Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
File:                     1BsIHA35lAorAgpOvoqXScv-rVU.mft (raw, json)
Hash identifier:          //jTpo56FugFy/H3rjK1P3+XDqS672MuuckcZD+bgJQ=
Subject key identifier:   4B:22:73:15:8B:82:04:DF:4E:6D:95:60:4F:B4:B6:64:8E:54:EE:A9
Authority key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Certificate issuer:       /CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Certificate serial:       0198D65FC21DF4B3175725F5534940A67F35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
Manifest number:          02E3
Signing time:             Sat 23 Aug 2025 10:00:56 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:56 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:56 +0000
Files and hashes:         1: 1BsIHA35lAorAgpOvoqXScv-rVU.crl (hash: vIrgJtcHIT29dHoONAIicq3JOkAsIDW2rHcfoIhT4PM=)
                          2: jj4Fs6tF4xq0DkAC9XMLg7s4mmw.roa (hash: sivrAn80+5m3Ncmw+RXEZVkYOB9TZa2z37JwsZzW78E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:c2:1d:f4:b3:17:57:25:f5:53:49:40:a6:7f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
        Validity
            Not Before: Aug 23 10:00:56 2025 GMT
            Not After : Aug 24 10:00:56 2025 GMT
        Subject: CN=4b2273158b8204df4e6d95604fb4b6648e54eea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f5:65:d0:92:f5:8c:b7:e4:6b:f1:5a:7a:42:
                    5c:6c:0f:77:46:93:dc:f7:1b:90:33:30:7e:42:2d:
                    50:00:3f:e5:cf:9e:32:10:ac:83:8d:fc:3d:89:13:
                    19:7a:cb:ee:f9:c5:27:f6:10:3b:41:a1:04:c4:bf:
                    a4:ab:72:7d:78:da:75:fa:a5:ba:88:ff:53:ca:28:
                    50:e9:b7:12:b7:dc:fb:06:b2:f0:a9:63:55:dc:80:
                    29:fb:4d:ff:79:2a:07:c3:35:cf:7d:f5:05:e6:23:
                    ba:05:32:14:52:ec:37:d2:64:55:81:4f:8a:ea:04:
                    95:d4:20:90:d2:9b:42:66:69:24:e9:b5:e4:91:70:
                    ad:ec:d0:ad:e7:d4:fd:bb:e4:ab:2a:ba:be:a4:14:
                    45:92:5e:00:58:0d:22:a7:c1:c6:65:ff:d2:b3:b0:
                    da:10:3f:a9:87:4b:fe:57:15:95:f6:1b:70:b6:f3:
                    2d:ab:4f:47:d5:f6:79:ad:f8:53:6b:7a:fc:85:e3:
                    79:cb:18:28:54:d8:5e:97:2d:e9:d6:9d:32:ea:3d:
                    e9:8f:ef:ae:f3:a3:3b:ec:b1:1a:1d:1a:50:91:ab:
                    66:71:67:6f:69:34:f3:02:fe:57:48:f8:73:4e:76:
                    a3:f7:75:a7:18:b7:b0:48:be:44:30:a7:1f:e6:fc:
                    e8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:22:73:15:8B:82:04:DF:4E:6D:95:60:4F:B4:B6:64:8E:54:EE:A9
            X509v3 Authority Key Identifier:
                keyid:D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:74:7f:41:f9:21:aa:fe:2c:90:27:78:22:07:22:89:16:22:
         dc:2b:55:0c:23:15:3e:2d:25:a1:67:26:cb:8c:18:cf:da:96:
         c6:02:ed:51:8b:f9:82:1a:f9:68:99:26:19:0b:96:4e:03:a1:
         94:e2:19:ef:86:b8:6f:55:c2:11:8b:bf:1e:03:7c:9c:05:07:
         b1:d3:bd:1a:71:bc:87:21:62:45:a8:c9:9d:d6:ff:3e:fc:46:
         ff:8a:a8:d8:c6:14:6b:3c:e0:05:78:fc:28:36:98:75:47:ee:
         93:9c:ee:86:3b:c8:15:a0:63:db:01:be:db:0d:6b:92:8d:57:
         92:ab:88:cb:9d:da:02:21:b7:0b:87:51:3f:9e:f4:a6:5a:4b:
         74:db:8f:2e:f5:01:69:ab:dd:49:97:69:a3:4e:9e:55:eb:fc:
         77:c1:b1:2d:1a:6d:92:3d:c4:02:33:7f:88:53:d3:09:f6:fc:
         10:ac:43:5b:5e:25:18:d8:f3:4a:80:fd:3b:dc:2f:55:50:d1:
         30:dd:d8:52:2e:10:98:39:7e:ff:63:ad:e1:ca:0e:4a:ee:39:
         85:14:4e:5a:7c:f3:1a:b2:05:ae:e2:86:a3:48:12:e0:a1:87:
         81:b9:a1:3e:f5:ce:a6:f6:d5:a1:e9:e9:4b:99:a6:79:f6:2c:
         8f:4d:c7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:16 2025 by rpki-client