Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
File:                     1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json)
Hash identifier:          lBTy4ifWJ2syB1RyrVEB35Aa9Qef3oNVVUsiY9tfHvE=
Subject key identifier:   59:C5:91:8E:B9:F1:77:0E:C4:FA:CD:6A:87:B1:42:B2:98:95:44:85
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Certificate issuer:       /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial:       0198752BA103DC3ED821F308AC7FB4734BD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
Manifest number:          1319
Signing time:             Mon 04 Aug 2025 13:00:50 +0000
Manifest this update:     Mon 04 Aug 2025 13:00:50 +0000
Manifest next update:     Tue 05 Aug 2025 13:00:50 +0000
Files and hashes:         1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: WjudNAl5w3qdUFdHyFWLGOrheYlo7fubq9yfufOp1AE=)
                          2: X5Td4BSa7V5YNuHvHl6rc7qXYIg.roa (hash: zvst1s4JeyiHUJBQoQprDeytuK4EA/NhZnM7y90d0+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:a1:03:dc:3e:d8:21:f3:08:ac:7f:b4:73:4b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
        Validity
            Not Before: Aug  4 13:00:50 2025 GMT
            Not After : Aug  5 13:00:50 2025 GMT
        Subject: CN=59c5918eb9f1770ec4facd6a87b142b298954485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:14:f5:11:d1:f9:1a:2e:82:0c:87:5c:ac:34:
                    b5:86:4a:20:71:7b:e8:47:92:a0:9b:4a:5e:72:4a:
                    33:e6:5a:a1:b7:5f:b7:0d:40:81:70:5b:03:0e:23:
                    23:e2:51:99:86:12:b8:32:07:b9:25:c2:4b:7a:8f:
                    c0:54:a5:51:1d:b2:96:2d:8c:23:87:54:4d:3c:86:
                    f9:a6:91:a1:89:d1:39:e1:16:23:49:2d:2a:f4:fa:
                    cb:4a:ed:9a:01:97:21:61:90:41:ba:16:5f:5f:34:
                    bf:7c:97:02:aa:90:d0:f1:70:23:14:9c:a0:5f:a0:
                    d8:05:ae:69:bd:31:38:84:e9:69:18:54:e0:dd:a9:
                    89:13:44:fd:53:dc:c6:e7:6d:88:e6:d8:7d:a9:23:
                    45:43:c8:70:e6:b6:f2:4e:b6:5e:c0:8d:6f:1c:52:
                    f2:30:d9:0e:c5:27:35:25:02:90:7f:ea:fd:35:9d:
                    54:00:d2:66:85:85:c0:02:e7:7d:5d:c8:c4:9a:f5:
                    0b:53:7f:c6:b1:62:1e:23:dc:0f:98:6e:44:12:ca:
                    75:02:01:f1:ad:ca:93:1b:0f:a0:dc:df:bc:a9:d1:
                    e1:0c:f7:a4:b0:25:5e:2d:d5:6b:0f:15:64:9b:1f:
                    3c:e6:89:4e:c6:89:70:e8:5d:6f:f2:85:7c:05:23:
                    02:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C5:91:8E:B9:F1:77:0E:C4:FA:CD:6A:87:B1:42:B2:98:95:44:85
            X509v3 Authority Key Identifier:
                keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:d3:61:78:4c:8c:1d:52:58:35:60:b8:82:98:a4:1b:42:
         ef:ed:a7:8a:f2:28:a1:2d:d9:a4:29:36:78:d4:34:42:b3:e2:
         84:c5:aa:58:e5:f6:01:26:02:a7:81:78:3d:10:0d:d9:16:0c:
         72:88:ef:66:a1:36:a2:ed:d6:d4:d6:8e:86:9b:fe:93:40:aa:
         9e:95:2b:60:d4:a5:3e:72:66:e3:25:9a:d7:42:67:39:c2:9f:
         54:2d:03:0b:6a:40:89:a5:99:82:90:f9:0c:0a:40:88:90:09:
         b4:16:2e:da:80:bc:d6:5b:1f:60:17:65:72:9a:fc:4c:7f:bd:
         fd:47:6c:17:56:d8:b6:a4:d1:11:09:f5:06:92:94:ea:f8:28:
         4a:5c:f0:6f:36:d7:bd:2a:5f:0f:24:3a:35:f7:f0:41:21:02:
         0f:d8:a7:f2:e9:bb:db:97:10:68:bd:5c:91:1c:7c:eb:19:56:
         e9:16:bb:9d:7d:47:e1:70:0e:02:a6:6f:a5:54:9d:59:48:3b:
         32:ca:ae:52:8b:89:2e:75:61:53:d1:37:c5:58:d4:bb:cb:a0:
         72:3c:9c:38:c1:43:36:39:ea:5d:26:d6:49:b4:80:d3:bc:ed:
         54:bd:92:aa:dd:c2:b4:0f:42:ff:5e:52:91:cf:53:8b:ff:8a:
         1f:fc:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:19 2025 by rpki-client