Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
File:                     1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft (raw, json)
Hash identifier:          5bx+c5PPBKkjYO97Nu4nrXPXmBeqIwBx2yblQLR4oCo=
Subject key identifier:   66:A1:40:6C:E5:06:99:B6:DE:0B:45:22:AF:4F:5B:55:7C:A7:DB:18
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Certificate issuer:       /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial:       01988BEAE4C3114D2395AB2853C729F2B464
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
Manifest number:          04BF
Signing time:             Fri 08 Aug 2025 23:01:23 +0000
Manifest this update:     Fri 08 Aug 2025 23:01:23 +0000
Manifest next update:     Sat 09 Aug 2025 23:01:23 +0000
Files and hashes:         1: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl (hash: rtwHBCd+PGS/a8zZtmRdThutobIBHdC0+Kox4yunB0I=)
                          2: bdIq5nOBWGITXlJ9zml2Pg0QFbI.roa (hash: k0q9hqwpfMQ2WeyDd3IadaGT9hLdAeghDeVvZBVh6H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:e4:c3:11:4d:23:95:ab:28:53:c7:29:f2:b4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
        Validity
            Not Before: Aug  8 23:01:23 2025 GMT
            Not After : Aug  9 23:01:23 2025 GMT
        Subject: CN=66a1406ce50699b6de0b4522af4f5b557ca7db18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:47:e0:25:13:db:9a:35:f1:d1:05:01:82:
                    af:4f:3e:78:92:6c:95:40:2f:08:9b:44:ea:1d:78:
                    5f:90:a4:90:2d:ad:e1:8c:7a:08:ba:e4:39:a3:72:
                    39:da:c0:1f:4a:bf:b6:60:cb:be:3f:b1:96:f1:48:
                    d4:92:91:eb:99:fe:f1:64:4f:9a:85:c5:29:08:7f:
                    49:b8:f7:88:f6:84:95:c1:21:a8:d7:da:65:3f:eb:
                    97:a5:d1:13:fc:b8:50:f6:06:ff:af:37:43:74:11:
                    6f:76:46:b2:f2:14:eb:77:3e:b0:a9:dc:c4:e1:f0:
                    ec:10:66:8f:25:dd:c6:f2:a6:51:79:c1:5a:94:b4:
                    e7:3c:34:4e:5b:c6:74:70:17:fc:c1:12:d8:db:7a:
                    f1:e2:d9:e8:d9:8c:3a:15:f1:19:a8:37:7b:4c:ac:
                    35:de:3b:e5:1a:c3:82:14:60:10:57:ee:21:ca:2f:
                    22:3a:24:64:0e:ba:d3:6b:83:79:26:89:18:b8:8b:
                    d7:23:ed:17:b7:6c:26:38:ad:61:90:01:44:8a:5e:
                    5f:44:bb:99:a9:64:bb:49:95:5a:51:dc:52:10:d0:
                    03:41:36:12:5e:18:db:3f:77:8c:f9:c4:19:d6:7c:
                    dd:1f:b6:b5:b3:11:c7:ba:a4:e9:8f:f1:a1:3e:0f:
                    6d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A1:40:6C:E5:06:99:B6:DE:0B:45:22:AF:4F:5B:55:7C:A7:DB:18
            X509v3 Authority Key Identifier:
                keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:fd:83:7b:22:8f:7a:e8:94:10:01:27:26:55:4b:93:80:0e:
         86:79:8a:d9:3e:ab:19:23:1b:f2:95:a7:81:89:d1:b8:5c:26:
         42:a9:5c:ab:2d:32:78:f4:a3:ce:5e:96:4f:61:25:89:b3:b1:
         bd:99:ce:19:b3:93:9a:b2:cf:16:e5:35:10:c1:e0:0d:59:92:
         6c:1c:04:86:fb:c8:5c:e4:df:20:18:24:67:bb:9b:35:2b:17:
         16:d7:c4:59:4d:f6:cb:66:ca:d3:79:0a:2b:df:9a:55:67:b0:
         33:b7:bc:9f:c0:19:1c:f7:b7:e2:99:32:8e:ec:41:7c:7a:51:
         50:a9:20:b1:e8:b3:cf:da:c9:3c:af:91:b5:1c:88:67:80:a7:
         b6:df:ee:5c:b9:16:62:0e:d6:1d:2d:53:e5:6f:05:7b:93:a4:
         61:99:cf:e9:6e:75:c1:58:18:17:90:05:10:0a:cc:b5:16:a4:
         5e:54:c4:f8:9f:8c:eb:76:18:67:c9:56:2c:6e:16:11:79:6d:
         8f:c9:f5:a7:f8:12:2a:24:c8:0d:7b:fe:a9:e7:f2:ce:46:af:
         d0:39:06:44:ce:9f:59:9c:a8:86:06:2b:b3:c1:15:ee:18:ce:
         6e:6f:57:bc:7d:da:67:97:52:e1:93:2f:48:c9:17:7e:03:6a:
         fa:fc:28:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:02:42 2025 by rpki-client