Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File:                     1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier:          S0gO2nCvfX9ivzKP1EZelPqpjQXPM6HGZnDSLpcUpF0=
Subject key identifier:   7D:72:28:EB:A8:0F:CB:A2:1D:DA:8A:C4:D1:84:CA:1C:C0:EB:34:76
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer:       /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial:       019847AD90A2A1A292B57872BCB800433E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number:          0771
Signing time:             Sat 26 Jul 2025 17:00:13 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:13 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:13 +0000
Files and hashes:         1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: pTWSv40L2dU3t6QtUTXBKCF01jvLUIKHPUMMIEXAl/0=)
                          2: UrDlMe0qpvsS_4c6z9IjME9U_ys.roa (hash: /PhhJk4agPsHh1xc3D32x5yCUJu5RdhwQAjI1byTCj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:90:a2:a1:a2:92:b5:78:72:bc:b8:00:43:3e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
        Validity
            Not Before: Jul 26 17:00:13 2025 GMT
            Not After : Jul 27 17:00:13 2025 GMT
        Subject: CN=7d7228eba80fcba21dda8ac4d184ca1cc0eb3476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:de:7d:1e:42:00:2f:f6:ac:59:72:66:d9:
                    6d:3a:05:e2:c9:b0:35:04:f7:a8:f6:35:d8:6c:61:
                    d3:fd:b0:b7:44:60:d1:7b:7f:74:a8:a5:45:70:5c:
                    7d:01:8d:d7:0f:ec:b3:ed:70:5d:a1:ad:a2:e6:27:
                    17:20:48:88:cf:f1:2b:91:87:45:60:e0:18:b2:bb:
                    92:95:fb:01:a8:dc:2e:40:61:93:88:e1:79:6e:86:
                    3a:77:31:01:ca:89:47:f0:cd:50:12:54:fb:7f:36:
                    56:e4:74:13:68:79:21:81:be:eb:53:4c:ad:bd:94:
                    55:56:2f:c1:15:d8:e6:f5:14:3a:0a:ae:61:36:72:
                    07:64:bb:59:82:61:24:83:42:b0:cf:39:61:56:1d:
                    65:fd:66:09:18:f0:f8:5b:f6:e1:62:54:ed:0b:a8:
                    91:13:f4:c0:1f:fc:cc:a4:be:77:a0:9f:11:44:38:
                    1e:a2:8b:2d:8f:f8:9d:08:e7:6d:c4:7b:f6:99:b0:
                    17:03:7b:c0:2d:3b:13:7e:95:09:bf:b6:33:60:ec:
                    a3:1c:6f:97:2f:7b:4c:8e:05:1c:27:e0:3a:0f:b9:
                    77:dc:d4:8a:6e:f1:e8:c4:33:c3:42:56:a6:2d:02:
                    57:b0:00:c0:c1:5b:c6:85:39:a2:73:27:e6:ec:32:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:72:28:EB:A8:0F:CB:A2:1D:DA:8A:C4:D1:84:CA:1C:C0:EB:34:76
            X509v3 Authority Key Identifier:
                keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d3:7a:64:9c:39:9b:c7:0c:67:5b:bb:2b:f0:ed:a0:cf:c7:
         82:d0:c2:f9:a3:d4:f4:05:31:f4:8c:34:26:cd:7f:79:ee:ed:
         56:f8:fb:d1:8b:48:b1:06:09:30:4f:4c:36:93:4f:e3:51:61:
         4a:19:c7:24:72:2b:d8:fc:07:47:23:a4:c3:a6:60:86:be:9d:
         27:a5:49:20:3d:78:27:7c:76:30:72:6d:7a:9a:a2:49:16:57:
         0e:42:c4:ea:11:ba:b0:c8:26:ac:cb:6c:3f:48:fc:c0:0f:e2:
         10:a2:a5:67:15:a6:17:ac:ea:52:13:bb:ba:8c:2d:c6:1a:57:
         40:9f:e7:0d:c8:d3:58:aa:ab:cd:4d:fb:fb:78:5c:12:5a:ea:
         85:75:91:47:78:2c:c6:63:a2:58:9f:a0:70:8c:85:bb:63:6e:
         0d:bf:42:d3:a4:05:34:fc:70:47:e5:e9:33:a4:b1:b8:72:b9:
         a4:af:51:cc:57:d7:b6:e9:61:bc:82:00:87:83:39:a3:9f:e4:
         31:e3:6c:f3:e2:c2:de:77:b4:92:05:9c:65:07:d6:05:1b:97:
         d4:49:51:2c:53:c4:31:1b:42:05:96:6d:eb:4c:f6:8e:e2:89:
         fa:9a:50:8d:ed:bc:54:dd:f9:05:df:a1:0b:7c:f8:8b:ad:bb:
         05:b3:77:9e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhHrZCioaKStXhyvLgAQz4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi
ZTFhYjUwHhcNMjUwNzI2MTcwMDEzWhcNMjUwNzI3MTcwMDEzWjAzMTEwLwYDVQQD
Eyg3ZDcyMjhlYmE4MGZjYmEyMWRkYThhYzRkMTg0Y2ExY2MwZWIzNDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNTefR5CAC/2rFlyZtltOgXiybA1
BPeo9jXYbGHT/bC3RGDRe390qKVFcFx9AY3XD+yz7XBdoa2i5icXIEiIz/ErkYdF
YOAYsruSlfsBqNwuQGGTiOF5boY6dzEByolH8M1QElT7fzZW5HQTaHkhgb7rU0yt
vZRVVi/BFdjm9RQ6Cq5hNnIHZLtZgmEkg0KwzzlhVh1l/WYJGPD4W/bhYlTtC6iR
E/TAH/zMpL53oJ8RRDgeoostj/idCOdtxHv2mbAXA3vALTsTfpUJv7YzYOyjHG+X
L3tMjgUcJ+A6D7l33NSKbvHoxDPDQlamLQJXsADAwVvGhTmicyfm7DKwrQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFH1yKOuoD8uiHdqKxNGEyhzA6zR2MB8GA1UdIwQY
MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4
LWNlYzE2MzMzZDdmMi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRkL2M0N2NlMC1lMjkxLTQyZmUtYjNmOC1jZWMxNjMzM2Q3
ZjIvMS8xLXVTUl95aVdFbnpvanN1a1RPeDB4ai0tR3JVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdN6
ZJw5m8cMZ1u7K/DtoM/HgtDC+aPU9AUx9Iw0Js1/ee7tVvj70YtIsQYJME9MNpNP
41FhShnHJHIr2PwHRyOkw6Zghr6dJ6VJID14J3x2MHJtepqiSRZXDkLE6hG6sMgm
rMtsP0j8wA/iEKKlZxWmF6zqUhO7uowtxhpXQJ/nDcjTWKqrzU37+3hcElrqhXWR
R3gsxmOiWJ+gcIyFu2NuDb9C06QFNPxwR+XpM6SxuHK5pK9RzFfXtulhvIIAh4M5
o5/kMeNs8+LC3ne0kgWcZQfWBRuX1ElRLFPEMRtCBZZt60z2juKJ+ppQje28VN35
Bd+hC3z4i627BbN3ng==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:23:33 2025 by rpki-client