Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
File:                     1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json)
Hash identifier:          vwHyAGHxADfJyArLrRig2HKaM2F8AtyqrigHxFZkEHA=
Subject key identifier:   88:BF:79:B8:2D:6A:83:C3:BB:2B:9B:3C:B3:E7:BA:67:E5:55:EA:A9
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Certificate issuer:       /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial:       0198D7A94CD7E6A7D2E91E3D1E379CCE9827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
Manifest number:          134C
Signing time:             Sat 23 Aug 2025 16:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:52 +0000
Files and hashes:         1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: wh2m3tgeqpGEojD1YXCbs8R0573SNFty9duWMsuO/Bw=)
                          2: X5Td4BSa7V5YNuHvHl6rc7qXYIg.roa (hash: zvst1s4JeyiHUJBQoQprDeytuK4EA/NhZnM7y90d0+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:4c:d7:e6:a7:d2:e9:1e:3d:1e:37:9c:ce:98:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
        Validity
            Not Before: Aug 23 16:00:52 2025 GMT
            Not After : Aug 24 16:00:52 2025 GMT
        Subject: CN=88bf79b82d6a83c3bb2b9b3cb3e7ba67e555eaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:af:5a:af:11:8b:9d:39:af:e3:81:52:bc:
                    b9:d7:52:fa:14:f9:54:86:19:f3:5e:3b:93:4f:6b:
                    d7:c0:b7:dd:99:4e:fa:2d:d2:b9:60:44:5d:43:b5:
                    58:00:c6:d0:18:ea:76:2f:1d:c6:06:de:38:a9:95:
                    32:5a:aa:b6:a4:70:2a:64:3f:95:bc:e4:57:70:73:
                    9d:92:51:4a:70:9e:1c:e3:3d:aa:4e:51:42:98:8a:
                    18:11:7f:71:2b:74:5e:e5:60:23:89:68:38:93:4f:
                    f9:fa:eb:21:ea:f9:fe:79:a3:a6:d9:73:f1:79:04:
                    bc:02:d0:eb:52:40:cd:fe:21:c3:64:ec:f5:51:93:
                    34:bb:60:02:c8:88:10:ac:3d:44:62:98:81:ee:d8:
                    e5:1f:43:7b:83:58:d8:f1:e0:72:43:f8:1c:fd:6c:
                    d5:ab:ef:96:eb:4b:bc:76:11:e2:1a:02:ae:38:c0:
                    19:a6:a1:c3:61:e9:4f:f4:de:2f:b0:cf:91:c6:74:
                    e1:cb:a6:9e:7a:58:7d:0d:a1:81:db:37:e4:30:8d:
                    80:2e:e9:93:90:b6:03:a9:6f:1f:66:33:81:c5:19:
                    04:ce:6f:5a:6b:c2:84:85:9d:1b:e4:5f:46:14:d2:
                    30:a9:66:6d:ce:5e:23:b7:c7:80:f5:25:42:52:07:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BF:79:B8:2D:6A:83:C3:BB:2B:9B:3C:B3:E7:BA:67:E5:55:EA:A9
            X509v3 Authority Key Identifier:
                keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a3:5f:b5:52:13:78:b3:81:bc:db:b3:6b:dd:2f:0f:a8:b2:
         d5:ab:52:6c:68:8d:92:b7:64:7d:e1:82:ff:41:d2:56:09:ed:
         31:d1:d3:b3:55:0e:c7:32:9b:97:75:36:83:90:50:bb:37:c8:
         19:4a:10:a8:54:20:c3:f3:79:85:d6:fb:49:ea:d4:d5:7a:77:
         04:55:f0:84:dd:2b:c7:19:09:93:14:05:79:be:1b:42:cd:54:
         70:b3:fb:84:fe:8e:37:62:82:33:da:f6:a4:f0:db:89:86:bd:
         cb:68:63:15:c5:34:45:a1:11:14:56:35:1e:75:0f:1b:84:b5:
         da:00:b0:30:72:66:0a:da:67:97:5e:b2:3d:a7:e9:4a:59:20:
         c8:56:ab:f6:24:4f:b4:cf:20:4c:23:51:13:06:0d:69:13:6f:
         2f:e7:b7:e1:40:43:91:0e:2b:56:88:f1:3c:80:09:d2:5b:66:
         fe:61:57:99:0c:ab:06:d1:fc:45:75:bf:df:de:b7:e3:b6:11:
         45:a8:8d:c6:b4:ca:ac:0c:23:13:51:02:2f:c9:bd:0b:bf:d0:
         ef:93:b6:1f:ab:1b:b0:86:1e:c4:2e:6c:b6:59:13:4d:38:d7:
         ce:77:81:12:96:6d:cb:d5:81:24:c3:c9:ec:0a:04:d1:e2:fb:
         7c:cf:d0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:40 2025 by rpki-client