Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File:                     1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier:          ecdp31/2iaBAUgNxZ+m32gPqbWCD26CTTcnwRoY9/Cg=
Subject key identifier:   7F:F7:93:35:B3:87:D5:61:4E:71:F9:A8:0E:6B:72:67:81:E8:B3:87
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer:       /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial:       01987CAE95C42F692CDB97BF82D1C69F8D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number:          0A47
Signing time:             Wed 06 Aug 2025 00:01:12 +0000
Manifest this update:     Wed 06 Aug 2025 00:01:12 +0000
Manifest next update:     Thu 07 Aug 2025 00:01:12 +0000
Files and hashes:         1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: lJ+KbxVV4TOHIucyz6HHsikFB/aOu2Apio4bkrcHugM=)
                          2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=)
                          3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:95:c4:2f:69:2c:db:97:bf:82:d1:c6:9f:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
        Validity
            Not Before: Aug  6 00:01:12 2025 GMT
            Not After : Aug  7 00:01:12 2025 GMT
        Subject: CN=7ff79335b387d5614e71f9a80e6b726781e8b387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d6:14:75:8d:fe:0f:0b:d6:d1:80:5c:e2:a3:
                    39:22:64:55:f7:7e:ec:99:51:39:b6:bd:52:b2:c9:
                    f8:53:79:f1:6f:5d:29:7a:8d:c4:b2:ae:79:07:6b:
                    6d:1a:7a:f5:0e:74:9f:9d:94:77:59:70:38:4b:40:
                    e4:9f:76:f8:67:25:9c:1f:1d:99:a4:49:20:05:bb:
                    16:67:28:6e:2c:25:ae:31:a4:7a:b0:2d:e0:d0:e6:
                    c8:3b:d6:53:ce:f3:4e:b0:c5:15:9e:4f:13:af:44:
                    1e:44:75:4f:bf:2a:06:9d:60:5e:ed:4f:d7:67:ba:
                    c4:9f:dd:c3:9a:97:9e:69:37:66:f0:a7:ce:1a:67:
                    8a:56:15:ae:8c:b1:f1:b2:24:55:ee:54:22:b7:74:
                    d8:12:f2:30:31:7f:f5:ef:07:69:e1:59:75:d9:92:
                    00:b3:e6:c1:df:c7:80:d7:3d:e3:53:e9:01:43:73:
                    d8:52:6a:4d:cb:a1:ea:da:ab:3e:fe:d6:ce:76:71:
                    85:7a:07:a5:26:3c:bf:24:2a:71:a2:32:79:e2:a0:
                    43:48:59:55:16:5a:78:85:28:a5:9f:27:cc:95:d3:
                    65:af:6f:47:02:9e:be:f2:38:76:6e:91:e1:0e:87:
                    2a:9d:8d:f7:1c:96:53:31:c3:bd:aa:5b:f2:56:9d:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F7:93:35:B3:87:D5:61:4E:71:F9:A8:0E:6B:72:67:81:E8:B3:87
            X509v3 Authority Key Identifier:
                keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4e:d3:b2:c2:9f:12:c5:c9:54:dd:e5:85:46:38:68:4a:86:
         e2:d7:b1:f7:2a:40:3b:d7:53:52:26:cc:b7:10:db:6b:c5:29:
         61:59:79:12:85:79:16:37:99:2f:26:14:ec:d7:c8:14:4a:9f:
         2b:69:bd:e8:eb:cc:7b:e5:60:2a:ef:a9:ea:d7:10:d1:a9:d2:
         c0:06:57:1c:3f:8b:73:75:58:d7:44:ef:d4:cb:cf:1c:e4:2b:
         5f:0e:e0:ac:ef:e0:f3:d7:7c:a3:1c:11:1d:c2:45:e2:3c:bf:
         40:b2:55:bd:fb:81:40:b7:f8:d9:a7:c4:37:37:3c:be:c3:b9:
         30:4d:6d:fb:fa:d0:48:e8:40:26:ed:ad:25:01:cf:a3:23:8e:
         df:af:6b:61:c1:0e:54:86:15:b0:a0:85:b6:8e:3b:e0:69:ef:
         b7:5b:b5:fe:99:aa:ce:7d:e5:69:90:4c:51:6a:69:b2:61:6c:
         03:f8:8e:6c:bb:92:1a:a2:fc:79:9d:70:9e:4c:58:da:ef:71:
         0f:9d:05:58:c4:0f:95:26:86:b8:4c:f9:5f:49:b0:7f:5e:47:
         d6:67:ac:22:b4:50:41:0f:bd:c7:0c:8f:78:e8:7e:6c:03:60:
         9a:ea:1d:8e:96:a0:fd:d0:52:57:4a:6b:21:c3:45:6d:e8:66:
         64:db:16:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:19:41 2025 by rpki-client