Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
File:                     1-F0E5sULqQb5rBHC51vz9dEEKmI.mft (raw, json)
Hash identifier:          ZGxdW3fo7H+xEVvlaqYd2whsRzpdd1eMbLkma8JY55o=
Subject key identifier:   32:4E:46:B5:3D:C7:47:19:9B:A9:E9:5A:AE:82:47:8D:32:77:B2:C7
Authority key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
Certificate issuer:       /CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Certificate serial:       019923A0001DE81EF6E3399740E23D4410B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
Manifest number:          1676
Signing time:             Sun 07 Sep 2025 10:01:52 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:52 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:52 +0000
Files and hashes:         1: 1-F0E5sULqQb5rBHC51vz9dEEKmI.crl (hash: mnGSBm1iOJfTZInnsJW6VQC23gd09ZXc8JUivij482Q=)
                          2: _mz1bO9qw-mR0ZWQodW0gDxX-XU.roa (hash: EIXfCvhzf7KTxjdRcM1VzT/2S7P1xIG9PsfWTukoty4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:00:1d:e8:1e:f6:e3:39:97:40:e2:3d:44:10:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
        Validity
            Not Before: Sep  7 10:01:52 2025 GMT
            Not After : Sep  8 10:01:52 2025 GMT
        Subject: CN=324e46b53dc747199ba9e95aae82478d3277b2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dc:e0:69:5b:01:f0:aa:12:f7:ca:37:dd:0f:
                    9e:0d:2c:2c:ad:c8:9a:dd:56:ae:99:8d:16:4e:d5:
                    b5:58:88:0d:04:e3:ca:d8:cb:fd:27:d5:b8:40:d3:
                    a4:15:1c:3d:ff:b4:e4:03:10:20:48:7b:e1:35:c1:
                    e7:2c:2e:52:fd:09:4a:b5:18:e1:41:b3:4a:5b:ec:
                    2f:2b:9f:8b:e8:33:8d:08:ea:4d:c6:a0:d8:f4:1b:
                    53:88:93:8f:72:5e:77:eb:64:d9:35:63:e2:cd:a3:
                    56:bb:4b:57:0d:58:a0:a2:bb:ec:d5:5c:c7:93:39:
                    0c:b6:df:05:f3:e9:0e:0c:c1:5d:78:c3:5f:7c:5b:
                    ee:de:ce:87:2d:68:98:0a:d2:ea:e4:80:b6:3d:11:
                    34:10:2f:58:62:92:20:3b:ff:f1:24:d3:7a:f0:3d:
                    53:98:89:6a:3d:1d:0c:52:d1:bb:74:28:8f:75:7d:
                    79:62:7e:e4:0b:3d:7d:37:06:dd:89:a7:a3:cf:c0:
                    40:b2:dd:40:dd:d5:ce:c3:80:7e:af:9c:56:54:8a:
                    62:0c:a9:12:59:39:4c:28:d8:74:b1:2a:dc:15:78:
                    f0:5a:7b:52:cf:18:80:a0:a8:4b:b5:74:ed:e7:6e:
                    c6:80:8d:c6:32:1e:ed:89:c9:93:d4:f8:ca:bf:33:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4E:46:B5:3D:C7:47:19:9B:A9:E9:5A:AE:82:47:8D:32:77:B2:C7
            X509v3 Authority Key Identifier:
                keyid:F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2c:b3:a7:eb:33:f3:04:05:f4:86:30:df:b8:7f:11:a7:02:
         4d:99:14:45:b2:d3:e6:e7:d1:24:32:46:7f:b4:5c:e8:d5:cd:
         47:9f:fd:3f:a1:02:04:e8:44:01:cb:a7:08:32:c7:51:89:0b:
         2f:61:a9:0e:de:cd:90:3c:f3:2e:a1:1c:b8:ed:90:75:28:36:
         d0:55:36:3d:3e:1e:0c:2c:59:59:4c:1f:53:f4:8e:67:24:87:
         f3:f2:f4:c8:d4:48:ea:7b:bb:68:56:51:2b:c6:07:c4:b4:e3:
         29:56:02:c2:68:4d:c5:9b:79:74:0f:41:cf:52:7c:e8:6f:75:
         47:fe:7d:d9:03:72:8d:14:f1:18:0b:ac:54:7f:c1:95:77:95:
         16:8b:b7:b1:d5:7b:b2:71:7f:04:9d:27:f3:17:48:e9:d1:a0:
         9b:3c:18:63:d6:f6:00:8b:b0:d0:55:af:c3:a7:df:5b:54:07:
         bd:de:3b:d7:2b:d3:db:1d:a6:a9:8e:ab:e6:c2:34:89:f6:22:
         94:4a:a0:ac:29:a8:51:4d:ea:42:f2:d5:82:2a:e0:5f:57:87:
         84:cc:62:bc:44:45:d7:1b:22:0b:58:8d:74:7b:4a:ba:45:f4:
         3e:1c:85:31:d1:1f:3d:5a:f6:02:76:88:92:06:16:4c:1b:ca:
         6b:fb:0b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:23 2025 by rpki-client