Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft
File:                     1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft (raw, json)
Hash identifier:          0dKQN/TsB56AGwJimbI6a+HjZytR3B+d2x3t+FPrReo=
Subject key identifier:   1D:71:39:66:FB:48:5E:00:91:46:03:87:4D:34:BD:09:55:5B:A9:9B
Authority key identifier: FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80
Certificate issuer:       /CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780
Certificate serial:       0197B6A092F31D4476DBE607540138B700D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft
Manifest number:          09A3
Signing time:             Sat 28 Jun 2025 13:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:06 +0000
Files and hashes:         1: 1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl (hash: YNrrK5frT4d+jI+E9qdlz5s9yTsrCqzRKEX/O1IQ8zE=)
                          2: CN7EuI0-M2CqLCuCRHt6GUrcg0E.roa (hash: nPJ41a5MjCCJYxpL+ZRoeblB2rw9Ylu7iDblmReMQHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:92:f3:1d:44:76:db:e6:07:54:01:38:b7:00:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780
        Validity
            Not Before: Jun 28 13:01:06 2025 GMT
            Not After : Jun 29 13:01:06 2025 GMT
        Subject: CN=1d713966fb485e00914603874d34bd09555ba99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:14:cd:e2:81:cd:a2:25:a0:cb:e7:fa:06:
                    2f:59:44:24:d5:79:d0:8c:e5:9f:d3:59:82:6e:bf:
                    6b:86:7a:9c:25:16:53:8b:9a:ae:34:01:6f:05:78:
                    97:71:57:02:25:20:ef:af:77:a7:7e:d0:0f:d0:c3:
                    ce:95:a1:51:49:c3:df:d8:94:7d:6d:13:7a:77:b9:
                    c7:35:48:f3:5f:ff:a3:44:d0:c3:f4:9b:0a:4d:3b:
                    96:97:ac:91:f9:70:32:78:81:c8:53:b8:c7:1a:09:
                    86:c7:4c:87:2f:32:0c:27:e0:a9:84:9d:bb:fe:1a:
                    fe:52:4c:02:85:46:3d:89:0e:a8:1e:36:1b:f2:4c:
                    3c:c6:c4:fc:51:10:4d:80:75:82:a4:e4:fc:7c:d8:
                    96:6e:19:cc:a6:5d:94:c9:aa:9a:dd:09:fd:f8:d2:
                    00:d3:17:e8:a9:de:fc:f3:52:3a:a9:4d:eb:1a:d4:
                    9e:e6:01:65:d2:9b:09:6c:53:de:1e:b9:49:5d:05:
                    59:53:66:a5:43:bb:2a:5b:b0:b4:c6:b8:bd:6a:d1:
                    0d:8b:0f:18:eb:c4:a2:40:f6:b4:de:c4:6e:e9:d0:
                    7b:0d:4e:30:94:77:f0:bb:a8:0b:c7:83:e8:5a:b4:
                    3d:a4:75:2e:90:0e:57:d7:6f:20:33:a9:fa:0b:c0:
                    5a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:71:39:66:FB:48:5E:00:91:46:03:87:4D:34:BD:09:55:5B:A9:9B
            X509v3 Authority Key Identifier:
                keyid:FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:1a:55:d0:4a:63:9d:1d:1c:6a:3c:1b:1d:d6:7d:c4:ec:4d:
         b8:5f:37:5e:c9:d5:1f:64:63:68:f5:aa:00:ec:ad:10:ab:c1:
         5a:0a:10:4a:4a:53:59:b8:8c:25:55:f9:79:99:d7:41:9e:0e:
         9e:50:a7:b1:58:1e:48:bb:36:9d:b9:cd:3a:c3:84:f0:db:46:
         e7:09:6c:b7:e5:a9:78:52:68:75:f1:71:82:e4:7a:8a:76:ae:
         f3:61:de:eb:91:4e:0e:b4:69:8b:aa:71:36:1a:0b:e9:92:2b:
         48:a8:ac:85:34:e9:7e:52:c1:9d:f5:ef:7f:45:8b:e9:69:8d:
         95:97:75:b0:dd:7c:cc:42:eb:dc:2f:2d:20:aa:9d:ef:41:cb:
         27:df:6f:fe:ce:0f:f7:37:3a:2b:9f:90:45:50:8f:a2:2d:0b:
         ab:27:33:4f:04:ee:2b:45:bf:13:be:92:50:5f:aa:d7:48:b2:
         c6:19:c2:77:0f:8e:4d:d9:9e:9c:a5:b4:be:ca:db:28:41:c8:
         e6:18:b6:11:ab:ae:6f:d5:34:0c:24:89:6f:ce:b9:c3:6e:5a:
         ad:c5:52:f6:ef:99:54:02:26:6b:e3:30:7b:4e:b4:26:23:8e:
         43:ba:3e:1e:48:7d:7a:3b:75:c7:58:4e:2e:fa:31:45:4f:0a:
         de:c2:ff:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:26 2025 by rpki-client