Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File:                     1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier:          uo9WJyKFG4kKO9TYUb03EGpK3uKF2mqLQ296f83fbII=
Subject key identifier:   48:19:3E:1F:7F:78:A7:D6:A2:1A:08:46:94:6A:B9:1D:D5:0D:5B:CF
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer:       /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial:       0198D5F1BDB93C19E19D6651352D13294ECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 08:00:46 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:46 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:46 +0000
Files and hashes:         1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: 5YAxMOG8r+zxvX6vgeWgCJvmudKBI/rSLglT1MmaTMQ=)
                          2: Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa (hash: c1sm3zXHf/J5zcMO21JKPte22JewQndWNsFvlD4ZQmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:bd:b9:3c:19:e1:9d:66:51:35:2d:13:29:4e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
        Validity
            Not Before: Aug 23 08:00:46 2025 GMT
            Not After : Aug 24 08:00:46 2025 GMT
        Subject: CN=48193e1f7f78a7d6a21a0846946ab91dd50d5bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:59:1b:04:d9:54:b6:b9:26:7b:94:c7:a7:
                    19:a1:68:2e:e3:a7:a3:8f:cf:b5:28:5b:55:d3:ce:
                    3c:98:59:70:92:5a:39:dc:60:1e:4a:7c:7d:d7:b7:
                    a2:2d:89:a3:9e:cf:4a:f8:39:a4:a2:14:5b:37:a2:
                    5b:85:59:39:61:a2:4c:61:a8:dc:c0:c9:aa:91:33:
                    53:13:e0:88:3c:00:aa:25:8a:8e:90:1b:ab:24:16:
                    db:ad:31:71:cc:05:7c:52:92:fb:46:e6:bf:8c:2a:
                    31:99:a1:ff:c1:67:30:50:b4:74:7a:00:60:06:f3:
                    37:54:d3:28:5f:d0:bb:9a:df:e1:a2:17:f0:b1:56:
                    4b:38:03:6a:15:10:c6:4e:a4:e3:0b:29:b9:34:99:
                    3d:39:e9:88:0e:4a:16:d3:25:79:5a:80:1c:fb:89:
                    b5:d8:e1:a4:77:19:3f:e6:ea:5b:b0:2e:10:8d:d3:
                    53:d8:28:05:b8:76:78:4c:e6:98:59:ce:70:dc:d9:
                    39:c4:b6:44:d3:49:bd:dc:ec:7b:ea:ee:d9:8f:c2:
                    88:ee:4b:dd:2e:fc:4e:aa:db:14:ee:1c:33:58:44:
                    06:72:44:de:7e:5d:1e:9d:d8:34:09:4b:bd:45:cc:
                    ee:26:78:3e:09:36:1b:90:e1:2f:d3:eb:34:68:a7:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:19:3E:1F:7F:78:A7:D6:A2:1A:08:46:94:6A:B9:1D:D5:0D:5B:CF
            X509v3 Authority Key Identifier:
                keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fc:26:ae:88:69:20:11:a9:74:d1:66:60:ae:0b:dc:d0:70:
         3b:5e:8a:c7:e4:fb:28:77:35:57:20:9e:f2:75:ae:60:97:76:
         86:ab:16:29:4e:0a:8a:41:31:e7:e7:c3:86:8d:10:16:6f:4f:
         69:0d:b1:bb:c9:a5:aa:76:1a:66:f0:68:85:11:21:b1:f8:69:
         ce:b4:af:29:11:02:27:be:58:29:fb:83:68:b3:8f:ef:d4:70:
         3e:51:14:b7:13:0c:59:ca:f1:f8:23:b7:6a:8c:5e:5b:09:8a:
         f7:4d:fe:5c:6a:e8:34:e4:72:2e:dd:1a:55:7e:ef:7a:ea:53:
         22:a4:d0:be:d4:0e:7d:a9:02:cc:0b:e9:74:13:03:02:cb:e4:
         9b:d1:22:90:b0:76:91:dc:d7:2b:da:bc:73:36:ce:68:e2:a7:
         54:42:39:8b:2c:f4:9c:93:11:bc:22:e6:78:40:45:d1:6e:44:
         06:80:43:f0:2b:df:28:e7:a1:f2:8c:d8:38:a9:b9:a7:81:9f:
         90:08:e2:ae:33:47:64:ca:35:ed:ca:ae:95:3e:c5:9e:c4:ff:
         3c:c2:5b:3a:20:f3:af:75:a7:5f:48:a1:6b:a2:c9:29:ca:f6:
         7b:b7:2c:ca:a6:e7:e0:81:23:14:c3:60:7d:a2:11:fc:1f:cd:
         d8:d1:03:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:26 2025 by rpki-client