Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
File:                     P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json)
Hash identifier:          b6m4JTwKNbncQtDiiTLuRoBvMgBnua7zn+eNLMpn0vk=
Subject key identifier:   CA:DA:1A:AB:02:F6:CA:27:1D:9A:1B:76:3B:64:65:58:E6:E0:F6:BE
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Certificate issuer:       /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial:       0198545689445F016CE21612E11677E1CE78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
Manifest number:          1519
Signing time:             Tue 29 Jul 2025 04:00:13 +0000
Manifest this update:     Tue 29 Jul 2025 04:00:13 +0000
Manifest next update:     Wed 30 Jul 2025 04:00:13 +0000
Files and hashes:         1: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: Qb0eWf0lmeYqcVQN73uerVoR1Je/8mDy40US4/rpXGA=)
                          2: w5HnLtF4Me5n7OHUmGug2mAnL6U.roa (hash: AsJuclUazy6myQDlUyLOaCVJ9azdwtM7AhIo+Ahv/h8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:56:89:44:5f:01:6c:e2:16:12:e1:16:77:e1:ce:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
        Validity
            Not Before: Jul 29 04:00:13 2025 GMT
            Not After : Jul 30 04:00:13 2025 GMT
        Subject: CN=cada1aab02f6ca271d9a1b763b646558e6e0f6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:21:0a:d4:46:66:3e:ec:ec:3f:29:cc:3f:
                    13:e5:d5:aa:09:c7:96:61:9a:b5:2f:3a:66:05:c6:
                    3b:c9:e9:d2:24:a2:d2:f9:99:3e:ad:39:82:17:25:
                    af:63:2e:fc:77:29:99:21:e2:57:fa:2f:94:b5:22:
                    69:2f:67:e3:7e:4b:90:93:3e:33:f2:b5:b3:80:d8:
                    0a:2b:41:d2:3a:5b:24:c4:7c:c3:96:4e:50:96:62:
                    10:48:89:52:50:84:07:14:1d:d4:d4:4b:06:d3:c6:
                    ca:11:ed:79:e2:2d:5b:c3:e8:9e:b8:c2:b4:61:30:
                    41:1f:9c:e0:5e:e7:95:a4:4a:01:b7:f9:12:e9:ff:
                    52:4d:3e:7f:fe:80:48:b6:f9:86:18:97:6e:12:d5:
                    da:00:2a:7a:20:e3:3d:83:8c:19:1a:95:f0:22:87:
                    6f:0a:01:0f:be:3f:ba:51:ba:ed:57:bc:cf:d3:da:
                    67:ae:8a:07:2a:87:a6:56:46:93:bd:31:5d:32:0d:
                    9d:94:c9:9e:cf:0c:40:cf:15:8e:20:12:68:df:44:
                    fb:bf:d8:de:0d:d5:d7:2c:5d:e6:24:b6:2d:73:1c:
                    ff:37:1b:7f:08:87:7a:32:8c:cd:2c:18:53:61:2a:
                    69:4e:1f:84:73:f8:c5:e5:38:9c:0b:80:fb:cd:f3:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DA:1A:AB:02:F6:CA:27:1D:9A:1B:76:3B:64:65:58:E6:E0:F6:BE
            X509v3 Authority Key Identifier:
                keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:12:a2:04:e6:ed:ba:32:29:77:55:20:8f:ec:a8:cd:bc:f9:
         d7:af:ce:f1:32:19:2b:e0:99:d9:e8:83:af:7e:35:59:84:81:
         a4:5f:62:78:12:56:70:68:5f:85:bd:ec:d0:12:33:a5:6d:0b:
         03:88:23:ba:86:cc:c5:29:ed:48:0c:e3:d4:7a:7e:8b:73:b5:
         b9:34:e9:e3:2d:5e:1e:f0:d9:64:26:09:4d:b8:66:a2:7c:74:
         4a:89:3a:7c:0c:18:1d:88:fc:49:d7:43:10:88:2a:9f:51:95:
         3c:80:0b:c9:e9:dd:c2:a0:ae:96:1b:b7:7c:34:6c:cf:d6:a0:
         69:e1:c5:d4:eb:52:be:a4:be:49:5d:bb:47:43:61:63:e0:82:
         30:b3:8c:b5:4b:3e:7b:71:ac:e9:e0:15:13:51:20:48:a2:b0:
         cf:38:a9:f8:3f:fb:ab:ea:f4:72:ca:d2:42:a2:0f:b0:6d:10:
         ba:d2:7e:fd:ea:13:fc:3c:0f:ff:f3:bf:7f:eb:9a:c4:31:31:
         1a:a7:77:44:39:34:6b:c6:ab:68:c6:ca:21:0b:fa:52:a1:64:
         88:74:4f:52:d4:30:3e:29:3b:bd:ac:2e:eb:5d:dc:57:60:44:
         15:e3:f1:f6:b1:51:ea:bc:d7:8c:2f:92:30:70:34:b2:90:75:
         38:df:6e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:30:31 2025 by rpki-client