Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File:                     94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier:          T/B/CAmD0izjO95klPN3Z0l8TKifAxSAMbwC9H1c+/0=
Subject key identifier:   5F:AE:BE:75:0E:B4:23:7B:38:E5:5D:6A:9F:19:B3:66:25:F4:33:75
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer:       /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial:       01988A332A84F9833E07B5A7E328FBBD58C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number:          15B5
Signing time:             Fri 08 Aug 2025 15:01:05 +0000
Manifest this update:     Fri 08 Aug 2025 15:01:05 +0000
Manifest next update:     Sat 09 Aug 2025 15:01:05 +0000
Files and hashes:         1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: WtDg2tA8PSkHa0b2lmqsVNfdFWhxxm11l+Dds9F8RY8=)
                          2: H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa (hash: Rauzo4l8LbEJsHoIgmNH9pstkYvXoM+T/qkFcHjlqFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:33:2a:84:f9:83:3e:07:b5:a7:e3:28:fb:bd:58:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
        Validity
            Not Before: Aug  8 15:01:05 2025 GMT
            Not After : Aug  9 15:01:05 2025 GMT
        Subject: CN=5faebe750eb4237b38e55d6a9f19b36625f43375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:8f:77:8c:79:b7:13:14:f2:3a:5c:cb:aa:
                    d0:cd:ba:3b:0c:ee:a5:24:8a:4e:0b:45:8e:12:f0:
                    92:72:0a:5e:a9:8b:81:bd:56:0e:0e:27:56:4b:c1:
                    d7:15:e0:7c:b6:1c:4f:0f:0d:44:dd:4c:7c:8c:c1:
                    1a:04:a0:af:98:c7:32:05:09:79:bd:82:9c:58:e8:
                    c9:8a:14:91:32:ba:53:02:c7:f2:04:c3:df:25:5c:
                    6c:ef:67:28:6e:31:8c:45:05:f0:2d:b1:c6:19:f0:
                    00:26:d4:f7:c4:f5:cf:aa:a7:42:37:62:e0:6f:1c:
                    c4:1c:8d:e5:b1:eb:7c:a7:ad:86:c8:05:bb:70:bc:
                    a1:c7:7b:f4:08:42:ff:a0:68:62:38:6b:2c:3d:c0:
                    07:b3:ab:f7:90:88:08:aa:26:86:65:7f:b0:e7:55:
                    d5:7c:37:29:c5:fa:23:97:17:59:da:60:54:b8:98:
                    6f:26:93:f5:92:c9:de:50:57:97:9a:5a:38:b3:d9:
                    3c:4c:eb:a6:fb:d8:fc:57:97:5d:8e:2a:69:c3:70:
                    5f:11:ad:65:23:ab:04:01:21:3d:d9:36:d0:2f:eb:
                    4f:2a:bf:b2:fa:7b:ed:e9:02:2a:52:d4:aa:2c:f4:
                    6b:82:3e:b6:f7:6f:dc:ed:86:d8:bb:8c:e1:50:aa:
                    8e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AE:BE:75:0E:B4:23:7B:38:E5:5D:6A:9F:19:B3:66:25:F4:33:75
            X509v3 Authority Key Identifier:
                keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ff:fe:c3:f6:d6:e6:fa:b9:48:74:09:3d:f0:c3:44:6a:75:
         8f:a6:7e:d7:f7:55:93:82:a5:65:ef:0b:a3:95:2a:a8:15:6b:
         33:be:c6:d2:19:c5:c3:3e:8d:43:d8:60:12:a7:bc:e3:22:19:
         a2:c2:28:d6:8f:2d:f8:70:a8:a5:93:9a:b7:f5:49:be:0f:b7:
         de:ac:5b:7d:ab:36:5d:c1:cb:78:d2:97:12:03:bb:04:5b:f2:
         b3:82:45:28:45:5c:30:a4:a6:fb:70:e3:40:4c:8b:e8:bc:96:
         2e:fb:1b:73:b9:03:19:db:74:fe:e7:72:59:ee:15:00:9c:21:
         00:77:89:b6:39:8c:7c:e8:d0:41:6f:52:38:bc:b4:8d:70:3e:
         c6:3f:bd:f9:8e:8e:67:a7:73:55:47:24:ff:ee:33:84:bb:af:
         69:b7:b3:55:d7:3f:5f:ac:56:ea:b2:15:ad:9d:ad:72:b1:21:
         bc:2b:f3:e0:d9:bd:92:5c:85:99:4e:5d:63:28:0e:ba:45:95:
         72:99:bd:bb:af:8e:84:0e:7b:08:78:72:39:bb:66:51:bc:df:
         73:b3:9f:83:71:8d:b9:27:4d:db:c0:a5:21:e2:de:31:75:87:
         7b:94:02:76:ef:ff:a4:39:8e:f2:98:0a:f5:ea:53:b1:05:29:
         11:ca:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:43 2025 by rpki-client