Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File:                     AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier:          cW0Rx4RNlZ4yE0RS1Ez48fy6OgmvjFJe4v/UVtxZJMA=
Subject key identifier:   1E:F4:9E:C2:36:CE:E3:E2:41:7C:3A:ED:C3:DD:EF:40:98:B9:3E:58
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer:       /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial:       0198D516233E212A3C1B63EAC2C7ABF840D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number:          154F
Signing time:             Sat 23 Aug 2025 04:00:54 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:54 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:54 +0000
Files and hashes:         1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: /Y4w7nOAVxNMyzI3zhkeGazhZ3oR+fvmlrL202+If70=)
                          2: kSz4LlQ62tJYPQQ8qxacl2uxsCY.roa (hash: 8GdPcvKpfPL7jxJZaxJa9Y6MJqoF7wYY1b8gzsfXwWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:23:3e:21:2a:3c:1b:63:ea:c2:c7:ab:f8:40:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
        Validity
            Not Before: Aug 23 04:00:54 2025 GMT
            Not After : Aug 24 04:00:54 2025 GMT
        Subject: CN=1ef49ec236cee3e2417c3aedc3ddef4098b93e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a6:7d:96:4f:94:cf:97:9c:e2:30:6f:85:d7:
                    41:6f:50:65:84:9f:19:b4:54:9e:22:d3:06:c7:1f:
                    0c:9d:6d:bb:f2:74:38:a9:cf:b8:4c:d7:4d:bd:c7:
                    de:be:cc:83:35:8a:01:ff:6f:f7:48:d4:11:75:40:
                    8a:4c:77:ef:40:c3:27:ab:1b:3a:77:94:69:8b:f4:
                    64:97:85:45:5b:9e:3b:21:ef:d7:b8:f2:c5:4b:64:
                    2d:1a:f1:93:22:47:32:a5:54:75:2c:b9:8a:b0:28:
                    29:9c:ce:c2:af:c3:f3:ed:5a:83:a5:bf:cf:c6:f3:
                    6e:24:69:13:ee:65:e4:6d:ae:e3:58:f3:ec:cd:a4:
                    fe:cc:12:83:04:d0:a3:71:45:93:ac:64:18:3c:9f:
                    18:07:40:5a:b5:07:76:78:0c:9d:f7:47:d8:b5:72:
                    2a:d9:89:c4:40:7f:56:de:fb:6c:d4:56:96:49:59:
                    eb:95:b1:12:82:0d:53:00:b1:7e:25:c9:58:47:82:
                    d0:89:42:2e:ca:a2:56:ad:85:17:bd:a1:46:36:7b:
                    59:b6:be:93:2e:3a:d3:18:7f:fc:48:4d:dc:9a:dc:
                    6b:9e:e4:5b:ec:18:b0:b0:cb:4f:3d:10:7a:b0:00:
                    e6:b3:3a:f2:2b:90:14:4a:f2:4f:01:0d:ad:50:eb:
                    82:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F4:9E:C2:36:CE:E3:E2:41:7C:3A:ED:C3:DD:EF:40:98:B9:3E:58
            X509v3 Authority Key Identifier:
                keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ac:1f:43:e2:64:96:8b:c1:e4:bb:c2:25:34:8e:a5:a0:46:
         10:b0:40:a9:b1:f0:3c:bb:45:96:e6:54:dd:5d:6b:83:10:8d:
         b0:2c:44:e1:c5:88:b5:49:02:3f:6f:62:b5:12:8d:77:14:65:
         88:e5:29:e0:d1:cd:db:84:f3:bb:a1:76:1a:63:55:a6:42:23:
         2c:42:4e:0a:7c:c1:ff:ad:56:37:56:05:e7:7d:ee:73:ff:6c:
         e7:34:8b:f3:6d:e7:7e:c6:3c:c7:79:68:fd:9e:84:fb:5d:51:
         07:3b:9a:f0:87:63:c2:38:d8:d2:e9:c9:00:68:27:fc:16:a0:
         d7:61:ed:0a:6b:9d:83:85:30:13:86:f9:10:c8:ef:cc:de:d5:
         c5:b0:a4:e0:e4:44:17:ab:e8:bb:9b:dc:9c:d9:29:55:cc:b8:
         02:61:3b:d3:5d:f3:85:96:53:3f:f7:94:84:f8:58:85:2e:4d:
         75:d8:23:6c:8a:89:7d:72:1a:f2:51:3e:7d:36:81:48:26:6e:
         5d:c9:bf:c1:f4:b7:b9:42:e9:62:ea:d1:a7:52:c0:c0:6e:d7:
         f7:f6:46:6d:74:92:b6:51:dc:ea:43:cb:b9:69:d8:f4:62:22:
         bb:66:8c:fa:6b:2d:10:f1:af:0f:d2:59:a0:20:a9:dd:16:58:
         d4:7e:76:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:51 2025 by rpki-client