:F9:F5:D4:26:C8:59:C7:BC:32:7D:DB:88:C3:19:18:E5:10:C4:0E
Authority key identifier: 17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4
Certificate issuer:       /CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
Certificate serial:       01989335D3A1373EFE6A1CDE4B85A813D926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
Manifest number:          0347
Signing time:             Sun 10 Aug 2025 09:00:35 +0000
Manifest this update:     Sun 10 Aug 2025 09:00:35 +0000
Manifest next update:     Mon 11 Aug 2025 09:00:35 +0000
Files and hashes:         1: F564e9wyeT2_7RhKb_vBTtFdMqQ.crl (hash: jlsWzs7ey5IYiYWe/LG1/goMZ86+6QZK3VAGukOBmpU=)
                          2: YYdbZAN7pN6TVTepPYBGugFjphQ.roa (hash: NsxHuGOHh0xg9XbBNwi/wuinAUzVezbbbYAR6J2U768=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:35:d3:a1:37:3e:fe:6a:1c:de:4b:85:a8:13:d9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
        Validity
            Not Before: Aug 10 09:00:35 2025 GMT
            Not After : Aug 11 09:00:35 2025 GMT
        Subject: CN=50f9f5d426c859c7bc327ddb88c31918e510c40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:50:e3:7b:a0:59:ac:dd:44:11:3a:2c:c8:59:
                    be:c8:c1:9a:48:fe:d1:02:d6:a0:fd:9a:05:ef:b6:
                    0d:77:8c:3f:e0:76:8a:a9:b0:09:9c:a1:b2:26:77:
                    bf:1f:23:26:e0:b2:46:ad:06:b8:d7:53:a2:9c:b6:
                    0b:c6:88:ce:a7:f0:16:8d:30:d1:04:a5:81:08:39:
                    ce:5e:29:31:16:e1:9c:3e:87:c8:84:4a:6e:a4:9a:
                    74:89:31:45:e9:46:37:79:85:2e:00:72:53:a7:70:
                    aa:cf:35:9f:a3:9d:b4:3e:31:d0:66:e8:05:8e:56:
                    33:9f:ba:41:43:55:e3:7d:52:23:2a:6d:87:62:7a:
                    54:26:ca:33:ed:b7:ce:7a:79:5e:72:49:d5:ce:7b:
                    cf:d1:b1:ef:07:4e:c9:3d:16:38:24:72:6e:5b:da:
                    8d:fc:73:d7:36:ad:8f:5f:eb:a3:0d:74:86:1c:f7:
                    ff:3b:5f:91:c7:c9:20:ad:46:eb:93:e6:75:71:3a:
                    87:d7:1a:dc:c4:c5:ad:71:23:38:b4:5c:8b:6d:c1:
                    fc:f0:a1:ba:62:05:e2:69:cc:1d:68:d1:e5:d3:35:
                    c9:9f:5a:79:19:29:a1:22:d0:45:e2:be:0d:de:d5:
                    8a:55:66:d0:9d:44:e8:aa:bb:32:f9:7f:1b:86:31:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F9:F5:D4:26:C8:59:C7:BC:32:7D:DB:88:C3:19:18:E5:10:C4:0E
            X509v3 Authority Key Identifier:
                keyid:17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:97:e4:83:ed:90:02:ab:74:f9:a1:19:68:64:fa:38:9d:2c:
         50:87:b0:72:fd:d0:1f:5e:32:16:91:86:c5:06:07:b6:73:19:
         d0:90:b9:51:13:34:c3:2a:af:0a:c9:f8:3f:3a:92:66:86:8b:
         2c:a9:83:5c:7b:d8:ef:ac:bd:76:4a:54:34:c5:cb:8a:b7:84:
         17:9c:6d:4d:27:5b:2f:89:88:d3:48:ac:14:31:6d:01:37:16:
         f7:f1:3e:cc:e6:49:5a:54:b4:0c:3e:c5:f3:a2:09:5b:4f:24:
         d0:e2:cb:7a:39:f7:aa:12:0d:9a:c0:a4:92:bb:b3:1c:01:c5:
         67:f7:e4:cf:fe:4e:ac:0f:d3:c6:f4:ee:eb:41:b1:c3:92:e8:
         ff:7e:99:f7:9e:86:fd:d5:38:cb:72:4f:05:1a:c4:e3:2d:d1:
         90:5f:7c:2d:d6:fe:80:54:3a:3c:d7:d8:01:e6:ed:00:fd:b3:
         fe:b3:64:c9:34:42:01:66:1d:8c:79:d9:36:1b:57:30:19:64:
         12:79:b4:99:be:2d:2e:8e:c2:8d:aa:d5:77:0f:3c:e0:1f:d3:
         4e:e0:69:e7:80:69:25:4d:f0:8a:d9:85:e0:40:16:e0:88:23:
         da:9b:3e:35:c3:5a:7f:01:bb:3a:7d:99:12:9b:1b:08:87:92:
         ed:f9:d2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:50:07 2025 by rpki-client