Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
File:                     1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft (raw, json)
Hash identifier:          YOz2aJ2/HVKENmf/2ok6wVCks0tMkJ1SefcT3S8T0fU=
Subject key identifier:   B7:76:9C:F0:58:D7:9F:9E:D3:90:BD:F4:66:33:4E:47:99:F9:3A:87
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Certificate issuer:       /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial:       01984C9CE1E51D91C6394C73B7B8723C58E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
Manifest number:          139A
Signing time:             Sun 27 Jul 2025 16:00:06 +0000
Manifest this update:     Sun 27 Jul 2025 16:00:06 +0000
Manifest next update:     Mon 28 Jul 2025 16:00:06 +0000
Files and hashes:         1: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl (hash: XcU3jFpmbYBr5qzfumNx4fuNrO9bo5itqG1KsZy1sTc=)
                          2: xIoC-WGecmJt_bZ5x_Wrj2HyW44.roa (hash: LepzO7LDnuKCKfB445emcRk0FeJMq3z/X+qXQkTIak8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4c:9c:e1:e5:1d:91:c6:39:4c:73:b7:b8:72:3c:58:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
        Validity
            Not Before: Jul 27 16:00:06 2025 GMT
            Not After : Jul 28 16:00:06 2025 GMT
        Subject: CN=b7769cf058d79f9ed390bdf466334e4799f93a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:41:07:2b:c6:62:38:9a:27:ba:98:a7:e6:
                    0e:a3:ba:cf:79:ab:ab:9a:5b:19:98:6a:62:b7:ba:
                    e2:56:a1:11:49:35:a4:92:a9:e3:9d:b8:f8:d4:df:
                    8f:50:f7:e8:69:35:38:d3:f5:88:9c:97:ab:35:37:
                    fa:02:6e:85:f6:cc:d0:33:7f:4b:8e:8d:87:da:6c:
                    75:ab:ee:17:5d:3c:b3:fc:a3:b7:49:76:38:d5:cc:
                    28:10:e6:93:ef:75:15:d1:59:67:5a:d1:18:f0:4c:
                    36:d0:db:bf:e8:06:9a:f0:9e:18:d4:59:eb:a1:2b:
                    9b:be:06:f9:ea:0e:09:75:1c:75:12:bc:49:d5:14:
                    e0:02:15:4c:5d:c7:f5:61:fd:94:63:91:29:5c:0a:
                    de:33:61:7f:16:df:d2:69:29:c9:02:59:ef:8c:38:
                    15:08:84:52:fd:6a:a7:96:6e:64:42:94:81:63:1e:
                    7e:30:21:03:76:c1:3a:b9:fc:c9:b9:1f:3f:ae:5e:
                    a2:21:dc:f3:c3:8f:d1:f2:bd:da:a8:2c:dc:04:c9:
                    27:15:e2:64:44:3f:a1:f9:4a:e9:33:53:c6:e8:03:
                    4a:ad:e1:15:81:58:f7:be:37:50:53:d9:00:03:0d:
                    69:57:c1:44:3f:a7:13:a9:d4:31:70:14:86:79:c6:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:76:9C:F0:58:D7:9F:9E:D3:90:BD:F4:66:33:4E:47:99:F9:3A:87
            X509v3 Authority Key Identifier:
                keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:9f:34:c6:b3:96:c6:7a:18:ab:e1:96:7d:33:a2:f4:9d:75:
         27:ba:87:bf:5f:81:48:e6:cf:46:68:23:a5:89:e8:54:1b:73:
         3d:cd:0d:90:dd:cf:d0:55:39:b4:2d:2e:7d:30:74:23:da:c9:
         1f:44:95:3c:ad:7a:85:65:db:6a:29:e6:dd:af:42:62:7a:6a:
         66:c4:c5:b3:79:1a:bc:b8:00:c8:03:17:6b:e6:9d:ce:ad:a3:
         cc:3a:e1:51:58:ca:8e:21:1d:ff:9e:e8:36:b9:c3:5c:48:ff:
         df:5d:06:a0:44:bb:9b:1c:f2:3d:73:9e:93:4c:17:ae:98:dc:
         bc:79:f0:5c:90:28:34:33:bd:bf:5b:0a:c6:7e:24:02:45:1a:
         4d:9f:a1:bb:5b:db:97:4b:a0:69:45:8d:06:49:46:b4:32:f4:
         ce:2a:bb:6b:a5:09:0f:47:e4:76:af:de:c6:b0:b4:17:a3:52:
         77:fc:64:ab:4e:9e:82:1b:ab:31:61:2f:53:ac:74:be:69:b5:
         50:b1:2a:21:00:d7:f0:f5:89:8b:6a:7b:62:e9:59:e0:14:b7:
         6b:8e:c5:a6:8a:49:dd:ef:aa:0d:23:de:3a:db:75:83:2b:2d:
         70:fd:97:6a:79:38:65:55:f8:6f:90:db:94:3a:70:e6:2e:ee:
         42:44:fa:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 22:18:18 2025 by rpki-client