Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
File:                     bs1crU0zBsT3LEKvwG5c0fuv46M.mft (raw, json)
Hash identifier:          Raou3HWT1iBLiJcXuiELJ1EmoOGrm/9NjvVhNXFlZVY=
Subject key identifier:   FB:3D:4D:0C:67:12:CD:AE:FA:A4:60:63:70:4A:87:76:4F:10:AF:10
Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
Certificate issuer:       /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Certificate serial:       0198451A5F0762D2DD8398FECF151DC06880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
Manifest number:          1603
Signing time:             Sat 26 Jul 2025 05:00:12 +0000
Manifest this update:     Sat 26 Jul 2025 05:00:12 +0000
Manifest next update:     Sun 27 Jul 2025 05:00:12 +0000
Files and hashes:         1: IVWLNAUIsWDuNfRfR17vH-v5XfI.roa (hash: OmbLmtXQG4MyTcSNnTCa+QZsFqNmOgdwU2G3Jors4PA=)
                          2: bs1crU0zBsT3LEKvwG5c0fuv46M.crl (hash: 4BU6E8sRxbVJQZTvfovk1AfXUhf6nGyPvwfXcJMpM0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 05:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:1a:5f:07:62:d2:dd:83:98:fe:cf:15:1d:c0:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
        Validity
            Not Before: Jul 26 05:00:12 2025 GMT
            Not After : Jul 27 05:00:12 2025 GMT
        Subject: CN=fb3d4d0c6712cdaefaa46063704a87764f10af10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:75:2f:52:e6:97:38:40:6d:9a:f1:b5:fc:
                    23:24:43:58:e1:1a:51:5f:02:39:af:81:42:d8:c0:
                    69:fc:d2:4f:f8:d0:50:c6:3d:a9:66:02:a7:8a:8b:
                    61:9c:70:78:db:a1:ae:58:8f:89:48:42:fa:0f:48:
                    6b:78:0e:8f:4f:c8:0f:33:58:f5:18:6d:e9:3c:c2:
                    5e:29:4d:73:b2:4a:ed:a1:0b:19:3b:07:b4:1b:56:
                    5f:1b:5a:3d:52:9e:e1:93:42:9c:60:a5:cb:53:3e:
                    21:f3:a9:b9:11:db:7d:26:52:8f:c5:a9:a2:5f:47:
                    7b:89:bb:1d:a6:07:48:44:d2:dd:b5:33:8f:b4:c2:
                    24:80:f4:e2:5f:b1:11:b0:9c:7e:89:73:8f:bd:c8:
                    6e:56:73:f2:d2:e4:c9:da:b5:0b:0d:43:b0:fa:00:
                    08:3b:f9:76:56:3d:14:e8:54:6f:26:98:b1:45:d3:
                    2e:a7:82:fd:e3:3b:97:8a:96:95:08:68:da:c0:be:
                    16:a0:8a:97:c5:45:1f:b3:cd:19:41:ce:15:51:85:
                    f9:32:2f:26:4f:c0:93:f4:f5:7c:96:d9:a0:f0:6f:
                    6e:35:06:a2:e1:3e:c0:e3:3c:f2:4f:dd:0b:e4:25:
                    09:08:e9:c7:27:60:c4:4b:cc:21:fd:f2:03:aa:cd:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3D:4D:0C:67:12:CD:AE:FA:A4:60:63:70:4A:87:76:4F:10:AF:10
            X509v3 Authority Key Identifier:
                keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:05:d9:9b:d3:10:22:a0:1e:e2:f9:ad:70:ae:18:b6:29:c6:
         06:e2:50:e9:d3:ff:18:d0:83:b1:9f:8e:d5:d6:f3:ca:de:9e:
         7f:d6:74:f2:02:27:e1:2a:56:da:5a:9d:5a:45:c7:aa:76:88:
         cd:b4:c5:ce:c3:95:51:dd:8b:92:47:69:12:fd:79:0d:4f:4a:
         8c:8a:75:2c:6b:b5:19:8a:1d:b4:79:9f:1d:9d:38:27:b6:59:
         3d:da:81:1a:4a:f2:ab:a8:ac:ee:51:f5:53:78:b5:90:9d:98:
         e5:05:04:cf:5b:13:44:0e:b7:35:8f:12:37:1e:25:b8:29:80:
         4e:32:3b:3f:92:26:c8:d8:54:9d:4e:a4:1a:c6:f5:7e:f9:67:
         54:aa:02:50:20:f2:22:25:55:90:73:10:15:03:6e:af:9d:d7:
         bc:58:f9:0d:7c:69:c2:bd:a2:6a:e4:f9:b7:1f:2a:4b:5f:6d:
         0a:43:63:08:6e:68:7c:93:89:03:7a:17:16:f5:4b:e3:c7:2b:
         b6:dc:ff:e9:f7:1f:98:70:79:12:9f:4d:df:d9:80:34:f4:c9:
         aa:a8:79:11:fa:9c:a9:81:78:23:7e:22:dd:51:0d:64:56:3f:
         75:a3:7f:14:44:cd:c5:c9:41:c0:43:69:56:f6:5f:b0:ca:0d:
         48:d9:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:01:41 2025 by rpki-client