Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
File:                     1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json)
Hash identifier:          DWPTfICtNt4bcDOBvbRNFoqFxnzKd0+lSP7TPdKhMhc=
Subject key identifier:   E9:7F:95:01:F0:C2:FB:EE:CC:D4:15:59:32:04:F8:7D:FE:07:3F:07
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Certificate issuer:       /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial:       019768BC1CBDC48A33CD41881FD63BA1AE58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
Manifest number:          128E
Signing time:             Fri 13 Jun 2025 10:00:47 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:47 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:47 +0000
Files and hashes:         1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: 64l5Z0c1Hfrjqc/9BSsuRIDBMvtEKP6f1kCxEtv+fcA=)
                          2: X5Td4BSa7V5YNuHvHl6rc7qXYIg.roa (hash: zvst1s4JeyiHUJBQoQprDeytuK4EA/NhZnM7y90d0+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:1c:bd:c4:8a:33:cd:41:88:1f:d6:3b:a1:ae:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
        Validity
            Not Before: Jun 13 10:00:47 2025 GMT
            Not After : Jun 14 10:00:47 2025 GMT
        Subject: CN=e97f9501f0c2fbeeccd415593204f87dfe073f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8e:51:ad:c8:21:d2:51:7b:50:fd:76:f6:d2:
                    d2:d3:6a:53:a9:53:c6:3c:e6:73:33:bb:66:ff:e8:
                    da:cc:e9:9d:d1:46:c5:61:25:4c:34:2e:bd:1e:68:
                    aa:4f:fd:8d:8c:1b:c0:d9:33:60:75:65:bf:36:ef:
                    90:49:39:33:b3:ac:1e:3f:e3:29:83:59:39:bb:9a:
                    1b:e2:f0:d8:00:04:27:a3:dd:84:30:3b:0b:0e:6a:
                    49:3d:7a:5c:30:bc:dd:02:37:80:18:c5:fb:b3:e6:
                    dd:b0:4c:f9:63:62:12:74:89:a5:67:62:d9:1d:c0:
                    d8:97:ed:6c:68:c7:3d:68:1c:da:d0:ea:4a:e6:c2:
                    93:a3:ab:e3:55:d9:d0:6d:69:cd:71:9d:0b:72:18:
                    cd:be:6b:56:06:56:05:35:e5:70:77:31:eb:15:22:
                    9b:26:ac:26:80:99:96:3d:f5:2b:15:2c:5d:5c:74:
                    9e:f0:82:fc:4a:85:38:ca:4f:94:f6:b2:fc:31:3a:
                    0d:83:b0:79:06:27:f9:ef:1d:e3:18:79:18:fc:8f:
                    f3:8e:98:58:40:da:0e:23:24:8d:a8:a2:64:dd:d8:
                    f9:f1:bd:20:79:21:c9:d2:1b:28:68:13:56:13:ab:
                    f4:51:8c:1c:ac:c4:26:23:17:d1:54:7f:95:83:09:
                    98:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7F:95:01:F0:C2:FB:EE:CC:D4:15:59:32:04:F8:7D:FE:07:3F:07
            X509v3 Authority Key Identifier:
                keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:23:e4:a9:22:c4:43:a8:b7:b2:e9:54:7b:05:8c:4a:89:38:
         22:96:61:b6:55:5b:c1:7e:28:5e:3a:3d:15:a2:f1:17:a2:61:
         7a:72:18:2b:b7:00:32:a2:2c:fe:66:ed:ee:e3:22:48:99:42:
         2b:e2:b8:8b:f1:3c:35:8e:1a:28:69:5d:b8:43:40:73:a7:55:
         2c:80:23:97:cd:26:94:f9:8a:3d:6c:e4:f2:00:9a:34:e4:c4:
         81:8f:11:9e:0e:fb:3c:44:49:8a:86:89:f8:73:ee:7d:fb:a4:
         2b:d5:ba:56:25:5e:ad:d0:21:51:4e:d2:bf:6a:80:ac:2e:bf:
         d0:57:1d:23:c8:48:3c:9f:ae:fd:9b:d3:ed:85:1d:0d:57:24:
         d3:20:6e:3c:2e:cf:4f:18:df:38:cf:04:07:b9:62:f1:2b:7d:
         24:8c:50:7e:51:90:e5:60:bb:a0:67:be:d7:f3:e7:ba:e8:5a:
         eb:a7:a5:43:a4:51:1d:d9:9a:58:df:e6:f4:d4:46:a7:f0:61:
         40:4b:a6:77:00:f8:2f:32:d9:94:81:89:d0:22:41:75:4b:51:
         8a:4c:fd:7e:d8:c7:b8:e5:66:f2:38:c1:6b:6d:82:37:ce:88:
         5f:bf:c2:09:5b:2d:7a:fd:55:64:25:23:84:c3:b4:92:2d:50:
         96:74:b0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:01 2025 by rpki-client