Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File:                     1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier:          j+dAELsBOIBBCl6LGNHZn6U9Kj8K649bBP+YdybNy1Y=
Subject key identifier:   00:0B:30:84:19:1B:F3:01:F5:5D:B0:59:29:84:BA:31:1A:9B:78:79
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer:       /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial:       019881671D6E647FD165E08886E6D57921AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number:          1505
Signing time:             Wed 06 Aug 2025 22:01:15 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:15 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:15 +0000
Files and hashes:         1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: MtjWuDHRiOOUm/wyFgxbAWho4dvYgMV4pLaDI26hxZQ=)
                          2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:1d:6e:64:7f:d1:65:e0:88:86:e6:d5:79:21:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
        Validity
            Not Before: Aug  6 22:01:15 2025 GMT
            Not After : Aug  7 22:01:15 2025 GMT
        Subject: CN=000b3084191bf301f55db0592984ba311a9b7879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:ce:d2:9d:df:91:d1:98:c4:e3:c3:c2:41:
                    f7:60:35:25:a8:a6:0a:4f:54:18:8e:50:c2:a8:fa:
                    8e:b4:a0:f0:f3:3a:99:93:b3:4d:f7:23:bc:5c:bc:
                    00:d1:11:23:93:73:d0:2d:c0:3a:a3:3f:f7:36:96:
                    31:2f:8c:58:93:fb:e7:3a:95:be:3e:47:cd:f9:df:
                    72:79:20:d7:b6:5a:44:82:f3:67:31:11:64:06:9e:
                    78:dd:e9:97:56:61:62:dc:76:e4:f8:68:6a:c5:f0:
                    d0:c3:4b:3c:22:fb:c7:de:2e:0e:c3:7b:7b:12:b2:
                    91:68:95:87:6e:08:49:36:9b:b1:21:f8:1b:75:03:
                    f6:3b:3f:6d:22:6c:b4:79:ac:98:b0:05:0d:b8:a0:
                    37:85:5c:bf:3f:8a:ce:cd:16:84:3b:7a:0f:95:89:
                    17:41:c1:47:1b:0b:b7:50:66:ab:a8:9e:8e:61:46:
                    5e:9d:60:20:8d:d8:5e:fc:50:49:ac:32:43:6e:05:
                    67:97:38:6c:ea:de:9b:aa:c8:c0:88:cb:a9:7d:10:
                    b9:49:71:3b:fb:17:03:87:06:b8:0a:0a:63:6f:f3:
                    a6:c6:da:37:95:fc:8d:8a:90:39:c4:ec:b0:18:e8:
                    78:4a:ab:0b:37:40:3a:77:0d:b8:fb:b8:4b:ad:7e:
                    4d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0B:30:84:19:1B:F3:01:F5:5D:B0:59:29:84:BA:31:1A:9B:78:79
            X509v3 Authority Key Identifier:
                keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:62:18:be:e4:8a:95:84:61:2f:67:af:77:a7:11:ef:f0:
         d8:f9:83:49:d9:bf:cc:fb:46:d0:0e:ee:4d:41:43:60:34:7d:
         9f:21:de:27:07:29:c3:57:79:57:71:13:0f:46:9d:6d:9e:03:
         dc:65:67:29:57:02:28:81:0e:49:5f:57:87:58:2c:ce:07:e3:
         3b:7c:61:82:f9:28:a5:ad:39:02:8f:38:83:7f:76:d6:f2:d0:
         04:d4:7e:27:ab:a3:da:18:d7:b9:28:d7:a7:cd:84:e6:f2:f3:
         b7:3d:ad:c0:02:ae:c3:e2:08:cd:8e:df:e0:1e:27:70:05:0e:
         ca:39:bc:3b:be:93:9e:4e:42:d4:7b:2d:7f:9e:f2:58:a5:6b:
         d6:ef:5d:6c:7c:1c:bb:0f:b3:82:0e:90:1f:b6:39:cb:52:07:
         9a:29:ab:8e:da:8f:c7:3c:49:9d:13:16:48:b9:41:de:b9:5e:
         92:f4:30:fa:48:91:c3:cd:0b:83:5b:05:ff:eb:84:e7:20:08:
         c5:78:c0:fb:7a:26:89:99:84:55:d0:58:2b:bb:53:7a:75:86:
         92:57:51:9e:c3:14:1b:e0:bf:e0:4b:f5:cb:02:b6:fa:93:3b:
         65:8a:1d:ae:79:92:23:de:72:8a:ba:59:4a:7a:c9:6d:e8:f8:
         76:31:47:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:15 2025 by rpki-client