Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
File:                     1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft (raw, json)
Hash identifier:          35BVQnGa/fxK6k0kTbqSPIB3DRmmLMfwAAS+ReoTCS4=
Subject key identifier:   B1:D1:BB:7E:82:67:A9:5F:B8:CD:EA:B6:EB:BC:4B:38:38:14:80:1A
Authority key identifier: FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
Certificate issuer:       /CN=fb02f648de95b88479364346ed01e78769577922
Certificate serial:       0198D7E1986C4A84EE4C98FAA7F3A35444B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 17:02:22 +0000
Manifest this update:     Sat 23 Aug 2025 17:02:22 +0000
Manifest next update:     Sun 24 Aug 2025 17:02:22 +0000
Files and hashes:         1: 1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl (hash: uqdUFJlKt+bZJnMzVLOwFO+iMqQpf+caiLEbN8S7Vbs=)
                          2: 3vK4gZC4TPB0-MQ6z0IE1oo3VSw.roa (hash: j0jyYdSsynnhoRf7eCK9ZvXX/Rp4LU5VAHZHpRm0UEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:e1:98:6c:4a:84:ee:4c:98:fa:a7:f3:a3:54:44:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb02f648de95b88479364346ed01e78769577922
        Validity
            Not Before: Aug 23 17:02:22 2025 GMT
            Not After : Aug 24 17:02:22 2025 GMT
        Subject: CN=b1d1bb7e8267a95fb8cdeab6ebbc4b383814801a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6d:23:67:0e:73:85:56:28:c9:39:69:30:e0:
                    d8:1f:28:e9:d3:58:d9:7b:f3:00:89:2e:af:58:e9:
                    59:de:02:c6:7b:ab:41:28:e8:51:7d:94:d0:91:30:
                    f5:b1:65:78:47:da:5c:0b:7f:40:28:d7:67:e1:81:
                    0f:5d:0e:2e:f0:7f:c7:37:10:7e:56:61:36:5e:dd:
                    53:fd:43:e0:07:2e:94:21:86:f6:dd:ec:79:f4:cf:
                    27:50:29:21:12:83:02:44:1c:a8:f8:7a:16:ab:cf:
                    43:b6:b5:ef:7b:91:76:de:20:fe:6b:36:5e:60:cf:
                    98:48:c4:57:a9:d5:a6:e9:81:7b:4f:48:b7:d9:9e:
                    80:e1:8e:5a:7a:81:a2:2a:21:8f:f4:95:63:0d:e8:
                    8d:0e:e2:6f:6b:b9:05:07:23:9c:bd:29:46:91:0b:
                    61:16:16:08:c3:8c:3e:da:6c:cd:e7:70:1e:a6:32:
                    2f:73:cc:6f:f0:7c:08:7e:6e:4d:4e:d9:6b:b6:d0:
                    e4:7f:39:a2:fd:39:a3:f4:55:4b:68:88:21:3f:eb:
                    18:88:8d:a7:11:10:15:44:d8:31:25:2e:fb:b8:ab:
                    fd:ab:19:94:c9:34:cd:9e:e2:8b:7c:cf:b5:f2:3d:
                    f6:74:d3:43:62:d0:12:12:36:5d:b6:01:a6:fe:d7:
                    3a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D1:BB:7E:82:67:A9:5F:B8:CD:EA:B6:EB:BC:4B:38:38:14:80:1A
            X509v3 Authority Key Identifier:
