Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File:                     1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier:          HTgWqVKdQiN/Xl2kQv1bbJGSwr2fczwvAKeGPPgrDZU=
Subject key identifier:   A4:52:42:45:CE:6C:EC:21:90:1A:27:B3:03:97:07:BF:20:10:2D:25
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer:       /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial:       01984A0A3CDFEF48459D2007C475F9681124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number:          018B
Signing time:             Sun 27 Jul 2025 04:00:41 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:41 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:41 +0000
Files and hashes:         1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: jR+DRsP40qpFc+MrajjdynB964vM96IkmxRxbGqB3Rg=)
                          2: Dr_PQO2BPHoa4Gl0AZtI905-d-M.roa (hash: +sFVK8H7AnsXd5rUe7kR0o92ssiFNiEpWCKNsSev/NE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:3c:df:ef:48:45:9d:20:07:c4:75:f9:68:11:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
        Validity
            Not Before: Jul 27 04:00:41 2025 GMT
            Not After : Jul 28 04:00:41 2025 GMT
        Subject: CN=a4524245ce6cec21901a27b3039707bf20102d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:79:d0:f7:69:6f:cb:9e:fd:00:38:95:10:
                    31:a4:f2:5b:92:da:3e:07:8e:0d:93:91:d1:63:3e:
                    e6:24:e5:84:68:5e:e6:cd:93:19:18:34:3c:be:82:
                    13:94:1d:13:fc:69:80:d2:2e:d2:77:e1:5b:dd:79:
                    37:cf:33:db:e4:8e:89:53:e1:22:51:f1:11:87:bf:
                    1d:27:18:10:dc:67:2f:62:ce:da:ea:34:4f:87:f5:
                    7d:6f:66:1f:ea:33:1d:47:98:f5:72:ad:96:82:0d:
                    65:5a:d7:c0:0c:86:29:d8:82:dd:ef:1f:e9:f8:97:
                    25:48:04:28:f9:56:3d:e1:23:1c:6b:7a:52:9d:b1:
                    a9:0d:a5:4f:24:00:f7:00:bd:8e:28:0e:9e:5d:33:
                    ac:44:59:73:59:4f:a6:6d:2a:6c:04:6a:99:e9:f5:
                    89:ef:5a:70:18:1e:91:27:60:4d:e8:5e:96:b6:08:
                    70:4c:5f:65:70:02:83:01:64:3a:5e:d0:70:a6:fd:
                    5b:a0:99:95:b8:e3:c0:f0:64:86:66:8e:5b:80:d2:
                    c2:28:e4:c7:cc:97:5c:05:fd:89:14:02:d6:ac:93:
                    fd:c9:a8:e4:bb:aa:5d:5b:28:e6:2b:42:9e:75:7d:
                    4f:84:b0:9c:47:b3:b8:4f:78:1d:93:00:bf:fa:5f:
                    83:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:52:42:45:CE:6C:EC:21:90:1A:27:B3:03:97:07:BF:20:10:2D:25
            X509v3 Authority Key Identifier:
                keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ec:d5:c1:59:22:8d:49:32:64:d8:66:07:7d:de:90:e0:02:
         6b:9f:c6:d2:49:df:ce:d2:6d:9e:a0:78:a8:6e:19:9e:95:69:
         46:b2:f7:fc:27:ee:eb:be:43:d5:86:5c:a6:d5:10:44:49:f8:
         76:cb:92:04:ac:d8:ea:ca:80:e8:29:e1:a0:67:72:5c:4f:88:
         bf:b6:f0:26:7e:2a:42:e0:4b:e1:12:a3:1b:cc:98:b3:15:88:
         a3:99:3e:df:21:24:02:94:5f:8e:71:77:1b:97:f0:4e:5d:79:
         cc:0b:6c:a9:19:fa:8f:07:31:84:26:a4:37:8e:66:8e:f8:d9:
         11:f3:04:54:8b:e0:bf:8f:22:2c:df:21:b3:cc:72:d7:23:c7:
         a5:a6:1b:16:d9:96:63:b8:fc:2c:c3:84:08:37:6a:b5:31:a7:
         6f:c3:98:51:4b:d8:46:40:7d:29:0d:ac:65:3d:94:57:20:b3:
         30:85:13:bc:d1:7e:0c:b8:5d:45:e6:71:ae:8e:5d:db:ae:b3:
         22:3c:6e:02:a5:eb:aa:2e:12:ea:28:08:ce:3a:04:1d:70:73:
         e9:32:4e:8f:8c:f2:19:31:25:5c:76:f3:6f:82:5a:8b:41:a1:
         b2:1b:1c:db:4c:bc:7d:39:8f:96:9b:f6:6e:2f:4b:3e:a2:ae:
         14:73:c0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:46 2025 by rpki-client