Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
File:                     1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json)
Hash identifier:          qcZk8zaXZZiiYNdSy2RHKuIZS5vM90QhSEqXeOhDvGo=
Subject key identifier:   DC:4A:DA:75:E6:79:0C:C3:3A:35:8B:73:3E:85:14:D9:AF:FF:EB:02
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Certificate issuer:       /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial:       019849D31BFF7DDCFEB55BEEFD59415C33CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
Manifest number:          1600
Signing time:             Sun 27 Jul 2025 03:00:28 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:28 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:28 +0000
Files and hashes:         1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: D2vTo4PY4yNgmGY5BMTrIowiVaxRn39zjtnQetVRaM4=)
                          2: G_1BjHa-Ii2Y9oecPQ2LQCQwR58.roa (hash: 8hKbU4VqspkNDKDSQPFelJhuWZ21X39DPqFIjGUgHFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:1b:ff:7d:dc:fe:b5:5b:ee:fd:59:41:5c:33:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
        Validity
            Not Before: Jul 27 03:00:28 2025 GMT
            Not After : Jul 28 03:00:28 2025 GMT
        Subject: CN=dc4ada75e6790cc33a358b733e8514d9afffeb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:6a:a9:fc:54:20:ad:e4:de:ec:ed:a3:8b:
                    00:34:74:4e:ce:ab:51:8e:9c:60:17:bf:53:1a:6d:
                    59:d4:0a:93:6a:51:3f:72:34:b7:5b:0d:fd:d2:cb:
                    d2:62:e1:b2:a5:57:1e:27:c2:84:50:fa:ed:e2:9c:
                    be:cc:a3:d5:ca:cb:57:7c:b1:6a:c9:d2:39:c6:b0:
                    6f:5b:9c:f6:ab:91:2a:58:72:50:7a:ec:4e:38:6a:
                    e9:e8:38:ba:dc:70:0e:7b:7f:6e:5e:c9:ab:16:e1:
                    18:b0:73:49:f7:83:80:cd:a3:08:8f:8f:d7:80:41:
                    3f:99:12:2d:d3:92:72:4f:32:3f:8f:24:ed:1e:7e:
                    85:00:f8:51:7f:14:77:df:59:5d:2a:64:a1:77:a5:
                    6f:41:cc:77:ab:44:e4:5e:c4:4e:45:77:09:59:de:
                    db:27:95:c1:35:a6:27:3e:06:4f:fd:4f:01:40:d8:
                    c6:eb:cd:5a:ef:cd:23:8f:22:62:ca:50:53:01:66:
                    1f:56:f8:20:b1:a0:ff:93:96:ac:81:29:dd:31:b3:
                    5e:6a:a1:6c:80:6d:28:41:0f:d6:57:d1:af:f5:06:
                    7c:33:a9:b0:95:e9:6a:17:47:c8:92:40:63:53:a9:
                    1c:0c:9c:bd:5c:af:91:19:36:42:21:77:25:6f:55:
                    97:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4A:DA:75:E6:79:0C:C3:3A:35:8B:73:3E:85:14:D9:AF:FF:EB:02
            X509v3 Authority Key Identifier:
                keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e4:e4:29:d1:8a:d0:0b:88:bf:71:93:30:c9:7e:a9:10:03:
         f5:6a:4f:61:b6:a3:92:0b:31:d1:9f:0d:87:c6:e2:77:21:af:
         75:a1:f4:b4:8b:aa:71:08:44:5a:2c:2b:5f:90:88:70:64:c0:
         98:d4:26:80:af:b6:fc:31:1e:01:ef:a6:b4:da:f3:e6:f8:b9:
         90:29:96:d1:db:15:b5:db:4c:7b:66:d1:d1:df:00:c8:e6:39:
         b4:46:ca:91:d3:ab:c6:19:99:78:66:ba:5e:1e:b8:7a:aa:90:
         36:59:21:df:19:f7:2d:01:91:b3:73:34:aa:98:73:f2:91:6c:
         84:2d:60:e2:df:e6:0e:5e:2a:30:b0:00:7a:fd:a3:02:03:b2:
         e2:e0:14:30:58:6e:ca:6b:0b:50:e1:a2:98:11:c4:e5:eb:a1:
         15:dd:cc:88:a2:eb:c2:72:a7:8a:0e:04:bf:3d:c0:28:7e:71:
         bb:2b:03:d3:c4:d4:5e:a7:9e:91:c5:2d:8d:2e:8e:49:cd:f4:
         4d:0f:53:25:6e:36:f8:04:87:6c:61:44:04:9f:e1:d8:94:80:
         b0:e6:20:d9:cf:1c:90:32:48:71:62:43:d9:f3:67:ed:91:cc:
         69:10:7c:0e:2b:ba:6b:bf:0b:1f:ce:af:7f:f3:83:21:b9:e3:
         37:0b:e2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:05:55 2025 by rpki-client