Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
File:                     1-geuOnkY-TLqJMwVa0tum6VYG_o.mft (raw, json)
Hash identifier:          ZH/tD778khgkCOAIL/e4CBfSJyNQ4p93VzksKMAbLBM=
Subject key identifier:   B3:BA:B1:A3:DA:1F:C2:F1:20:AF:1A:14:05:DF:18:17:E8:95:60:F0
Authority key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
Certificate issuer:       /CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Certificate serial:       019846646387DBD3508F688F8B089A46B04B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
Manifest number:          030D
Signing time:             Sat 26 Jul 2025 11:00:40 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:40 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:40 +0000
Files and hashes:         1: 1-geuOnkY-TLqJMwVa0tum6VYG_o.crl (hash: ICoyr13nOKB/8F5bqcPtcEbaSpLat+GMBAjU90EL/Ak=)
                          2: rs3gWt450Dc5VAdX-LPh4FxzPfI.roa (hash: yHX556DQVgZDjr2xTPApsPlrmF99zYD+miBAgNn4a5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:63:87:db:d3:50:8f:68:8f:8b:08:9a:46:b0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
        Validity
            Not Before: Jul 26 11:00:40 2025 GMT
            Not After : Jul 27 11:00:40 2025 GMT
        Subject: CN=b3bab1a3da1fc2f120af1a1405df1817e89560f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:34:09:9f:16:24:44:d5:cc:4e:aa:17:58:8a:
                    dc:06:3c:35:45:fa:2b:fc:25:68:1f:1a:50:97:99:
                    9a:15:59:a6:e3:0f:dc:04:c4:af:14:e4:5e:d3:76:
                    a8:a9:75:95:53:4e:ca:12:82:28:0e:76:7e:04:b3:
                    d9:2e:c2:e7:fa:39:ab:19:fd:3a:a8:96:f8:3f:a9:
                    f3:78:0f:e7:0f:64:5d:0b:90:b4:e9:fa:aa:4c:2c:
                    67:c4:53:aa:43:92:a4:d6:f6:f6:69:22:1d:54:d0:
                    fa:50:b8:b1:8b:39:b5:ea:ec:7e:54:d0:a6:67:2a:
                    38:1b:d1:19:77:ae:f6:60:09:38:e5:d7:6c:d0:fb:
                    12:38:8d:6d:e4:bb:f2:80:d3:38:ef:bc:78:43:fc:
                    d5:4f:83:04:65:9a:92:8d:7c:89:f2:e3:ee:87:93:
                    61:72:2a:ae:4a:93:eb:a9:21:1d:3b:36:f2:f4:0b:
                    ab:d9:9b:6e:11:d2:08:10:b6:56:7d:5e:9f:b1:8e:
                    30:ca:6c:eb:8b:f9:57:ab:fd:37:c9:c1:6d:ab:f0:
                    df:81:0b:b0:2e:58:b9:b7:df:26:56:ab:f3:cb:fa:
                    82:36:9c:92:c2:37:d5:ff:a6:17:91:88:c9:b0:bc:
                    e1:10:d8:42:e3:a3:a8:88:1a:ed:46:60:ae:70:1d:
                    b7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BA:B1:A3:DA:1F:C2:F1:20:AF:1A:14:05:DF:18:17:E8:95:60:F0
            X509v3 Authority Key Identifier:
                keyid:FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e6:2a:68:fd:f3:8a:df:b2:c6:02:4e:64:7c:b6:c3:aa:ab:
         dc:fc:8a:62:61:9d:d9:fa:61:c4:29:c0:06:be:ff:cd:71:df:
         eb:90:90:5d:59:20:45:58:2e:34:4d:eb:93:53:2a:ad:5d:d7:
         09:e0:af:a3:78:67:46:44:4f:e9:93:a8:6e:ee:5e:94:e8:66:
         bc:6c:03:5a:68:e3:0e:e7:5f:87:38:78:53:80:98:40:b1:af:
         57:59:83:dc:a9:9e:67:9d:d6:a4:de:1a:47:5e:be:b7:19:ef:
         1a:8b:e8:7f:33:ba:81:5a:c1:44:f5:1c:4a:16:ba:a6:6c:6a:
         3e:38:a0:1c:ef:68:3a:95:4a:d8:a7:54:3a:11:88:f1:8f:55:
         89:7e:cf:c2:c6:0d:28:90:7d:87:30:88:e0:f6:e8:3f:18:69:
         27:36:ed:fd:dd:a4:39:31:04:42:7b:0e:52:fb:96:f8:c2:41:
         04:97:22:20:30:6b:fd:22:cf:77:d2:4a:53:07:75:0a:cd:34:
         85:87:f4:ac:b4:d4:e2:fc:78:30:84:60:f0:9d:79:8b:48:c5:
         04:b9:e8:47:e8:f8:57:6f:21:9d:1b:16:ef:a4:ce:42:92:36:
         4b:9a:1e:ad:60:8b:c6:1a:ca:4a:a4:a2:79:5a:8d:f8:52:11:
         c1:c3:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:29:52 2025 by rpki-client