Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
File:                     1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft (raw, json)
Hash identifier:          Cz/iBuLl8MaP4L/wQWib2DLgSh6P47Kp+CZhArxpLMQ=
Subject key identifier:   B4:1F:78:DF:BC:3D:99:8F:36:80:57:1D:A8:06:9E:A8:5E:87:CA:86
Authority key identifier: FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
Certificate issuer:       /CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
Certificate serial:       01987B9C043333BB9EBB22753311C03F9F5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
Manifest number:          02FB
Signing time:             Tue 05 Aug 2025 19:01:18 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:18 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:18 +0000
Files and hashes:         1: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl (hash: 9f8hWw9vXosc4zd/wJ1r79dphRk/tagBgPqmkW+Gu/w=)
                          2: 4WhaxzqjOWgHeud8E6-UL9ZN_hY.roa (hash: TZDAudwyFjbRw0tzJmebPVsMRYwl0zqHqWQ1Gp1GXPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:04:33:33:bb:9e:bb:22:75:33:11:c0:3f:9f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
        Validity
            Not Before: Aug  5 19:01:18 2025 GMT
            Not After : Aug  6 19:01:18 2025 GMT
        Subject: CN=b41f78dfbc3d998f3680571da8069ea85e87ca86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3a:20:3e:f6:9b:6c:b2:af:f7:8f:fc:13:de:
                    bc:f1:53:85:7d:a4:38:c8:45:37:04:7f:84:cc:da:
                    67:90:ee:d0:f6:e3:ac:91:a9:3e:a9:9e:e3:ff:ba:
                    66:3d:53:1b:72:24:0b:16:4a:ff:97:f7:31:07:bb:
                    b8:24:a6:8f:38:7d:f8:b2:0e:8e:cc:45:d8:fe:65:
                    0e:20:0a:80:e5:97:16:a6:02:1b:53:a7:30:b7:38:
                    54:d0:46:4d:00:43:49:41:7b:9f:de:9b:14:8d:9b:
                    42:04:b3:10:f1:d3:7d:1b:4d:ea:d4:41:ce:e5:90:
                    a9:cb:50:b1:17:c7:d9:c3:70:6a:f1:5b:68:2a:25:
                    f5:be:61:9d:82:1f:b2:30:31:01:8f:a4:83:b0:29:
                    3e:d9:9a:85:9b:74:28:df:66:92:ea:ad:e4:c8:14:
                    42:91:e5:18:11:9f:0d:f7:7a:dd:bf:e7:68:39:87:
                    76:c8:d5:3e:44:d0:61:35:64:04:b8:90:e2:16:d9:
                    4d:57:a2:5e:50:46:c8:55:03:dc:3e:4a:e5:c5:43:
                    75:ab:d9:2d:66:e8:ce:5a:ac:24:57:9e:e6:09:91:
                    09:90:1c:cf:14:34:08:1c:c8:db:8c:0f:3c:f9:af:
                    c4:e9:82:76:3a:c9:b3:fe:d7:6e:d7:a2:25:0c:7d:
                    e6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1F:78:DF:BC:3D:99:8F:36:80:57:1D:A8:06:9E:A8:5E:87:CA:86
            X509v3 Authority Key Identifier:
                keyid:FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:af:9e:76:52:ae:a5:08:30:6d:ca:43:c1:60:ad:0e:25:e5:
         36:2f:2e:4a:ef:45:73:a6:3a:f2:f7:41:b7:f6:36:44:b5:08:
         b7:f7:93:82:40:ba:c0:f8:2a:9f:d3:0e:a2:30:6e:77:6a:36:
         ac:91:c2:74:7a:12:ed:5f:96:79:f3:54:72:24:bc:8b:d3:c5:
         61:a8:08:eb:48:ec:ea:8f:c8:fd:1b:1c:c0:58:77:08:11:99:
         35:f2:f8:c0:5c:5d:2c:32:ca:32:ae:0a:3f:e9:c5:33:21:7c:
         0f:60:bb:7a:f4:d6:bc:32:df:a8:18:00:b5:63:b7:8f:67:5d:
         83:3b:73:e6:be:a4:0e:83:fd:ee:99:3d:5d:89:e0:73:97:53:
         b4:c8:af:be:8b:2d:b0:f2:74:1e:73:16:bd:9b:37:2d:65:19:
         28:00:6c:24:0d:0a:7b:51:ac:ad:5e:8a:e2:00:d1:53:e1:07:
         ef:cf:c5:ad:64:f1:e1:a5:51:ff:e5:ec:20:8a:9f:01:0d:e9:
         75:42:5b:65:ad:ae:a0:bd:5e:f7:a0:d7:99:7b:85:03:d4:25:
         d0:cf:3b:19:e3:e5:b0:4e:42:53:e9:07:b3:8f:82:28:ba:40:
         e5:ac:a1:78:e2:43:84:8e:50:e6:03:68:72:4c:2f:b8:15:73:
         32:b1:c1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:36:38 2025 by rpki-client