Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File:                     1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier:          zjBNRwUKx8T37Hpw2xojR3uXlBcDVM56Ax2YzHQnoIo=
Subject key identifier:   C6:E9:1C:F0:6C:A5:59:86:C9:94:52:E0:68:6E:0D:3E:28:0D:40:45
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer:       /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial:       01984AAF142760AA7E9C46B754110098601F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number:          0E93
Signing time:             Sun 27 Jul 2025 07:00:44 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:44 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:44 +0000
Files and hashes:         1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: w8uEHvF9Y/QKEd3tWBpLPGBAsSkYcTay5zcaoFfZrj8=)
                          2: cOp1cqfBELUzDJ5OCVCcFEeZSnw.roa (hash: TeUirEuTA43EYVzOUWEt62Nw9bA/6GjvRc1N3Wwsl64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:14:27:60:aa:7e:9c:46:b7:54:11:00:98:60:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
        Validity
            Not Before: Jul 27 07:00:44 2025 GMT
            Not After : Jul 28 07:00:44 2025 GMT
        Subject: CN=c6e91cf06ca55986c99452e0686e0d3e280d4045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:c3:2b:ab:85:64:e4:f6:1a:07:09:7d:dc:
                    5c:93:58:38:75:88:93:05:0f:86:49:56:3e:22:4f:
                    83:55:70:c9:18:bb:a5:e4:e1:6c:64:3d:85:8c:79:
                    65:0b:82:f2:94:b2:10:02:fc:1d:35:b3:50:d3:8d:
                    b9:5a:b4:13:3b:c8:c4:b9:a5:57:88:7e:91:f4:45:
                    f8:2b:b3:44:54:02:b1:b2:f0:73:c2:86:29:49:72:
                    b9:e0:4f:a1:50:55:54:d7:62:25:d8:c9:86:d0:c3:
                    96:14:a8:55:b7:e7:c5:fe:fe:2a:5a:ef:da:fe:84:
                    f5:85:54:f6:25:52:64:e0:05:96:2f:d6:78:7d:ec:
                    fd:c5:44:e8:4c:a7:64:0a:fc:6e:d4:ec:ce:b6:ac:
                    04:09:18:59:8f:4a:e3:6a:35:11:4e:76:84:dc:b7:
                    c3:c2:d8:1e:ed:4c:85:6b:9a:95:b7:6d:b6:bc:2d:
                    fa:83:83:68:84:5b:54:fc:1e:c8:02:1d:06:d6:7a:
                    f5:0e:af:91:75:14:6e:e7:60:de:fd:44:90:f0:2f:
                    ff:3f:8f:d5:8e:22:bb:e8:dd:2e:14:2f:7d:68:01:
                    98:ae:0d:c4:18:83:fb:73:28:b2:0c:5f:0f:63:71:
                    09:0a:b9:fb:6d:2a:03:6f:91:5a:95:24:ca:54:af:
                    c2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E9:1C:F0:6C:A5:59:86:C9:94:52:E0:68:6E:0D:3E:28:0D:40:45
            X509v3 Authority Key Identifier:
                keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0f:01:c8:1e:a5:43:76:e8:84:d7:14:f5:8b:fd:24:64:ff:
         d7:54:9a:37:c1:13:b0:e6:7a:34:96:e3:ac:24:8d:25:a7:fc:
         1e:54:a8:f1:ff:13:9c:d9:36:d3:41:f1:3d:76:e3:a2:24:06:
         4a:7f:00:a7:28:e4:49:ef:11:fb:76:6c:68:ec:06:bd:58:b3:
         cd:2d:5a:4f:53:3c:61:ac:03:96:29:7e:44:8a:e4:4b:99:b5:
         a9:39:12:8e:1d:24:da:3f:a4:6a:20:33:4b:3a:e8:cb:ff:d3:
         cd:33:a1:f9:3e:23:d3:38:39:65:00:2d:c6:e8:21:6c:36:76:
         c6:5f:b8:05:e4:7a:01:67:78:d7:7f:30:55:76:0c:f5:7f:6d:
         32:29:94:6a:7f:a9:da:bc:86:4c:a8:d6:3b:0d:d5:9a:ae:0f:
         e8:7b:5e:db:f4:11:7c:95:6f:3f:2c:db:a9:7a:8c:17:c9:2c:
         59:9e:2f:d4:e1:4b:77:4e:eb:64:fd:eb:94:b4:7f:f3:1a:5d:
         6f:b1:d2:c4:fe:27:2e:19:df:7c:76:48:08:29:3d:8f:56:ca:
         ff:81:eb:ff:42:ba:26:1c:58:85:aa:06:8d:f3:e0:a9:26:1c:
         04:9a:44:f1:bb:ed:e1:2d:b2:49:5d:30:4e:a5:04:c1:2a:f8:
         7e:e1:23:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:58:19 2025 by rpki-client