Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
File:                     FLcYAN3cSX9g-e23gzyUlzq33Bw.mft (raw, json)
Hash identifier:          JLcnu8UhH1pAYQKuk1nEB8WVYALj1uEDCquOm3t4jfY=
Subject key identifier:   BC:09:66:EE:22:88:10:DE:B8:D7:92:49:BD:90:92:34:2F:17:C8:A3
Authority key identifier: 14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
Certificate issuer:       /CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Certificate serial:       0198857A60533DE7B8CF481E213DB2F62E3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
Manifest number:          150C
Signing time:             Thu 07 Aug 2025 17:00:46 +0000
Manifest this update:     Thu 07 Aug 2025 17:00:46 +0000
Manifest next update:     Fri 08 Aug 2025 17:00:46 +0000
Files and hashes:         1: FLcYAN3cSX9g-e23gzyUlzq33Bw.crl (hash: BhqjHCCFQKMS4xbhzZBwI3QWq7LoHFPGhaXjhn4eadA=)
                          2: jh-TOxpxIUBWeRHqyE_TsQ3xZPw.roa (hash: h4140lmsN13+jNtLubDuYn8kTL6T4/sAQ4MD0yMdaVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:7a:60:53:3d:e7:b8:cf:48:1e:21:3d:b2:f6:2e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
        Validity
            Not Before: Aug  7 17:00:46 2025 GMT
            Not After : Aug  8 17:00:46 2025 GMT
        Subject: CN=bc0966ee228810deb8d79249bd9092342f17c8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:81:d8:09:9d:7c:f9:77:0b:35:25:e7:15:
                    38:f0:6d:0d:40:a3:c0:7c:8c:1c:66:99:48:ac:8e:
                    22:2c:36:25:24:6d:b5:35:dc:e0:94:93:d2:aa:5e:
                    40:47:cd:9a:da:34:7f:ec:4f:59:9c:35:01:32:41:
                    f2:03:00:a8:11:51:21:d8:b5:0e:41:e4:83:09:6f:
                    07:bf:21:75:73:e6:f7:dc:53:87:38:0d:95:af:ae:
                    d1:1d:d3:36:72:f4:3f:78:6f:cd:d0:71:c4:ed:17:
                    9f:b5:79:71:42:57:ec:d6:11:bc:8f:00:2a:66:3f:
                    d4:98:a7:e3:c8:ea:55:c5:d2:78:35:9a:90:59:4d:
                    cd:a7:2d:b0:7b:3e:72:bc:47:71:25:51:82:88:0d:
                    db:54:17:13:ff:2b:1a:2e:76:5f:fa:b0:91:32:84:
                    8a:b7:03:29:7a:f5:6b:ed:20:12:d9:4d:a5:d3:9d:
                    95:7e:9d:08:e9:1c:0a:7b:b1:3f:22:ef:c4:2e:c4:
                    49:9c:57:1f:78:a5:19:36:99:89:47:b5:2a:4a:3d:
                    ba:c6:5b:41:63:a6:62:01:48:33:ae:b2:d3:6c:db:
                    7e:99:e3:99:ba:8b:80:d8:37:7c:32:e5:c4:b6:a5:
                    34:74:4f:4f:b5:76:ad:b5:52:55:9c:ff:04:d2:2f:
                    6d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:09:66:EE:22:88:10:DE:B8:D7:92:49:BD:90:92:34:2F:17:C8:A3
            X509v3 Authority Key Identifier:
                keyid:14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:9c:9c:d4:b5:a6:94:af:18:46:09:ef:5b:40:ca:76:11:8c:
         40:cb:e7:b7:a4:35:9b:9e:8b:2a:67:84:e5:36:27:21:2b:f6:
         09:c1:03:7e:9d:5f:4e:2e:14:32:f7:91:00:e1:21:36:c0:03:
         71:86:e9:5d:08:31:67:d1:51:fd:80:36:92:ae:8b:32:6f:90:
         49:cc:4a:72:fa:40:fe:03:3c:ae:17:91:b0:35:47:4b:12:a3:
         2d:63:d8:17:7c:4b:9c:ff:87:09:09:c8:11:f8:76:4c:8e:d6:
         ed:63:de:a1:e4:fe:9b:f1:17:3e:30:7d:0c:41:27:7d:38:9c:
         11:40:1e:d2:cd:91:3e:b2:e7:5f:3a:16:a7:fe:37:4c:7b:ad:
         8c:d7:49:ea:ea:d7:40:5d:40:3d:e7:d9:4a:40:27:0a:ff:64:
         26:04:52:ce:94:22:0c:eb:1a:67:78:fb:2b:af:49:c6:b0:6f:
         ab:15:a8:b7:52:40:47:12:93:5d:dc:b7:4e:cf:9e:1c:ca:e5:
         7c:53:6b:e3:2c:48:77:6d:1a:08:e1:41:14:21:ef:ba:ed:5b:
         20:57:2b:50:ad:da:7d:67:c9:bd:ff:65:b3:93:a6:de:cd:03:
         c3:b7:ed:94:8d:1f:6e:74:b7:ef:ca:01:0b:cc:97:ea:1d:f4:
         d8:c6:0d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:00:57 2025 by rpki-client