Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File:                     _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier:          xuLrKRO2m5S/B1Qet5AkT9D9Ei7f5AtDqYTeHtImU60=
Subject key identifier:   33:8B:D0:FF:2F:8C:D6:0D:49:4A:24:17:3C:11:C1:29:02:BC:FF:F0
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer:       /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial:       01992331134E90D5F1088889ED01592CECA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number:          1310
Signing time:             Sun 07 Sep 2025 08:00:42 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:42 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:42 +0000
Files and hashes:         1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: 6hCx1QxALR1H04n9q4NJ5yrWRqWU4sgLW51Zl0VSVYQ=)
                          2: m1aho7A62fK7s2UNnicExFjE6us.roa (hash: ADQVW+bl8YrIssIav1fCxE/xWNAztKLL5kf78n8W9UA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:13:4e:90:d5:f1:08:88:89:ed:01:59:2c:ec:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
        Validity
            Not Before: Sep  7 08:00:42 2025 GMT
            Not After : Sep  8 08:00:42 2025 GMT
        Subject: CN=338bd0ff2f8cd60d494a24173c11c12902bcfff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e5:ce:f2:f2:69:c9:9a:35:3b:c9:51:cc:62:
                    11:37:d8:82:fb:1e:9c:e7:9f:96:5b:94:c8:7a:44:
                    df:83:bb:91:86:20:32:c0:b9:5e:53:3d:fa:ca:e9:
                    e5:6d:19:b0:2f:28:f2:fb:e7:cd:d4:a2:02:e5:c7:
                    97:35:73:b2:b9:ad:de:98:ab:20:e2:7b:ab:c6:93:
                    98:ce:1b:07:f6:ef:c6:85:97:b6:dd:82:6b:02:b6:
                    45:bf:6f:29:23:c0:7e:30:0d:d8:59:c3:a9:86:d4:
                    23:e6:dc:be:95:6e:70:14:4a:76:22:a5:4c:e7:ed:
                    e3:2c:a2:4e:e0:18:68:21:01:f7:21:cc:90:a7:ec:
                    95:f7:ad:09:d5:06:7e:fc:b7:16:ac:bc:7d:b4:8b:
                    15:7c:f7:42:e9:6c:f4:6d:4a:83:13:3f:78:dc:30:
                    2d:2d:06:d4:19:1c:2b:75:b9:55:8d:ba:18:73:d2:
                    0a:b3:d6:26:86:3c:4b:97:8c:b9:d0:49:af:2e:79:
                    8c:01:4a:00:66:d6:9b:a5:e6:2d:b7:b2:af:17:14:
                    da:03:73:16:4c:3c:50:8b:e9:88:0d:45:32:6d:84:
                    78:90:78:ef:da:51:35:fa:be:06:66:55:e2:2e:a8:
                    3e:4a:7b:02:99:0f:e2:99:b2:93:39:12:b5:cc:28:
                    64:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8B:D0:FF:2F:8C:D6:0D:49:4A:24:17:3C:11:C1:29:02:BC:FF:F0
            X509v3 Authority Key Identifier:
                keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:87:2d:d8:6d:3e:e8:20:6c:f7:cd:23:c4:ed:2c:91:ef:e5:
         17:b7:43:6e:0c:60:b3:be:55:0b:d9:f2:3f:17:6e:5a:52:60:
         84:93:9f:a1:52:4a:a0:c1:1a:e8:5e:3a:7e:63:83:01:27:68:
         44:f5:a7:f8:7a:c7:d2:74:80:d5:9b:6a:36:ac:be:1a:f2:c6:
         c3:69:1c:e1:3a:42:5c:11:e8:f5:45:fc:5e:10:7c:9c:36:58:
         2b:3c:0e:f0:ff:47:20:05:de:c6:5f:f8:a3:37:36:ca:5a:f8:
         61:d7:71:f5:c8:83:d5:83:57:54:c5:4b:f2:c3:83:e6:03:56:
         33:45:95:f3:b7:4c:b2:88:85:ba:94:c7:41:6d:d6:90:52:f9:
         08:d4:ea:6c:7d:c5:29:f5:86:34:0a:65:96:46:b4:10:bc:28:
         6f:54:2c:aa:d4:77:6b:26:ad:21:63:2e:ac:70:ea:a7:90:5c:
         c7:06:b5:81:78:04:bd:03:62:f5:c2:86:c2:20:02:c4:14:f6:
         48:4f:8c:2d:a7:1a:70:5e:64:e0:ef:6d:f6:38:35:78:ba:c9:
         a3:ae:e6:32:13:f0:b6:b7:0f:5e:7f:55:a5:60:e1:7f:c9:fa:
         11:0d:df:b4:33:99:d5:58:e9:9b:9d:5b:51:46:f9:c2:a8:1a:
         66:82:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:52 2025 by rpki-client