Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File:                     1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier:          jG5/BNpOUdgf+eaUZtwU+esH06gBRuqgELSMj5WW820=
Subject key identifier:   6B:DC:41:5A:67:C5:90:13:49:00:19:42:0D:67:AD:FC:9E:D0:DA:FD
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer:       /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial:       01987AC03012C907156AC019915434E46DED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number:          03A1
Signing time:             Tue 05 Aug 2025 15:01:12 +0000
Manifest this update:     Tue 05 Aug 2025 15:01:12 +0000
Manifest next update:     Wed 06 Aug 2025 15:01:12 +0000
Files and hashes:         1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: 2QP7fV1Y7UCNUmWuILGSbGL+QpMhLApOTjZyhERBUNE=)
                          2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:c0:30:12:c9:07:15:6a:c0:19:91:54:34:e4:6d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
        Validity
            Not Before: Aug  5 15:01:12 2025 GMT
            Not After : Aug  6 15:01:12 2025 GMT
        Subject: CN=6bdc415a67c59013490019420d67adfc9ed0dafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:62:f1:ca:aa:37:34:48:09:2c:cd:f4:02:
                    07:ec:bb:ca:34:44:38:bd:ae:d6:6e:60:84:49:da:
                    e1:41:68:3d:68:bc:4a:51:a6:2f:16:ae:5f:68:62:
                    cd:6e:5f:46:ca:18:14:ff:3f:27:2c:4f:b3:d9:be:
                    86:56:2f:22:6f:a2:05:78:17:2a:f7:2c:16:57:bd:
                    e6:76:e4:6b:73:8d:0e:3f:fe:21:c4:ed:e3:33:8b:
                    56:97:e0:4a:29:40:d7:8e:75:cb:f7:b5:86:47:48:
                    51:00:3f:0f:2e:3d:e7:0f:db:1f:f7:c5:56:96:b8:
                    d6:f8:15:d8:2b:8f:67:e0:7a:c6:2a:56:30:6f:1f:
                    87:90:21:47:cf:5e:38:88:30:c3:8c:9b:ed:be:3c:
                    aa:00:86:fc:9c:90:7c:0c:aa:ce:b5:31:86:d2:34:
                    03:1d:40:bf:a6:84:30:90:18:98:e1:41:2f:b2:5e:
                    a6:2f:cf:7d:a2:c1:2a:be:a9:ec:11:b0:8a:1d:31:
                    e5:f1:c9:d0:25:a9:0d:fa:bc:cf:53:85:20:6a:8d:
                    a9:05:99:d7:65:62:a1:a4:2e:d2:ba:a2:28:ab:24:
                    53:22:6e:5f:b7:c0:24:3b:44:88:56:a0:b3:74:04:
                    d3:2d:e7:a5:ff:d1:43:9e:fa:a9:db:ec:ca:4f:4a:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DC:41:5A:67:C5:90:13:49:00:19:42:0D:67:AD:FC:9E:D0:DA:FD
            X509v3 Authority Key Identifier:
                keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:67:6f:85:77:e0:ad:40:c4:52:cb:47:e6:c2:ba:18:ce:71:
         41:bd:e3:d1:5b:1b:7d:c4:61:9a:94:c7:3e:30:45:a6:4a:1e:
         8d:20:00:d6:8a:d0:40:f8:0c:f3:5c:f2:57:cf:67:41:e1:73:
         1b:35:fc:26:fb:46:25:9e:fd:32:67:9e:da:69:07:1b:75:8c:
         34:0d:5e:64:a9:f6:61:a3:cb:5d:49:79:12:d3:8d:9d:f8:3c:
         d5:f1:3a:15:31:09:0d:ae:7a:ae:0f:76:e1:5d:80:15:44:79:
         ce:64:ad:2d:01:cb:e1:44:86:55:91:14:b8:97:96:b9:12:43:
         1e:90:27:82:7c:72:32:0d:c1:5a:0e:03:ce:05:ca:1a:50:52:
         37:66:20:1b:3f:55:1b:c2:73:61:2d:ca:60:c2:60:c4:9d:64:
         88:eb:81:cb:6e:58:28:39:4a:30:7a:1b:9a:d1:65:2d:c1:a3:
         f1:e5:a9:18:f7:76:7f:25:99:55:63:20:1a:cd:43:38:61:6c:
         78:1c:2e:4e:f2:11:32:8c:8c:fc:70:77:fa:9d:23:41:ae:5c:
         fe:e9:21:c5:22:1b:3f:4b:e8:c5:f2:0a:81:13:65:1e:5a:55:
         a5:f1:da:2b:00:38:8a:f6:09:47:f8:eb:00:80:3d:44:e9:1d:
         29:cc:42:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:13:08 2025 by rpki-client