Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
File:                     1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json)
Hash identifier:          /9LddaDr+F5T9yL24tm0LP1z9vJymVGu4YvikOPZxVI=
Subject key identifier:   39:0D:F0:1F:34:06:B3:82:D9:86:14:1F:3C:EE:5D:D6:A0:AC:35:F9
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Certificate issuer:       /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial:       019880C24D14B936139DF181B5B61D0A7084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
Manifest number:          0FE6
Signing time:             Wed 06 Aug 2025 19:01:14 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:14 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:14 +0000
Files and hashes:         1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: RApJWzstkYPTQ56jLqXuogIJ1WGNSVY/4/eiPOdLQd8=)
                          2: 7RKc8XFi1ZBpZ1fyV1l65spfKVc.roa (hash: hdKthzCCiG0nuzNYJsrtq6rpWOtWCqRiyWfbA+gnE5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:4d:14:b9:36:13:9d:f1:81:b5:b6:1d:0a:70:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
        Validity
            Not Before: Aug  6 19:01:14 2025 GMT
            Not After : Aug  7 19:01:14 2025 GMT
        Subject: CN=390df01f3406b382d986141f3cee5dd6a0ac35f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:f4:b5:98:17:14:87:91:17:54:51:3d:76:
                    68:48:a7:c0:ac:5a:c4:7e:70:ae:29:ee:2b:5c:29:
                    9d:1c:f5:ca:f9:9b:44:ad:ee:9c:fb:15:ed:c6:53:
                    17:aa:5b:9d:d3:24:be:4a:0b:28:c0:2d:86:90:b6:
                    df:a9:19:36:fe:59:d3:69:bd:56:9f:fb:8e:e2:32:
                    1a:c8:04:3d:38:0d:d2:42:4c:a7:1a:b1:c0:78:62:
                    57:97:0f:4a:f9:4d:44:d0:6a:10:5b:bb:d6:5b:6e:
                    d3:06:af:fa:0c:15:1c:f8:54:d0:93:56:46:7a:21:
                    ca:f2:6a:75:f2:3a:6e:5e:42:4a:7e:c9:6a:16:0a:
                    17:00:90:f4:e2:7b:9f:c9:2c:8f:ad:4d:2f:10:20:
                    ec:dd:e8:d4:5b:f5:01:4c:58:e0:17:c4:92:21:21:
                    db:79:56:21:88:64:91:8a:1d:9b:3a:5e:bd:9a:b3:
                    ff:b1:ec:b9:05:ca:a5:1b:14:66:e9:ab:70:4d:ae:
                    49:21:b4:c4:12:5a:d1:3e:af:37:73:25:2e:dd:b5:
                    47:48:03:b7:97:cf:ab:e1:fd:c5:2e:a5:4b:0a:d1:
                    48:fd:48:06:62:47:d9:91:29:22:c7:9f:8e:b8:bf:
                    26:2d:84:28:53:a8:88:7b:66:9f:ba:ce:90:63:9a:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0D:F0:1F:34:06:B3:82:D9:86:14:1F:3C:EE:5D:D6:A0:AC:35:F9
            X509v3 Authority Key Identifier:
                keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2f:ce:cc:74:57:9a:49:96:9a:4e:29:1e:a5:32:43:f5:1e:
         63:3a:da:9a:ad:1f:bd:f8:a5:e3:22:1d:ca:61:7e:af:69:33:
         9f:a3:f9:de:33:69:7d:a6:d4:a8:bb:d3:02:03:c6:68:d1:83:
         0d:0b:22:6d:53:a6:ef:b6:87:38:57:31:f9:a8:37:52:f6:fc:
         86:5f:67:ea:1d:f0:69:1d:4f:a8:6f:19:4b:3d:73:13:bd:3b:
         4f:b1:4e:1e:24:43:72:88:f0:ea:29:8f:f1:67:b1:41:bf:82:
         95:bb:25:25:3c:80:b9:74:2e:69:7d:41:ee:f1:2a:dc:29:b6:
         56:1d:1c:06:3b:79:33:c4:95:03:ce:15:fe:e5:05:5e:d2:d7:
         51:4b:1c:aa:6e:8a:95:6e:59:59:d9:a8:af:95:72:b2:6a:52:
         6d:43:5c:94:1d:e3:fc:24:49:d5:7d:fb:0d:2d:20:e7:18:c1:
         b7:86:91:81:6a:18:4c:dc:22:10:37:34:ef:1d:ca:8e:78:45:
         67:1a:eb:55:4b:90:e6:de:21:36:06:94:e2:3e:79:73:f2:65:
         a4:a9:b6:4a:e3:57:42:fd:34:6c:41:8c:24:41:ba:a7:a1:54:
         f7:cd:e8:67:65:ec:48:ef:46:fe:6b:23:23:9b:ee:b5:07:df:
         26:3b:e9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:59 2025 by rpki-client