Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File:                     1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier:          nOmPCV8Ocpa9P6NI9A1dr+S1DUMrdt8mpKzCnVnJCNc=
Subject key identifier:   E8:D8:73:1C:EF:35:4B:E7:40:55:57:36:0D:C1:F1:40:D2:41:2D:38
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer:       /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial:       019880C2455826535120AD37161821EB3135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number:          142B
Signing time:             Wed 06 Aug 2025 19:01:12 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:12 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:12 +0000
Files and hashes:         1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: ZfvtkIbsIMYkGthtvEGWjslyNcIWK0NF8jlbRWHLIIE=)
                          2: BkhUnEeKLpdw7zqQsCW8fb_TG_I.roa (hash: krWgcFHtgzZmGIlUNG6InVr0KfezPC+cFYoPcdTkKaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:45:58:26:53:51:20:ad:37:16:18:21:eb:31:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
        Validity
            Not Before: Aug  6 19:01:12 2025 GMT
            Not After : Aug  7 19:01:12 2025 GMT
        Subject: CN=e8d8731cef354be7405557360dc1f140d2412d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3b:45:c7:c4:e0:49:98:57:55:75:00:f0:c7:
                    d6:48:6f:0d:70:28:d2:23:54:a9:c1:56:96:56:d3:
                    54:f9:f6:46:08:10:41:69:6e:ee:d8:1f:4b:b7:4e:
                    fa:42:93:e3:48:99:32:06:15:d0:f8:b6:cb:da:6e:
                    77:ad:dc:9b:2c:85:ce:fc:97:53:28:8b:7a:bf:31:
                    b5:58:e2:ba:0e:b8:8e:d4:75:45:69:ad:46:82:86:
                    37:e2:7d:03:04:d4:7f:ec:f6:66:4c:ae:f7:cb:58:
                    f9:9f:08:fb:06:db:a7:52:80:8b:87:26:3c:76:bf:
                    d3:8e:5c:76:8f:83:ab:bc:94:51:52:4a:9c:be:a0:
                    26:47:73:70:83:ce:bd:de:73:3a:05:36:09:50:0e:
                    7b:96:21:a0:11:75:29:00:8f:7a:48:e9:e1:c3:c0:
                    94:0e:fe:db:f3:33:1f:fb:48:6e:a3:07:fc:99:a5:
                    de:ed:be:f5:11:cc:44:2d:98:c5:c7:f9:60:43:53:
                    15:78:2d:10:6f:f7:5c:3d:ed:00:f5:20:e5:e9:b6:
                    28:52:51:6a:54:21:55:08:92:39:fc:92:5b:59:a6:
                    28:a7:3e:f5:83:2a:42:87:f0:13:78:b0:a4:48:56:
                    ce:af:b1:31:23:41:a9:fc:26:cc:2c:b7:5f:12:a0:
                    75:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D8:73:1C:EF:35:4B:E7:40:55:57:36:0D:C1:F1:40:D2:41:2D:38
            X509v3 Authority Key Identifier:
                keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a3:91:37:cd:84:43:eb:17:be:f1:15:72:f7:08:90:90:8c:
         f7:78:ff:ac:0d:a8:5d:df:29:b0:88:93:75:b7:cf:a0:44:24:
         7e:cf:8a:c3:89:9f:af:d6:17:a0:5a:39:14:cb:69:78:b1:61:
         c9:55:d1:f1:90:90:3f:5f:39:16:a8:cc:d5:6d:87:0f:4b:dc:
         82:7f:c4:f6:3e:e5:c4:73:f8:01:37:3a:96:c6:f7:74:65:3c:
         7c:0a:3f:7a:26:d5:89:34:64:8b:1d:54:48:e0:ea:31:5b:82:
         3d:9f:5e:bc:b8:b0:cb:aa:63:1c:86:ec:7e:89:0b:da:1e:ea:
         cf:0d:53:73:2d:7f:5f:c7:fe:50:07:0a:4a:8b:43:4f:8c:8b:
         60:99:63:f1:ee:ad:37:c9:90:c7:e2:45:c2:b5:b0:49:05:da:
         0d:c8:fd:6b:76:a6:63:5e:6a:0b:4b:74:8e:29:bf:c2:36:4a:
         10:14:d9:84:b8:77:1a:ea:39:4d:5d:07:c9:0e:e7:a9:41:9f:
         fe:5a:a9:60:c5:42:b0:3d:8d:ab:4d:85:01:38:2d:52:69:da:
         e2:db:55:97:ad:56:56:eb:c8:58:cb:6a:11:91:e7:2f:9e:2b:
         01:44:4a:ab:42:ec:d7:99:17:f6:13:40:db:57:c9:e7:8c:b1:
         27:8a:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:11:11 2025 by rpki-client