Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
File:                     1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft (raw, json)
Hash identifier:          oNolBoOBZCqjqJyhVgn0XV3EoU7Ft/sonawk9RsuWw8=
Subject key identifier:   B5:8D:0C:B5:4C:69:39:A1:1E:EA:72:F6:9B:5E:0E:97:1E:5B:35:50
Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF
Certificate issuer:       /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
Certificate serial:       01984B55033EE427F33B79920067980EC208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
Manifest number:          0DA1
Signing time:             Sun 27 Jul 2025 10:01:59 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:59 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:59 +0000
Files and hashes:         1: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl (hash: 2Mb8OUu83ljfNu3mAQKVpnaGPp+VvG9rft+BOwsjtWk=)
                          2: V3GGR6tZOX8NXj-Nj8u0fPOASnM.roa (hash: fnJsN5ItuitKZWqq5Moq534O7yJjjzxAogwkbaeTNUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:55:03:3e:e4:27:f3:3b:79:92:00:67:98:0e:c2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
        Validity
            Not Before: Jul 27 10:01:59 2025 GMT
            Not After : Jul 28 10:01:59 2025 GMT
        Subject: CN=b58d0cb54c6939a11eea72f69b5e0e971e5b3550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c6:9f:1c:f9:fb:78:17:a2:58:0a:68:5f:27:
                    cd:58:8c:75:e8:0b:b6:87:ce:9d:1b:f5:1b:27:69:
                    53:8d:d8:84:9f:2b:77:a2:22:d2:5b:d9:f4:44:76:
                    f9:56:33:2f:c6:1a:01:b7:2f:96:3d:aa:a4:84:af:
                    f6:81:22:7a:27:aa:3c:fe:1f:ae:2d:26:af:00:41:
                    49:26:cd:5a:6d:cc:12:f5:d2:2c:1b:87:b8:1f:4a:
                    a0:6e:06:dc:d5:f8:8b:32:13:af:72:38:c9:47:21:
                    32:53:67:c6:f7:22:bf:29:90:07:27:e1:b1:66:92:
                    95:e0:a8:a7:ee:be:fc:64:df:6f:8a:d1:cc:47:b7:
                    36:f9:c2:81:87:25:6a:37:fc:8d:40:a3:25:06:c5:
                    a0:c1:e6:7d:01:33:00:6d:c7:9b:b0:7b:83:20:98:
                    31:69:fc:c1:72:57:c6:a9:60:a5:2e:62:db:08:50:
                    c3:6b:84:c0:c3:1e:26:ac:76:e1:a2:53:c5:a7:ad:
                    8a:87:a5:4b:f5:ea:a5:e2:0f:9d:33:65:0e:9d:eb:
                    ce:43:85:d9:37:ae:8f:73:26:0d:eb:7b:df:f3:9f:
                    61:e7:97:34:7a:69:e0:a7:ab:6a:13:a5:b0:b7:e4:
                    c6:3d:a1:68:98:ee:08:40:3f:c2:71:30:2d:18:3d:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8D:0C:B5:4C:69:39:A1:1E:EA:72:F6:9B:5E:0E:97:1E:5B:35:50
            X509v3 Authority Key Identifier:
                keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b9:a2:ca:86:ba:9b:ee:53:4d:2c:2b:bc:71:23:96:b4:5c:
         9f:57:86:f5:9a:0c:62:33:f7:a1:10:c6:b5:dc:0c:03:bd:60:
         b0:8b:9f:21:32:97:70:5c:f3:09:d9:cf:0d:bc:b1:37:0c:29:
         3d:36:eb:0b:a8:62:50:4e:89:fb:37:bb:44:6d:44:e8:24:3b:
         ca:eb:69:20:09:6d:8f:17:93:bb:c8:c4:4c:8e:b3:f0:b4:f0:
         df:fd:e7:ab:20:c9:82:a9:4f:7a:43:7a:9e:06:4e:59:72:93:
         02:28:91:b5:27:b3:f3:ae:ce:79:f1:1b:1a:dd:03:1d:e9:49:
         ac:f0:20:b1:09:77:bd:57:3c:89:37:7c:d9:41:3c:98:92:74:
         39:ce:4f:0e:95:0e:5c:f9:e8:a5:05:fd:64:3e:f3:70:76:11:
         fb:c2:68:e9:0b:51:38:9d:5b:53:41:1b:a0:2f:c8:1d:2d:30:
         e4:48:35:20:27:2a:6f:9f:e9:07:af:85:9a:62:f8:60:e2:86:
         40:97:dd:61:3d:f8:0d:7e:69:e3:e3:ed:d7:f6:a7:9f:24:68:
         26:ce:40:ee:aa:4a:ae:26:4f:0d:be:87:5e:95:99:8b:b2:5b:
         94:50:51:c9:70:a1:b7:08:46:ca:97:05:56:ed:b7:6a:a3:ae:
         43:cd:05:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:52:55 2025 by rpki-client