Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File:                     1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier:          lpbf7DDfDb3W89Ib7hnELNrGYo0pETPPNrR/YmdnTO0=
Subject key identifier:   56:E7:2E:DA:8F:95:44:DA:8C:D5:C6:71:28:1F:5F:65:4E:ED:D4:28
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer:       /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial:       0197DF2FB5EB3A84571A9D96F0BA8FA0960E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number:          0AB1
Signing time:             Sun 06 Jul 2025 10:02:15 +0000
Manifest this update:     Sun 06 Jul 2025 10:02:15 +0000
Manifest next update:     Mon 07 Jul 2025 10:02:15 +0000
Files and hashes:         1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: IrPg2YlygjW62UQBG1AyF6WNQZhElWlvIJDJRKeGX70=)
                          2: 8jLs6VGmOeqUeiHElaeR3LqYElI.roa (hash: Atd4yjEwjoj5JGYuPikoIPA1A5Gpt38GxeMnhualwSA=)
                          3: heyE1gtTjLmdNCX82aeJdr0FIAo.roa (hash: ZejOC6mn1mNz9pg99nxI8IIG+SDEeycsyMgYYFPq42A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Jul 2025 07:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:df:2f:b5:eb:3a:84:57:1a:9d:96:f0:ba:8f:a0:96:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
        Validity
            Not Before: Jul  6 10:02:15 2025 GMT
            Not After : Jul  7 10:02:15 2025 GMT
        Subject: CN=56e72eda8f9544da8cd5c671281f5f654eedd428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d9:cf:c7:31:b9:be:70:97:ac:9c:88:2e:d6:
                    75:d2:7a:83:59:fc:b1:70:e7:dc:24:83:59:46:f5:
                    52:fc:8b:16:27:44:37:eb:2f:bb:50:b6:3a:9c:59:
                    65:97:ef:d5:1e:60:b4:b4:ad:af:ed:75:b5:1b:04:
                    0a:11:ec:d3:5c:cb:c4:3f:38:4a:c2:c1:4d:66:bf:
                    78:d1:04:58:f6:ad:cf:02:74:eb:c4:1b:72:41:c6:
                    71:53:40:7d:f7:c3:4c:81:e8:6f:50:0c:40:12:22:
                    79:ee:42:5a:b9:e2:ee:d5:0f:fc:55:32:0b:0d:d6:
                    e5:94:32:c9:d1:c3:65:b5:33:51:16:42:f7:f5:30:
                    6c:a6:83:13:57:13:36:5a:46:6b:db:ed:aa:a0:f9:
                    1b:4c:09:67:5a:48:b3:8a:54:c2:c3:d6:f0:4a:9f:
                    6c:54:b9:1e:31:a7:98:bc:8a:11:db:cd:94:fb:17:
                    51:ca:f2:9c:1f:0a:f3:54:b2:c1:05:b8:d8:36:4e:
                    19:6e:8e:76:1c:39:e8:d0:d3:d5:c5:73:d3:67:5f:
                    71:19:93:81:ee:75:7d:c8:f3:98:9d:60:fc:73:79:
                    df:e9:c7:28:58:5c:68:46:f4:e2:1e:11:34:95:ca:
                    6d:1d:b5:df:0e:38:f2:aa:af:e8:f2:7c:8a:e0:74:
                    73:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E7:2E:DA:8F:95:44:DA:8C:D5:C6:71:28:1F:5F:65:4E:ED:D4:28
            X509v3 Authority Key Identifier:
                keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:97:5d:1c:ef:91:4f:af:e1:a8:96:04:9e:28:38:65:50:3b:
         fe:4f:cf:77:96:6c:fd:f7:66:82:36:01:66:74:c6:d3:ff:c5:
         a5:ce:b3:fb:b8:3a:ed:dd:5e:22:96:65:97:dd:a8:b8:57:47:
         af:33:54:97:0b:65:11:f7:1f:1e:4c:03:66:76:d9:30:8f:50:
         3a:b2:3f:c7:48:39:2e:5e:9a:76:b2:ed:5a:3c:65:ef:99:0e:
         b6:68:08:67:bc:08:6c:1c:d0:79:83:b9:04:2e:c7:e8:61:bf:
         6a:65:cd:0a:d9:74:74:66:aa:0e:dc:31:bf:14:b5:95:bb:00:
         a4:51:e5:29:ff:a9:ca:47:12:9f:fe:72:60:e4:7f:6b:d4:be:
         a7:f3:e2:8d:89:7c:9a:2f:6e:fe:99:e4:10:9d:9c:55:3e:db:
         08:c6:49:ac:61:44:5c:22:13:df:a7:f4:30:6f:43:b0:4f:0f:
         d7:0a:d9:c7:c7:e5:f0:f3:fb:5b:c3:56:e8:4d:19:b4:ff:1f:
         3f:be:82:1e:2f:3d:3c:9d:04:2a:fe:c2:4a:55:11:0c:c4:24:
         58:34:52:30:d8:72:39:ce:bc:44:2f:b7:23:45:2b:75:08:de:
         5e:95:ad:4b:57:5a:60:12:e9:d6:cd:98:fd:9a:cf:9c:2d:fa:
         85:67:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 16:34:26 2025 by rpki-client