Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
File:                     1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json)
Hash identifier:          hAW38sAOvw8/RNhrYCFcFA78G3YVyAXuqiOG+Q2V9RY=
Subject key identifier:   AE:E6:E4:DD:66:BA:66:EE:8E:85:35:94:FA:94:FA:05:76:62:E4:4E
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Certificate issuer:       /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial:       019784D7C6BC59FFC5748B585208841C7B77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
Manifest number:          159F
Signing time:             Wed 18 Jun 2025 21:00:22 +0000
Manifest this update:     Wed 18 Jun 2025 21:00:22 +0000
Manifest next update:     Thu 19 Jun 2025 21:00:22 +0000
Files and hashes:         1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: XjBUkIjvNTTtpjz7wOw5Ib6sv5ZbVscOELOFRAXUDDM=)
                          2: ATt1aqdGeZ5ixfMp8_Jy6L59z-k.roa (hash: 1oMcUF44dyNpkmaMAlxiex9uPcgAT7lFT4Xu+m6Gsb4=)
                          3: Bff4rC9WehOBomJppT-ehbDxZW4.roa (hash: q/9WBUlXsXmwHmLM8/yFjUu0wOhpnsihoEn5zg6jhjM=)
                          4: x2L_c-RSS740XaVwlO7VHobnubM.roa (hash: Qfrg68gfwO9o79kr2HCZELwrxwBVoekGLKNYHsG1PJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 21:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:84:d7:c6:bc:59:ff:c5:74:8b:58:52:08:84:1c:7b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
        Validity
            Not Before: Jun 18 21:00:22 2025 GMT
            Not After : Jun 19 21:00:22 2025 GMT
        Subject: CN=aee6e4dd66ba66ee8e853594fa94fa057662e44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:91:8d:6c:ae:a7:de:66:f4:bf:89:e1:53:
                    e0:45:84:11:6c:9c:bb:b1:41:be:ba:94:a4:af:0c:
                    1e:77:36:38:07:ef:86:c6:d8:8a:1d:01:b9:39:65:
                    cf:3b:8e:9a:f6:75:a4:11:ae:23:aa:ec:d6:65:b5:
                    e3:e1:ff:ee:22:54:c8:28:2f:7b:40:46:8d:b2:7a:
                    fa:e3:ff:10:f5:5b:37:b1:a2:8f:3f:10:b1:13:6a:
                    cd:22:a2:6d:52:9d:4a:bf:db:9f:02:83:c2:08:f5:
                    50:a1:4e:b4:c8:67:5c:03:80:5c:4a:f6:6b:69:cc:
                    cb:7d:74:d8:cf:cb:4d:8f:2e:6e:e1:e5:23:8c:7c:
                    1e:db:59:53:9d:d4:56:17:a9:a2:16:b3:13:4d:c7:
                    dc:60:99:12:9c:f5:9f:27:72:52:99:83:51:88:98:
                    39:62:a5:f1:7a:d9:59:7e:6b:06:57:df:a7:2b:35:
                    af:58:e0:a2:0f:9b:b2:be:21:ec:8e:d2:db:3c:66:
                    f7:3f:d4:1a:50:3c:f0:ec:3a:ea:d7:ef:0b:69:4d:
                    c4:bc:5e:43:9c:50:35:ca:54:bb:2d:56:8a:58:45:
                    90:79:ca:c3:3d:fd:2a:77:53:6f:4c:db:33:dd:55:
                    1e:32:8b:63:2a:51:2c:e8:3b:6e:01:6e:e3:b6:a3:
                    b4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E6:E4:DD:66:BA:66:EE:8E:85:35:94:FA:94:FA:05:76:62:E4:4E
            X509v3 Authority Key Identifier:
                keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:35:d3:31:07:9b:d7:c2:9e:82:d3:8f:09:a3:a7:7f:b2:39:
         4f:2e:c7:7b:a8:d3:c3:6e:cb:02:49:6c:ac:86:25:5e:0d:5f:
         ce:db:48:c9:f6:a8:9d:bb:1c:bd:1a:04:d3:e6:31:b6:67:69:
         fc:d2:fc:a7:ee:c5:16:3d:03:3d:87:43:b7:ca:26:0c:5e:64:
         8f:83:a9:f4:04:8c:38:11:ba:f2:03:a7:b1:42:30:46:28:1b:
         ba:c3:6c:ec:11:d3:0b:8f:5e:a3:cb:ab:95:c7:b2:f9:c5:69:
         0b:f9:ab:d1:79:7f:38:70:de:49:8c:61:3a:c3:e0:27:57:7e:
         4f:ee:7c:c1:0c:83:37:66:e8:e4:48:ae:01:4f:59:af:59:36:
         5e:8f:50:71:2d:fb:d4:f4:d8:7a:88:a2:df:85:29:69:2f:81:
         44:4d:cd:bb:40:dd:46:45:66:69:83:e5:2d:83:fe:7a:ad:e5:
         07:cf:68:f2:52:a1:91:fa:fa:30:9a:2e:4e:d1:8f:b5:9b:f7:
         74:b2:a2:0f:c0:dc:73:86:09:2d:8d:8c:5d:09:69:67:2d:87:
         cb:a9:ac:c8:eb:67:97:bb:9b:ab:20:ad:23:55:cc:70:07:8f:
         0f:08:0a:36:a9:b2:75:70:eb:cf:6b:3a:86:83:54:48:6b:24:
         25:b1:5a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:48:39 2025 by rpki-client