Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File:                     1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier:          sf+s13qP3cDbjDqMu13wtA8KHVpN1EtrrlFoNfK0JDo=
Subject key identifier:   F4:12:C7:9E:A1:A0:B1:81:A2:58:A1:07:EF:C4:8D:D7:BB:92:22:53
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer:       /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial:       019873E442EA599261A977F4E1F542A63DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 07:03:15 +0000
Manifest this update:     Mon 04 Aug 2025 07:03:15 +0000
Manifest next update:     Tue 05 Aug 2025 07:03:15 +0000
Files and hashes:         1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: foXUgEhZuAsndQBLsOD5oGHcuTuR70mEo5374QFYpqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e4:42:ea:59:92:61:a9:77:f4:e1:f5:42:a6:3d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
        Validity
            Not Before: Aug  4 07:03:15 2025 GMT
            Not After : Aug  5 07:03:15 2025 GMT
        Subject: CN=f412c79ea1a0b181a258a107efc48dd7bb922253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:33:2a:cd:6c:5e:9e:c1:63:fc:f7:92:02:51:
                    17:12:12:d6:fe:82:91:22:a1:c2:50:ec:12:cc:dc:
                    fa:19:db:86:5c:ee:d8:84:77:f4:60:6f:fe:f8:a7:
                    ea:e3:1d:97:53:57:86:a6:1f:1a:fa:0d:61:fa:fe:
                    6a:e0:44:b8:d6:f2:78:93:9d:3a:0c:30:96:25:8d:
                    17:1a:02:c8:03:ac:2b:53:2e:af:46:05:39:fe:13:
                    c9:0d:41:15:47:69:0b:52:9a:c7:0d:84:e4:81:68:
                    43:0b:bf:cd:68:c9:ff:a0:b3:93:80:1e:c9:12:28:
                    a0:9a:5a:a9:11:6c:67:c5:fe:85:61:80:78:a0:ef:
                    4a:01:17:78:b2:50:88:a6:24:ee:73:96:40:8f:03:
                    4b:a3:32:68:91:2f:b9:4c:e2:e1:b9:7c:8d:61:40:
                    d3:fa:54:fe:e1:ca:5f:f7:fc:ee:98:a4:74:44:fd:
                    b5:99:36:56:99:7c:0e:e3:62:06:84:d4:27:75:47:
                    0a:5d:e6:ba:be:b6:f8:19:ae:00:43:48:cc:cc:6f:
                    3a:1a:96:e0:b6:96:c3:ea:e3:b5:98:93:a1:4d:b0:
                    57:5b:7e:fc:78:4b:0f:5d:6b:c5:ad:14:83:9c:f4:
                    db:88:bb:1b:6d:48:20:0f:56:ac:00:70:eb:4e:b4:
                    46:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:12:C7:9E:A1:A0:B1:81:A2:58:A1:07:EF:C4:8D:D7:BB:92:22:53
            X509v3 Authority Key Identifier:
                keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e2:8f:ed:1a:db:0d:81:78:51:84:91:14:30:14:51:c6:d8:
         06:f6:25:bd:05:20:35:55:41:1e:80:23:e4:ff:41:b9:27:80:
         c4:23:5d:c5:2d:d8:4e:d7:b9:e3:01:70:3f:00:b8:8e:8b:fd:
         df:9b:a9:b0:73:5f:db:bc:16:35:bf:5f:53:a9:c5:8b:f2:86:
         0d:f8:86:5c:1a:9f:25:13:30:23:1d:de:4c:86:bc:1d:a3:c6:
         55:3b:92:5f:de:7c:de:ad:0c:26:c1:e0:5b:15:05:7c:6d:0e:
         3b:c0:04:ee:49:22:54:ad:7f:27:bb:cd:24:6b:7d:53:59:06:
         d3:c7:43:17:32:d6:5b:6a:08:9d:63:f2:e8:e3:a7:90:ea:96:
         77:9a:be:15:81:63:4e:2c:13:87:43:c8:3f:ef:0b:d6:07:6b:
         fd:47:5f:9c:65:91:b7:9a:24:fe:98:4f:24:13:a3:5b:fd:38:
         5a:78:a1:65:52:90:bb:50:5b:b5:6d:6e:48:88:e8:0b:9d:45:
         6b:e5:9d:af:bc:1f:5e:45:91:98:b1:3d:b2:d9:58:08:08:3c:
         85:3e:7b:ad:27:9d:b1:fd:29:31:7c:47:78:4b:73:39:aa:90:
         7a:12:14:8a:e5:ac:93:d7:51:ed:14:6f:cd:0b:9b:1b:b7:d6:
         a0:c6:9f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:10 2025 by rpki-client