Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
File:                     1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft (raw, json)
Hash identifier:          jtbJ8EbojH4lHwvEZZtTQ9H5KtSE2KcpdlYP9uik3aM=
Subject key identifier:   AB:3C:0F:81:90:E5:18:68:55:E1:19:57:21:05:EA:E1:55:0A:06:D0
Authority key identifier: FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
Certificate issuer:       /CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Certificate serial:       0198752C33F35309DAD3B79EDAE30BE41DC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
Manifest number:          071C
Signing time:             Mon 04 Aug 2025 13:01:27 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:27 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:27 +0000
Files and hashes:         1: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl (hash: jg0PnZ5nc6nS9TIgnn4uyFOTXr9/SYZTcKW4AgDfbmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2c:33:f3:53:09:da:d3:b7:9e:da:e3:0b:e4:1d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa14af16e589f9848fc695d057f81c167e8f63d5
        Validity
            Not Before: Aug  4 13:01:27 2025 GMT
            Not After : Aug  5 13:01:27 2025 GMT
        Subject: CN=ab3c0f8190e5186855e119572105eae1550a06d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fb:45:21:80:58:71:73:27:d4:95:37:51:ca:
                    53:a8:21:48:ed:51:af:cc:b1:ae:18:9c:4a:dc:c0:
                    c8:7d:8d:e6:4c:c5:56:23:56:38:ce:9b:2e:c6:5d:
                    d7:57:6b:52:c8:4d:52:ed:28:ba:73:58:b1:d7:f3:
                    e9:a5:b1:be:75:1e:5f:20:01:90:cb:4d:31:08:fd:
                    cd:df:dd:31:13:0f:64:52:2f:d0:a3:d0:b1:bf:24:
                    10:ca:c2:1e:9d:b1:bc:7d:7d:c0:76:d2:58:94:8c:
                    40:a9:bb:5c:8e:f4:fe:a8:a6:7b:7e:07:92:9b:d2:
                    82:25:3f:65:9b:2e:3c:ce:91:07:2b:e1:d9:e5:9f:
                    6f:73:26:d1:8f:b0:f5:7d:0e:a6:64:b3:cf:67:18:
                    9c:60:3c:6d:a0:63:ac:6b:e0:c2:1f:87:de:62:08:
                    70:b7:f1:3e:f0:05:9f:ca:b6:1c:d7:f2:0c:7a:f9:
                    65:b3:f9:e7:cf:b1:ae:03:69:4c:39:ec:5a:54:38:
                    14:3c:cf:b1:4d:ac:78:44:53:8e:91:ab:8e:ed:81:
                    6f:b5:13:e4:51:f0:44:3b:08:99:c9:dc:64:54:4d:
                    d9:e4:dd:d7:b0:75:8f:08:1d:53:e9:e7:cc:c4:df:
                    1e:7a:3c:9c:47:b5:3d:d2:34:2c:4e:02:c4:8e:36:
                    22:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3C:0F:81:90:E5:18:68:55:E1:19:57:21:05:EA:E1:55:0A:06:D0
            X509v3 Authority Key Identifier:
