Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File:                     1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier:          0dGRNvV12L2z97Z1ULFrM0l0eGXvJrDzayu3NnQVmf8=
Subject key identifier:   57:FC:31:BB:5D:37:1D:85:0C:35:49:07:7F:B9:FB:88:3A:6A:47:E4
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer:       /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial:       01987D8AA1B7D5E2BE9AF9EBA3AECEC8A049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number:          09C6
Signing time:             Wed 06 Aug 2025 04:01:33 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:33 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:33 +0000
Files and hashes:         1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: 8BVQUqwfAKqqLhTNiZUavIu9BQFgoa8RQL12oGQC6IM=)
                          2: nyuERDVJh6-PTXV2ajcksYw_55g.roa (hash: K7CKnx/jM/EuzQ/IpR2qcCsRtlnJ0y6qFH+bAbkXnGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:a1:b7:d5:e2:be:9a:f9:eb:a3:ae:ce:c8:a0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
        Validity
            Not Before: Aug  6 04:01:33 2025 GMT
            Not After : Aug  7 04:01:33 2025 GMT
        Subject: CN=57fc31bb5d371d850c3549077fb9fb883a6a47e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e7:e1:a3:40:44:fd:d7:a5:59:19:7e:48:ab:
                    77:d8:f0:eb:d4:c6:a0:14:79:ac:c6:d1:87:17:c1:
                    96:65:a3:13:85:fb:6f:f1:b7:bf:55:ce:04:e6:d7:
                    78:c4:05:40:ea:07:92:51:bc:8d:45:bc:d9:fb:71:
                    a9:aa:fc:45:8b:9a:7e:8f:2e:c8:9e:5e:12:88:47:
                    09:45:85:db:25:e2:05:9e:33:32:dd:34:5f:45:64:
                    b5:5c:f9:95:a8:ae:b8:ad:08:72:2c:29:ec:82:6e:
                    0e:b5:12:aa:27:02:44:21:e1:78:75:0f:69:2e:06:
                    93:6d:0d:e5:80:a3:7a:70:cf:26:bc:1e:32:fd:31:
                    0a:0a:f4:da:e3:48:03:25:e2:cd:1f:65:ba:92:b5:
                    ef:4f:a6:08:09:de:cd:0b:4a:e6:0f:f2:4b:c2:68:
                    f4:92:cc:e6:a9:7e:1a:fd:fb:dd:2e:87:95:82:1b:
                    7e:2a:a3:5b:51:01:5e:65:36:d5:2d:13:0e:6b:79:
                    53:a6:82:a5:0b:e0:57:f6:66:50:d5:2a:8d:0e:41:
                    08:9e:a0:b8:42:e6:ce:29:7e:1e:17:73:7f:3b:77:
                    de:ae:8c:b0:25:6c:77:1e:dd:99:eb:06:d0:0d:7f:
                    99:bc:15:7f:2d:9d:6d:47:37:67:ef:3f:8c:af:7e:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FC:31:BB:5D:37:1D:85:0C:35:49:07:7F:B9:FB:88:3A:6A:47:E4
            X509v3 Authority Key Identifier:
                keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5a:1a:c5:76:63:aa:68:c4:c6:80:33:01:79:8f:57:14:d3:
         19:f1:ff:07:3e:2b:b9:38:b5:fb:04:3c:e3:40:07:02:4e:cc:
         98:a0:d2:53:a1:71:78:a9:94:5c:24:e2:f0:cc:3c:02:2b:a9:
         48:0e:3d:05:a2:90:a1:88:05:19:6f:71:da:2e:be:3c:7d:85:
         20:47:e5:b7:78:c8:1f:91:61:88:a7:70:af:7e:e7:59:54:83:
         70:c0:63:68:73:2e:d9:d8:79:ae:c0:b6:64:79:a5:85:06:ce:
         c8:b4:51:05:6b:37:e5:fc:49:01:a3:ee:9a:46:20:f0:f1:c1:
         4f:38:6b:81:25:6a:85:f6:dd:e9:40:c9:37:72:bb:e3:ad:b1:
         26:0d:7d:00:97:1a:ad:20:23:35:95:d1:86:17:f2:37:0a:19:
         09:9d:02:fa:58:95:f4:f7:82:79:e5:f7:e8:b4:56:f0:14:24:
         13:94:1c:eb:71:f1:8d:09:e2:dc:24:e5:79:ad:f2:46:30:ac:
         e3:b4:18:c3:bc:74:f9:4b:c7:97:6c:da:4d:14:69:81:91:43:
         4c:4c:4a:2d:5d:5a:bb:41:ab:5e:f1:0b:72:33:26:bc:f5:a6:
         e9:e3:6a:49:a4:d1:12:2c:b3:7b:eb:ee:24:96:e4:7c:3e:d0:
         bb:e7:bd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:03:27 2025 by rpki-client