Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File:                     1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier:          t6nGUeS9qpS6D7VzvbSGI6C9eRLfojs0oQ8uNtrdR68=
Subject key identifier:   49:2A:FA:2A:31:86:54:74:5D:53:D2:F4:50:76:31:A3:1C:68:2F:84
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer:       /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial:       019896375F5AAFE359B353CD5A851E565144
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number:          0B61
Signing time:             Sun 10 Aug 2025 23:01:07 +0000
Manifest this update:     Sun 10 Aug 2025 23:01:07 +0000
Manifest next update:     Mon 11 Aug 2025 23:01:07 +0000
Files and hashes:         1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: SvhOpCYCjmWsZCegWC4chOda0bnXBEGtn665ADXzV30=)
                          2: 17Ijw7DnA-ky4M-qBTdOY4I7ec4.roa (hash: iu+mQ1jbZcSsyxSnbAMCeHovGJfrloyLqIxmClTwTuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 23:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:37:5f:5a:af:e3:59:b3:53:cd:5a:85:1e:56:51:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
        Validity
            Not Before: Aug 10 23:01:07 2025 GMT
            Not After : Aug 11 23:01:07 2025 GMT
        Subject: CN=492afa2a318654745d53d2f4507631a31c682f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3a:ed:04:ce:15:5a:7e:19:e7:6a:5c:4a:9a:
                    fc:86:b6:68:b2:29:08:66:07:38:a9:f8:bd:90:cc:
                    80:ec:0e:4a:21:62:f7:90:e6:5d:2a:e9:c1:34:d6:
                    c3:be:f6:7d:58:cd:78:c4:ad:8f:15:0f:02:6a:e6:
                    ef:ca:eb:0a:8a:40:0b:44:46:ae:ab:06:27:a1:b2:
                    6f:18:9c:48:b2:74:aa:ce:cc:9c:14:b3:6a:2d:cf:
                    3e:c8:47:20:0a:09:4f:6a:fa:90:42:34:5e:91:61:
                    23:12:66:be:ae:8d:bf:8a:56:c1:17:c1:0e:c2:e6:
                    87:ca:e9:b8:87:99:60:e4:da:63:06:19:7c:f4:5e:
                    c5:29:ad:63:3c:cc:f4:ec:d0:6f:1c:5e:c2:b7:1a:
                    2f:2f:32:54:2f:63:c4:d8:8b:1c:fe:e6:e6:eb:13:
                    78:8f:41:6e:7d:47:68:c5:e1:7d:7d:fd:cf:a9:bd:
                    ed:12:83:27:0e:f4:2b:3b:1f:cb:1d:ad:7e:8c:6d:
                    89:c3:a9:81:52:33:98:07:80:a5:5b:2b:8a:0f:7a:
                    dc:7b:57:0e:db:10:e7:f4:b3:cd:15:20:a4:e2:a3:
                    f4:fe:65:1c:08:75:b2:18:76:9b:23:45:05:a9:10:
                    19:ba:86:c0:78:c0:f2:10:fc:87:df:29:16:33:32:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2A:FA:2A:31:86:54:74:5D:53:D2:F4:50:76:31:A3:1C:68:2F:84
            X509v3 Authority Key Identifier:
                keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:cb:13:65:c0:3e:53:67:89:d5:52:93:4e:6d:44:6e:b3:04:
         0f:e9:81:b4:d2:f6:ba:c8:a5:80:75:63:e9:3c:77:5a:14:10:
         0a:d2:97:94:58:90:fd:8d:6c:47:7f:6c:9a:bb:1a:4a:3b:4a:
         9c:f7:af:64:e0:a9:4d:82:07:21:30:d2:b5:08:3a:8d:e6:c9:
         26:17:aa:71:ca:bb:93:e6:d1:85:af:d9:f7:f8:b0:32:73:5d:
         73:49:1e:25:9f:56:b6:1b:0a:f6:7a:a5:fc:7d:43:5e:d1:1c:
         2d:22:b4:f8:7c:96:7a:5b:84:97:7a:5a:a9:92:df:12:bf:74:
         7a:de:67:0f:8e:52:85:ce:03:b1:0d:e0:5c:a8:ed:54:6e:37:
         91:d0:34:e0:de:da:a0:0a:61:74:28:4d:7d:28:19:df:05:4f:
         36:cc:9a:29:5e:fa:40:f5:86:eb:e4:93:82:60:13:93:9a:8c:
         3c:a1:3c:ea:f0:0c:11:22:d4:9b:8c:36:f3:01:6f:84:a5:f9:
         58:ca:0f:15:d4:d9:ba:30:14:bf:39:12:d3:68:f5:61:23:54:
         7c:e1:fe:f0:70:d8:a0:d9:8a:cd:77:c3:d3:79:c5:a6:92:4e:
         4c:d6:0b:2d:1b:6e:de:96:0a:4e:c9:fe:28:b7:24:72:73:c0:
         de:94:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:18:32 2025 by rpki-client