                keyid:FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f8:74:d4:fc:8f:49:15:b5:c0:d6:43:2f:02:06:8c:41:d6:
         2e:10:59:97:44:9c:4e:38:ce:60:b3:be:7f:d1:1a:5d:81:fb:
         84:40:34:9b:e5:47:1e:f7:b1:5c:58:e7:44:de:7d:1d:3b:18:
         20:97:87:03:15:94:6b:c3:7f:d6:a9:21:84:4c:c0:86:9b:7c:
         47:cf:dd:b9:18:bc:0f:be:47:36:a0:b9:69:6f:19:f7:1a:ac:
         bf:bd:ae:cf:ee:84:dd:c4:c3:65:17:dd:a1:9c:7f:e6:49:5c:
         1d:34:83:ff:70:33:89:6d:21:7b:25:53:ea:93:cd:38:b3:1a:
         f2:31:82:20:e6:d7:e6:06:4b:37:e3:15:80:12:5f:52:aa:bc:
         1e:e3:b7:47:d6:55:e7:ac:fd:00:e0:40:62:c8:35:27:df:8a:
         d3:de:0e:a2:78:d0:3a:06:44:fd:74:c2:30:6a:b7:84:8c:e8:
         1b:b1:b9:4b:97:fa:06:6f:2b:92:3d:5e:45:15:a6:d6:1f:55:
         cb:3c:2f:53:ad:84:cf:58:34:19:f2:51:2c:71:96:7e:3c:3b:
         4c:f7:f9:12:73:3f:57:a3:fc:13:fb:5f:e1:24:e7:66:1b:55:
         7e:dc:dd:22:82:3d:a3:ce:a3:7c:cf:3a:23:50:39:81:de:69:
         b2:d5:d5:16
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZh1LDPzUwna07ee2uML5B3HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTRhZjE2ZTU4OWY5ODQ4ZmM2OTVkMDU3ZjgxYzE2N2U4
ZjYzZDUwHhcNMjUwODA0MTMwMTI3WhcNMjUwODA1MTMwMTI3WjAzMTEwLwYDVQQD
EyhhYjNjMGY4MTkwZTUxODY4NTVlMTE5NTcyMTA1ZWFlMTU1MGEwNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PtFIYBYcXMn1JU3UcpTqCFI7VGv
zLGuGJxK3MDIfY3mTMVWI1Y4zpsuxl3XV2tSyE1S7Si6c1ix1/PppbG+dR5fIAGQ
y00xCP3N390xEw9kUi/Qo9CxvyQQysIenbG8fX3AdtJYlIxAqbtcjvT+qKZ7fgeS
m9KCJT9lmy48zpEHK+HZ5Z9vcybRj7D1fQ6mZLPPZxicYDxtoGOsa+DCH4feYghw
t/E+8AWfyrYc1/IMevlls/nnz7GuA2lMOexaVDgUPM+xTax4RFOOkauO7YFvtRPk
UfBEOwiZydxkVE3Z5N3XsHWPCB1T6efMxN8eejycR7U90jQsTgLEjjYiuQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKs8D4GQ5RhoVeEZVyEF6uFVCgbQMB8GA1UdIwQY
MBaAFPoUrxblifmEj8aV0Ff4HBZ+j2PVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oU3ZGdVdKLVlTUHhwWFFWX2djRm42UFk5VS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvNmY1MDJhLWZkNmYtNDI3OC05Y2U4
LWNhNTFlYmYzYjM1Zi8xLzEtaFN2RnVXSi1ZU1B4cFhRVl9nY0ZuNlBZOVUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg0LzZmNTAyYS1mZDZmLTQyNzgtOWNlOC1jYTUxZWJmM2Iz
NWYvMS8xLWhTdkZ1V0otWVNQeHBYUVZfZ2NGbjZQWTlVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfh0
1PyPSRW1wNZDLwIGjEHWLhBZl0ScTjjOYLO+f9EaXYH7hEA0m+VHHvexXFjnRN59
HTsYIJeHAxWUa8N/1qkhhEzAhpt8R8/duRi8D75HNqC5aW8Z9xqsv72uz+6E3cTD
ZRfdoZx/5klcHTSD/3AziW0heyVT6pPNOLMa8jGCIObX5gZLN+MVgBJfUqq8HuO3
R9ZV56z9AOBAYsg1J9+K094OonjQOgZE/XTCMGq3hIzoG7G5S5f6Bm8rkj1eRRWm
1h9VyzwvU62Ez1g0GfJRLHGWfjw7TPf5EnM/V6P8E/tf4STnZhtVftzdIoI9o86j
fM86I1A5gd5pstXVFg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:25:39 2025 by rpki-client