Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
File:                     1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft (raw, json)
Hash identifier:          gwnh/MN0EiE9JddIivnJZ4Ulaog8u/Zq1IQEfdTCFgU=
Subject key identifier:   57:31:BE:F0:FF:CE:51:FA:A4:1B:76:B8:E8:84:4F:B9:5C:87:EA:6E
Authority key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
Certificate issuer:       /CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Certificate serial:       019922FAA9FED6D349E0E483D13CA39B29A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
Manifest number:          1524
Signing time:             Sun 07 Sep 2025 07:01:16 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:16 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:16 +0000
Files and hashes:         1: 1-a7NHj5wuktVBuAJ3ADk_WqHSH4.roa (hash: mo8wd9SPepK89v0F2kQzkzZ3y4Ds3XU7kLVQ6u6lBCM=)
                          2: 1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl (hash: vxJLo0KPgjM2vy3FqT0i05DMlfhQNcpBOEbs3U857rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:a9:fe:d6:d3:49:e0:e4:83:d1:3c:a3:9b:29:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
        Validity
            Not Before: Sep  7 07:01:16 2025 GMT
            Not After : Sep  8 07:01:16 2025 GMT
        Subject: CN=5731bef0ffce51faa41b76b8e8844fb95c87ea6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ce:76:7e:3b:2c:0c:1c:21:e1:f9:3f:71:83:
                    46:1c:78:5e:6a:45:52:23:05:a5:11:4b:67:27:14:
                    98:44:6b:a4:d3:f9:ab:57:b8:e2:a2:5a:e9:80:50:
                    0e:54:95:b0:ab:f6:33:45:ae:cb:22:01:c4:f2:b5:
                    a7:b3:bf:e1:f2:0c:99:57:b1:12:f9:62:0e:6b:7a:
                    7c:b2:55:58:ae:02:ea:1f:f2:a0:1e:b8:14:49:2e:
                    07:55:0f:83:fd:79:fc:1d:24:5e:09:16:20:4d:9f:
                    c1:b6:17:8a:07:47:9e:2f:b8:c1:55:16:18:07:78:
                    9e:0f:9f:ee:e2:7a:53:58:e5:81:56:e5:e4:3b:ca:
                    f1:c5:2d:5a:97:63:c0:41:76:8e:b7:e0:79:50:e6:
                    be:26:60:af:50:d0:0d:f8:eb:61:a0:37:f4:3e:a7:
                    91:fa:f8:22:76:c5:51:e8:0e:41:6e:3d:d8:64:9e:
                    45:6d:72:5e:70:a7:48:87:8a:da:12:f2:a8:36:44:
                    3b:56:51:d6:80:6b:07:d5:0d:f6:b6:c4:e6:0a:12:
                    a3:19:1c:94:14:c9:e7:23:dd:20:c8:25:2f:23:99:
                    b8:71:15:d1:c1:f1:6e:d6:c8:4f:c4:b2:79:cc:a7:
                    ca:99:b9:5a:e7:a9:e6:04:50:95:41:8e:f7:74:a2:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:31:BE:F0:FF:CE:51:FA:A4:1B:76:B8:E8:84:4F:B9:5C:87:EA:6E
            X509v3 Authority Key Identifier:
                keyid:FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:64:5b:fa:cf:e8:53:f1:3e:65:60:2b:fe:2c:37:d1:44:22:
         97:3f:29:8f:57:cd:70:e8:01:ff:40:33:af:ac:e9:e6:8b:15:
         dd:0f:df:0f:0a:d8:0a:de:ad:73:d4:b0:f3:77:14:74:1f:de:
         b3:72:a0:39:65:32:53:47:69:ae:5b:72:ff:34:21:fe:a3:58:
         7f:c5:af:03:f0:fa:ac:27:00:f5:28:98:97:65:55:3f:32:37:
         48:8b:92:d0:f1:37:6d:3b:10:d1:86:1a:56:65:ad:b2:fd:1c:
         56:f2:61:c2:df:bf:26:95:64:55:b4:64:2b:fd:bf:f4:d0:b4:
         c9:cf:3c:d0:59:13:ec:ea:9c:03:79:22:42:4e:66:b7:6f:68:
         ea:f7:98:87:47:d7:d4:7e:51:1e:c0:99:df:bc:6e:ec:86:00:
         33:2a:5b:1b:72:5c:98:bd:00:65:ef:6e:e1:70:bc:4e:de:78:
         f9:e9:62:09:cf:4f:79:4b:3f:22:bf:47:6c:0e:8f:8a:50:18:
         03:24:6b:d7:8d:dd:a6:91:e0:e5:19:b0:cd:4c:fa:e7:5c:ff:
         24:3c:42:02:83:3e:e8:63:68:ae:92:dc:f0:72:be:2f:cb:68:
         9f:e3:31:16:6c:82:43:ad:95:b0:0c:9f:dd:62:bc:04:fe:f6:
         5b:c8:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:57 2025 by rpki-client