Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File:                     1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier:          27mQx+tuNP5VTn9muulzG6Bp5gFrcxC6sPcggZ8l6YI=
Subject key identifier:   AF:FF:35:10:30:44:EB:AF:82:7A:13:23:AA:0E:3B:07:16:C4:4B:6B
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer:       /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial:       019896A570A0238EB59D37A597C21E307447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number:          0482
Signing time:             Mon 11 Aug 2025 01:01:21 +0000
Manifest this update:     Mon 11 Aug 2025 01:01:21 +0000
Manifest next update:     Tue 12 Aug 2025 01:01:21 +0000
Files and hashes:         1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: joywVGO8yPxVibYrorUO+zNUbVI+NEM98gXzKrN3a9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a5:70:a0:23:8e:b5:9d:37:a5:97:c2:1e:30:74:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
        Validity
            Not Before: Aug 11 01:01:21 2025 GMT
            Not After : Aug 12 01:01:21 2025 GMT
        Subject: CN=afff35103044ebaf827a1323aa0e3b0716c44b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:95:76:3b:0b:92:ca:96:f3:a4:dd:7f:58:db:
                    43:85:f2:14:7f:a5:85:ae:da:f1:01:01:9d:8c:a2:
                    d5:65:9b:53:c6:f4:a2:09:42:35:50:33:5a:76:c8:
                    0d:cc:a7:b6:06:df:63:9e:62:fa:5e:3b:11:1b:a0:
                    ca:ef:41:a0:81:5a:d7:78:a5:cd:86:e1:3b:64:cd:
                    56:d0:41:6f:d1:c5:cb:8d:8e:81:7d:9a:78:5c:15:
                    14:77:25:0f:a4:62:3f:95:9f:c0:9e:a5:d5:71:6a:
                    fd:77:b9:54:8d:81:53:3c:a9:08:a3:5d:c0:73:fc:
                    e1:7b:79:df:5d:dc:ca:22:a5:55:eb:ba:2e:4a:da:
                    f9:91:e6:ed:e7:dc:d1:a4:94:24:70:73:7a:48:af:
                    e5:67:d7:20:55:26:9c:06:bb:21:fb:2d:8f:40:7e:
                    80:e3:4c:8d:f6:ca:a5:d3:ef:06:bd:c3:5c:cd:78:
                    94:40:f8:64:2a:24:8f:6f:7a:a0:83:ee:cc:5c:c6:
                    24:7a:75:d6:95:76:c1:4e:d9:72:a8:64:8b:e1:fe:
                    e5:91:f3:ac:13:47:e2:29:bc:6f:1e:a7:b0:12:e0:
                    b0:17:8b:06:46:49:65:22:53:0d:35:5e:78:af:28:
                    26:fb:49:d0:54:20:5a:74:2c:d3:18:61:7a:0a:17:
                    cb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FF:35:10:30:44:EB:AF:82:7A:13:23:AA:0E:3B:07:16:C4:4B:6B
            X509v3 Authority Key Identifier:
                keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:21:fe:fb:9b:2f:48:b7:a5:f3:e4:23:17:f9:73:65:32:b9:
         90:c5:20:cc:37:8e:9b:76:c9:31:11:b4:6e:14:60:45:bf:dd:
         a7:a6:f3:8b:44:e6:96:bd:a6:45:3b:80:f0:dd:4a:5d:28:1a:
         f7:cf:ef:a3:d1:1f:42:18:22:ce:b3:01:ab:fe:ad:99:57:b1:
         b6:41:3c:bc:97:92:b4:3a:40:d9:86:0a:03:31:34:39:24:77:
         4c:68:dc:a6:13:f1:15:87:e9:dc:44:ba:6c:0a:b9:dc:84:bd:
         8e:d2:89:a7:bf:94:4d:f2:97:37:c4:25:97:ba:4e:76:b7:a0:
         3d:78:fa:3c:43:d2:d1:fa:b1:3c:b2:00:46:eb:ab:63:6c:b2:
         24:52:a6:39:62:58:64:0b:5c:e9:40:9f:55:15:13:2d:4f:8c:
         c6:b2:15:9d:27:43:d6:45:1a:e1:5f:43:3f:7a:66:72:8c:b1:
         d5:d4:ab:0a:4f:c6:f1:e8:1f:5c:12:1a:25:45:94:53:9a:14:
         4e:a7:f1:f2:1e:60:e5:4b:27:3f:08:67:c0:65:90:7a:6d:fd:
         9d:e8:ac:90:9f:17:59:5c:bd:74:e0:40:85:ad:ce:30:c1:f4:
         6c:0f:22:74:11:30:67:4e:ee:7a:90:ae:70:86:57:3d:c4:9e:
         64:05:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:51:15 2025 by rpki-client