Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
File:                     1-uJ7jB3msWHHmKt7hRU9a6N5774.mft (raw, json)
Hash identifier:          CKsez5iBeGSQNy4jOX3JDq6ifO0k7rjYfjF//pks6iE=
Subject key identifier:   37:40:9A:C2:37:04:38:DF:AB:7C:56:22:33:0F:E9:0B:07:D4:BB:2D
Authority key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
Certificate issuer:       /CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
Certificate serial:       0198D4E0610272E7CADD84D463F57C848E30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
Manifest number:          0571
Signing time:             Sat 23 Aug 2025 03:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:11 +0000
Files and hashes:         1: 1-uJ7jB3msWHHmKt7hRU9a6N5774.crl (hash: DGSu+LJQNW+TvpJYYwczqwVoZmMizfTbPZZxFII0yxY=)
                          2: iRBbWvohEYJflS9OCEUVIoQSWfY.roa (hash: zk7p1QlOj9CX+QAjlGJs9mmfWeFhKlip2Q65HI1v4ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:61:02:72:e7:ca:dd:84:d4:63:f5:7c:84:8e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
        Validity
            Not Before: Aug 23 03:02:11 2025 GMT
            Not After : Aug 24 03:02:11 2025 GMT
        Subject: CN=37409ac2370438dfab7c5622330fe90b07d4bb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:54:71:cc:54:ee:b3:81:17:45:da:1b:9b:
                    47:4a:58:d0:d8:5f:78:19:45:7b:63:d4:d3:8c:f7:
                    67:2b:e5:dd:cb:70:a5:55:3e:8b:9d:83:5c:f0:3e:
                    48:8c:34:b3:77:cc:d3:49:5f:63:24:35:c8:75:15:
                    f0:00:86:8f:ac:63:58:81:11:82:45:c9:64:1e:55:
                    93:de:97:47:be:d1:61:8b:fe:88:bc:71:fb:3a:b1:
                    7f:56:20:e5:9b:51:15:9a:b5:a9:7f:79:4e:78:63:
                    d9:6f:6b:10:e5:c4:31:87:f3:97:35:a4:60:90:b3:
                    e2:7e:24:91:89:9b:ab:69:c7:22:75:d9:e9:22:5c:
                    68:bf:62:b4:5b:94:ff:7a:97:73:d7:87:dc:c9:96:
                    51:f7:9c:b6:10:21:18:37:33:b1:32:47:01:4b:be:
                    d6:97:51:11:f2:a8:50:c0:64:ce:fa:d4:5b:07:41:
                    2a:db:ba:4e:51:e7:dc:45:a6:6b:b0:14:42:4c:72:
                    f3:14:77:25:57:b7:bc:3f:aa:7e:e3:a7:ef:d5:15:
                    23:fd:74:ff:9a:be:b5:d7:01:2a:78:1e:fd:39:14:
                    0e:8b:0c:74:47:e6:4b:c3:20:41:c3:db:30:c7:71:
                    b9:0a:93:e4:cc:5f:60:6a:c6:2b:2b:73:3f:52:f6:
                    69:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:40:9A:C2:37:04:38:DF:AB:7C:56:22:33:0F:E9:0B:07:D4:BB:2D
            X509v3 Authority Key Identifier:
                keyid:FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:46:0d:b8:6a:02:14:13:fc:bd:37:10:8a:5d:f8:76:5d:a1:
         4b:8d:9a:2c:71:6e:bb:ca:ce:18:ad:60:03:4f:e3:8c:f7:b4:
         26:17:f3:92:15:93:4b:2d:88:61:4d:06:5b:c6:94:65:73:ef:
         c6:7b:a7:1a:47:1e:ca:28:52:bc:ec:04:e5:07:f3:38:0b:f2:
         9f:f4:a5:6c:42:bc:72:2d:d3:ae:fe:94:e9:84:b2:b8:00:94:
         6f:99:a8:4e:6b:14:e7:c2:49:1d:9b:5a:56:d9:8f:31:4d:5b:
         24:42:9a:f0:aa:29:82:d3:87:80:a2:7d:40:47:35:9c:56:10:
         e6:9a:a3:2b:6e:d4:b1:b7:8f:14:01:4a:0a:10:18:29:da:35:
         2d:be:a8:05:4f:f6:28:9a:2e:01:88:70:5c:af:b3:a6:08:07:
         b3:7e:00:76:20:1a:35:f1:9f:60:5d:4c:e2:ef:9f:ac:8c:ff:
         98:3f:0c:05:ae:40:4c:93:07:77:fc:ef:86:83:8e:ae:80:78:
         be:a4:13:4b:f0:5e:9a:59:a4:a9:08:e0:82:38:77:00:22:77:
         e2:e0:4d:3b:c7:e2:e0:87:5d:08:e7:c0:22:ca:9a:3e:30:23:
         9a:6a:e2:e9:3a:68:a2:d2:6d:da:3a:e9:c7:c2:1f:00:f4:6f:
         95:71:02:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:44 2025 by rpki-client