                keyid:FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:0a:c9:96:0f:29:b1:9a:79:11:f9:9a:36:b2:74:cf:5b:b1:
         c2:1d:86:15:02:d8:d2:ea:8d:a1:73:ca:2f:3a:77:94:a6:3e:
         7c:0b:e7:df:e7:2d:fa:26:04:c4:ef:10:c1:ab:f2:69:58:cb:
         a2:a1:b4:d1:57:b5:04:a3:a2:33:ac:4e:c7:0e:c2:28:55:49:
         e7:77:97:98:98:d3:22:35:51:b3:bb:1f:c1:15:03:56:ee:ae:
         44:99:97:58:19:5c:dd:61:2c:e6:5b:a1:39:bd:11:81:4c:9f:
         97:29:dd:96:43:37:4b:98:e5:c6:ff:2e:0c:44:e6:be:80:5a:
         34:5a:31:1d:ac:c3:8b:4a:cc:02:6c:0d:fe:f9:11:d3:59:12:
         f3:c6:25:91:03:30:6e:79:32:b5:7b:de:8e:84:f3:31:45:c4:
         ea:b4:bd:bc:03:69:e1:3e:c0:73:d0:d9:81:16:bd:0e:64:1d:
         9a:6f:ac:17:57:a5:62:78:00:0d:53:e8:a3:89:ce:5d:f9:0f:
         b8:1b:3d:85:80:6d:59:8f:c5:2f:13:34:3e:bc:1e:4b:1b:8e:
         82:29:a8:03:2a:50:9a:30:2a:65:9c:17:5c:42:10:44:97:76:
         a0:7d:ce:7f:7a:bd:b2:69:0c:c4:11:42:fe:43:96:33:f5:91:
         01:ea:ff:8f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjX4ZhsSoTuTJj6p/OjVES4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDJmNjQ4ZGU5NWI4ODQ3OTM2NDM0NmVkMDFlNzg3Njk1
Nzc5MjIwHhcNMjUwODIzMTcwMjIyWhcNMjUwODI0MTcwMjIyWjAzMTEwLwYDVQQD
EyhiMWQxYmI3ZTgyNjdhOTVmYjhjZGVhYjZlYmJjNGIzODM4MTQ4MDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m0jZw5zhVYoyTlpMODYHyjp01jZ
e/MAiS6vWOlZ3gLGe6tBKOhRfZTQkTD1sWV4R9pcC39AKNdn4YEPXQ4u8H/HNxB+
VmE2Xt1T/UPgBy6UIYb23ex59M8nUCkhEoMCRByo+HoWq89DtrXve5F23iD+azZe
YM+YSMRXqdWm6YF7T0i32Z6A4Y5aeoGiKiGP9JVjDeiNDuJva7kFByOcvSlGkQth
FhYIw4w+2mzN53AepjIvc8xv8HwIfm5NTtlrttDkfzmi/Tmj9FVLaIghP+sYiI2n
ERAVRNgxJS77uKv9qxmUyTTNnuKLfM+18j32dNNDYtASEjZdtgGm/tc6pwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLHRu36CZ6lfuM3qtuu8Szg4FIAaMB8GA1UdIwQY
MBaAFPsC9kjelbiEeTZDRu0B54dpV3kiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13TDJTTjZWdUlSNU5rTkc3UUhuaDJsWGVTSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvMTZhNDhiLTZkMmEtNDBlMi05YmMz
LThjZDliMzNhNTY4NC8xLzEtd0wyU042VnVJUjVOa05HN1FIbmgybFhlU0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzcxLzE2YTQ4Yi02ZDJhLTQwZTItOWJjMy04Y2Q5YjMzYTU2
ODQvMS8xLXdMMlNONlZ1SVI1TmtORzdRSG5oMmxYZVNJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIArJ
lg8psZp5EfmaNrJ0z1uxwh2GFQLY0uqNoXPKLzp3lKY+fAvn3+ct+iYExO8Qwavy
aVjLoqG00Ve1BKOiM6xOxw7CKFVJ53eXmJjTIjVRs7sfwRUDVu6uRJmXWBlc3WEs
5luhOb0RgUyflyndlkM3S5jlxv8uDETmvoBaNFoxHazDi0rMAmwN/vkR01kS88Yl
kQMwbnkytXvejoTzMUXE6rS9vANp4T7Ac9DZgRa9DmQdmm+sF1elYngADVPoo4nO
XfkPuBs9hYBtWY/FLxM0PrweSxuOgimoAypQmjAqZZwXXEIQRJd2oH3Of3q9smkM
xBFC/kOWM/WRAer/jw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:29 2025 by rpki-client