Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
File:                     1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft (raw, json)
Hash identifier:          GiHmedlKqVNihInQzdXQWt5d1VhONPrIN1nAnUN8XH0=
Subject key identifier:   BF:AB:8F:E8:55:25:05:1E:FF:F5:55:87:F0:61:B4:46:B4:AB:5E:48
Authority key identifier: FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
Certificate issuer:       /CN=fb02f648de95b88479364346ed01e78769577922
Certificate serial:       019873743015C45644BA3F9B3FDEC41166D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
Manifest number:          1613
Signing time:             Mon 04 Aug 2025 05:00:50 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:50 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:50 +0000
Files and hashes:         1: 1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl (hash: 10gXfiS/qc//KgfQ4u5FJ8azBnkV0nJoLlT6rgsX8EI=)
                          2: 3vK4gZC4TPB0-MQ6z0IE1oo3VSw.roa (hash: j0jyYdSsynnhoRf7eCK9ZvXX/Rp4LU5VAHZHpRm0UEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:30:15:c4:56:44:ba:3f:9b:3f:de:c4:11:66:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb02f648de95b88479364346ed01e78769577922
        Validity
            Not Before: Aug  4 05:00:50 2025 GMT
            Not After : Aug  5 05:00:50 2025 GMT
        Subject: CN=bfab8fe85525051efff55587f061b446b4ab5e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9d:a9:2a:30:3b:f9:d1:e0:ae:05:60:17:56:
                    1a:d1:95:7e:71:de:44:38:df:fd:29:aa:1d:e2:22:
                    2f:98:08:35:b4:fd:fb:65:7b:96:c5:80:b8:5d:42:
                    86:3f:91:df:7f:72:fc:ba:91:a1:17:dc:5d:75:67:
                    cf:b8:ad:28:23:c1:96:89:d6:57:3c:ea:4d:07:32:
                    09:e9:48:e5:e8:0e:e0:f2:8c:4d:7f:0e:46:6a:f6:
                    cc:59:e7:61:0c:c1:4b:10:00:c6:a6:d4:a5:3a:31:
                    fb:f0:4d:24:f0:12:54:c1:07:d7:a4:97:ac:08:50:
                    1a:3c:d8:72:54:ed:ba:8b:44:37:dc:d7:3c:f4:ba:
                    91:9c:c3:6f:7e:58:1e:1e:cd:41:2b:a6:3b:75:f9:
                    15:dd:11:2d:c0:8a:90:1e:89:e7:ba:7d:fd:8a:c6:
                    0d:ac:51:7f:97:bf:02:aa:21:6e:69:6b:74:11:ee:
                    bb:79:fa:31:6c:6c:db:11:f3:38:6c:fa:9b:6f:63:
                    bb:99:58:e3:ae:56:4e:29:9a:14:1c:a0:89:b1:f4:
                    b2:a8:f3:9b:e1:06:42:6b:c7:1f:17:6e:6a:1e:65:
                    7d:d5:df:cf:3b:10:72:cc:d7:71:90:90:ee:14:a7:
                    d1:ef:1f:e6:a7:31:40:eb:22:b2:62:9c:3d:11:a5:
                    a5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AB:8F:E8:55:25:05:1E:FF:F5:55:87:F0:61:B4:46:B4:AB:5E:48
            X509v3 Authority Key Identifier:
                keyid:FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1c:03:0b:88:4f:c4:fe:56:d0:84:ae:a3:d4:9e:75:25:19:
         3f:9f:eb:b8:f2:32:78:12:a8:22:bd:d6:73:56:cb:44:65:3a:
         99:26:cd:ac:de:1c:00:3e:8c:5e:ee:0d:8f:10:38:30:e0:0a:
         7e:e4:aa:2c:c9:98:7f:c5:d9:e9:ef:3d:f5:09:91:e3:ee:70:
         7a:d5:35:50:77:f3:db:b7:7b:13:09:a3:8b:b3:c7:9b:25:72:
         30:54:5c:1d:f8:81:d5:37:41:11:3d:a0:64:f0:14:26:cf:56:
         49:04:98:a5:03:a2:10:cf:3c:2a:af:36:6e:11:c6:99:5b:02:
         62:c8:2b:bb:d5:04:35:0f:c5:da:af:60:4c:83:37:45:4f:0b:
         01:35:f5:c9:3a:7f:35:7c:39:17:4b:25:06:ac:0f:77:22:e5:
         4d:2f:62:2c:48:67:78:ef:82:e9:ae:3c:0e:18:cd:2b:9c:c5:
         12:05:0c:7e:b0:d4:80:2c:11:f8:72:f4:e4:d9:1e:d6:77:89:
         17:d1:28:9c:0e:95:44:b2:9d:36:15:68:e4:c9:31:fc:e9:78:
         b9:9f:56:d7:0d:83:aa:ad:bd:65:6a:cf:f6:0a:78:2e:d7:bd:
         94:75:e5:7a:9b:0b:11:14:e2:b8:3e:a5:12:7e:e3:d0:64:ce:
         48:cb:ec:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:05 2025 by rpki-client