Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft
File:                     1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft (raw, json)
Hash identifier:          kFwsvS/1DpU7h83jFA93iEkQufAZWgVCj5unAuYvgyU=
Subject key identifier:   21:4D:BA:BB:A5:17:4E:28:8D:0F:08:77:D0:00:F5:6C:68:61:45:93
Authority key identifier: FB:B0:30:1E:F6:FF:58:97:B5:BE:2C:94:1D:DB:51:97:8F:D4:89:FF
Certificate issuer:       /CN=fbb0301ef6ff5897b5be2c941ddb51978fd489ff
Certificate serial:       0198D583DECDA23F9537B996CCF82DF28029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7AwHvb_WJe1viyUHdtRl4_Uif8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft
Manifest number:          1167
Signing time:             Sat 23 Aug 2025 06:00:45 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:45 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:45 +0000
Files and hashes:         1: 1-7AwHvb_WJe1viyUHdtRl4_Uif8.crl (hash: zAacosDDegBi1JrfyZSAbzpm0svu5Zb03ZFdhUIoIFM=)
                          2: VEF9YiqqrEYAf4QojwGm_HltJ2A.roa (hash: ME+nwVXcRmQ2bX2iI/VGtdmmf4+22BDBuD7jDy4oOiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-7AwHvb_WJe1viyUHdtRl4_Uif8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:de:cd:a2:3f:95:37:b9:96:cc:f8:2d:f2:80:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb0301ef6ff5897b5be2c941ddb51978fd489ff
        Validity
            Not Before: Aug 23 06:00:45 2025 GMT
            Not After : Aug 24 06:00:45 2025 GMT
        Subject: CN=214dbabba5174e288d0f0877d000f56c68614593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:8a:bb:a9:4c:91:c2:7a:a5:78:9a:d7:af:
                    61:c8:06:ec:b1:b5:44:c7:0b:ec:2a:47:ed:59:ac:
                    2f:9b:a7:38:a6:6f:56:e4:6e:c7:f1:c0:00:ad:5b:
                    2c:3e:31:19:67:b5:2c:66:c3:a5:75:0e:b0:1c:5d:
                    a6:d0:49:6a:0c:ed:32:a7:84:c8:f8:37:77:ba:f7:
                    6b:fb:f3:f6:5b:63:48:67:5a:fb:89:7a:03:d6:b9:
                    52:79:3c:dc:61:3b:43:24:b1:17:5a:c3:b0:92:bd:
                    1e:0a:2a:5b:45:b0:f4:da:82:84:b3:3b:67:96:bf:
                    8a:4b:54:f2:61:b1:c8:cf:73:8d:24:89:3b:98:c5:
                    69:3c:e5:c6:9d:0b:37:50:7f:9a:25:9f:5e:2b:f8:
                    d7:ef:9c:4c:d3:1c:24:2f:dd:66:32:45:12:e7:a9:
                    ce:5d:a0:3f:62:80:11:f8:4a:ca:fa:64:26:f2:73:
                    54:0b:c3:2d:5a:bb:97:b9:df:ca:be:35:f6:3e:de:
                    05:24:73:c8:3d:c4:1c:2b:2b:91:04:f1:d1:ee:69:
                    e8:75:e1:e1:a7:42:21:7e:3e:04:ba:d1:f1:e5:f8:
                    2d:c6:ca:ba:d9:86:2d:84:01:7a:a3:53:85:52:b7:
                    02:a6:86:fe:e4:8a:45:af:f9:e1:a1:cb:70:72:bc:
                    0e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4D:BA:BB:A5:17:4E:28:8D:0F:08:77:D0:00:F5:6C:68:61:45:93
            X509v3 Authority Key Identifier:
                keyid:FB:B0:30:1E:F6:FF:58:97:B5:BE:2C:94:1D:DB:51:97:8F:D4:89:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7AwHvb_WJe1viyUHdtRl4_Uif8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:6a:b5:8c:1c:0b:d2:10:fc:46:24:fb:66:47:04:e0:be:
         8a:a1:2a:31:82:33:7e:fd:52:4f:bf:ac:3b:71:c3:e3:f3:06:
         34:4b:f2:14:ff:62:f0:62:b0:3a:d4:82:c1:d2:03:51:2a:cf:
         87:f2:ac:ba:05:7d:85:af:fa:a6:b9:a1:9b:d8:ae:6a:f0:65:
         dc:4b:11:1c:07:7f:2e:27:7f:6c:19:34:88:4d:50:5e:39:7e:
         2e:08:89:ee:8f:45:1b:9f:04:94:2e:e4:ff:0b:f9:e4:9b:af:
         dc:b3:86:4b:53:0b:d9:ad:7a:3f:73:0d:c2:d4:c8:44:d7:80:
         eb:41:2b:4d:93:a9:6b:32:7f:34:78:e3:1e:72:8c:ce:16:38:
         62:cf:44:9a:72:1a:4a:cb:3b:c1:6a:70:c8:f1:fd:89:a0:d4:
         94:f0:38:8e:91:88:04:d2:d5:f3:60:1d:9d:49:79:94:48:57:
         99:dd:f3:85:f5:3d:ae:c2:3d:fb:01:2c:49:21:95:a6:10:e2:
         51:bd:82:91:59:87:10:48:38:3a:26:9e:3e:82:12:c2:12:a0:
         41:45:29:aa:83:18:7d:4c:72:af:dd:ae:21:05:cd:d9:69:49:
         84:4d:b3:17:b2:cb:bc:ba:4a:a3:d2:d0:cb:56:ec:20:3c:63:
         92:67:0c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:49:41 2025 by rpki-client