Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File:                     1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier:          ffTYDhJFoq0bFyAV9cQ8u7FVLEewnw/cMBgRzFHU3rk=
Subject key identifier:   66:11:74:A8:E1:31:36:19:F2:F5:7B:56:1D:A9:57:2C:02:D5:76:B3
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer:       /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial:       0197B70EC93440BAF43EF9D13B549FF4FADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number:          1045
Signing time:             Sat 28 Jun 2025 15:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:28 +0000
Files and hashes:         1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: cC+T0N5iK0vQQa5HMYZyHoY1R90NB9QhLwp7dkODVag=)
                          2: 3wVT7ByFOgSRbNZYozrG_4k5Lf4.roa (hash: nWjMCvThnl/TirQoWGzb1aGz9gls9gsUGL9UH7UK99U=)
                          3: b4xGcgRXbZTm92PK-63-hJMR7i4.roa (hash: NbuD2qXzwa42L7iqCKP9Yf7x1Mko0nN5lZkpDNpT+YA=)
                          4: eBGWGs2DIykcACC-Vm8Am4_ZkLo.roa (hash: M61tw2NaptcB9SBNpEgNYdj/+3K2KnHR73k/O/VkAl4=)
                          5: qX47TfZ7U-VCDd8K_2PnZDbaW7U.roa (hash: AWzPY4ofax8Hh97c3nb596ilyxymid/EIQcHBQfpPr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:c9:34:40:ba:f4:3e:f9:d1:3b:54:9f:f4:fa:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
        Validity
            Not Before: Jun 28 15:01:28 2025 GMT
            Not After : Jun 29 15:01:28 2025 GMT
        Subject: CN=661174a8e1313619f2f57b561da9572c02d576b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fe:00:74:46:52:a8:c6:e0:64:65:16:e7:c1:
                    ba:18:63:12:76:68:cd:e5:61:93:80:a3:25:bb:b7:
                    15:34:9a:9d:1e:c9:1b:c6:00:ae:cd:8a:91:62:d0:
                    6c:3c:32:7e:31:3a:38:ae:59:a4:07:f4:da:52:b7:
                    b2:e4:23:fa:6c:a2:39:c8:4f:86:fc:1d:78:0d:5c:
                    1f:33:d9:ba:8f:cf:62:22:d1:e9:20:5e:d0:dd:e3:
                    3e:b2:1b:8b:a7:4a:59:24:6a:fb:af:32:97:c4:18:
                    a7:73:7d:4f:7f:f4:90:45:b6:38:02:e6:50:5a:09:
                    5a:14:0d:6e:1f:2e:be:34:85:8a:fa:3f:21:d8:e8:
                    5a:d4:e6:48:6e:2f:2d:69:08:0c:9f:9a:d8:b0:9e:
                    a2:ee:19:02:f6:8b:a0:1a:0c:5b:1d:e9:a9:61:e2:
                    ca:fc:2c:e9:2c:04:d1:40:84:fe:fa:b7:ad:a0:f5:
                    b6:7f:49:de:4c:c9:9d:56:91:7a:16:f1:1c:0b:f2:
                    97:4c:95:50:1f:4f:48:70:1c:e0:fb:73:8f:97:19:
                    c9:ca:a5:e9:54:ae:47:d0:bc:c2:23:4d:52:be:f8:
                    b9:8f:ad:72:0f:2b:16:67:bb:ea:33:a3:9e:03:91:
                    ca:b3:f4:7f:c9:f6:ec:ce:fd:14:b7:f3:2f:64:5b:
                    11:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:11:74:A8:E1:31:36:19:F2:F5:7B:56:1D:A9:57:2C:02:D5:76:B3
            X509v3 Authority Key Identifier:
                keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e1:2d:7a:13:f4:52:ec:85:cd:01:19:94:02:32:d7:ed:d6:
         58:9d:01:bb:fd:3b:d3:f3:b5:4a:c1:78:04:10:0b:03:c4:8b:
         a0:f6:f4:d7:91:ea:08:0b:68:13:9d:61:c4:0b:95:d5:37:42:
         62:83:25:33:db:66:a6:f7:21:da:44:87:7c:d0:b2:74:1c:d2:
         fa:f3:51:a3:54:3a:52:cf:a3:af:5a:e7:91:42:d6:ce:89:39:
         17:58:7b:8d:32:fb:51:a7:b4:f3:d2:c5:ab:4e:d2:f0:c9:bf:
         2f:29:92:b8:3a:2a:69:20:78:e5:b7:ea:ea:42:37:18:33:c0:
         ae:8b:9f:3d:40:99:ed:99:0d:6f:f8:dd:6c:df:35:70:66:63:
         44:fa:9b:ae:e5:f9:01:51:5e:dd:ff:c3:c1:fd:54:3d:f1:2d:
         5a:d4:85:c1:d2:4a:56:9a:bb:25:2f:55:dd:0e:0b:89:a7:11:
         5c:d9:b5:ef:a5:3e:77:de:3e:b1:b9:15:b6:f7:f5:70:50:b6:
         ee:8f:ba:ed:5e:b9:99:99:d7:23:c1:37:38:0c:eb:c6:71:fe:
         40:bf:ba:38:71:73:8a:60:62:2e:57:7d:dd:ff:de:05:bc:91:
         2f:d0:f1:a0:03:fb:68:42:32:48:b8:ed:49:b6:ae:ff:94:14:
         cf:d5:0b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:07 2025 by rpki-client