Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File:                     1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier:          Z/RXmdFa3yaggVx3yhupDw8WQ55iMWEYCmT7o9mCfQw=
Subject key identifier:   6B:89:73:21:B3:6C:EC:0D:8F:DC:88:C2:6E:67:9F:CB:02:61:E4:2C
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer:       /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial:       019886C44ADA9400647EAC6F258BC4ABA17C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number:          0FCC
Signing time:             Thu 07 Aug 2025 23:01:07 +0000
Manifest this update:     Thu 07 Aug 2025 23:01:07 +0000
Manifest next update:     Fri 08 Aug 2025 23:01:07 +0000
Files and hashes:         1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: FEkzMmnDxqIAJ7VZBKQXrivdYfSbvAipFRKoX2s4v/s=)
                          2: TcLtt8MW6k1lXpNgBVH9jdy5v60.roa (hash: wy80lGUvnlcwv01nCG8qqLZ0l9j+IjMXtN6aRV+obm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:86:c4:4a:da:94:00:64:7e:ac:6f:25:8b:c4:ab:a1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
        Validity
            Not Before: Aug  7 23:01:07 2025 GMT
            Not After : Aug  8 23:01:07 2025 GMT
        Subject: CN=6b897321b36cec0d8fdc88c26e679fcb0261e42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a1:a9:4b:3b:9c:da:e4:ef:82:af:ab:07:90:
                    20:fc:e5:d0:cd:63:5d:8e:ce:e0:fb:87:4c:33:36:
                    30:96:b3:1d:ac:71:f3:f4:4e:97:16:a9:68:2f:e6:
                    fe:d9:8e:81:2a:38:fd:b2:7f:dd:cc:c5:b1:27:8d:
                    b0:b8:37:59:ea:db:2f:e2:f5:0d:3f:d5:72:7b:c0:
                    97:5e:2a:8a:fb:cc:79:23:80:63:ff:a0:ff:25:8a:
                    27:c3:55:d1:bd:61:2d:f1:b1:f6:05:57:0d:4c:56:
                    12:d1:c1:52:14:b1:45:97:e8:22:9d:4c:39:58:d8:
                    93:5c:48:f0:c7:dc:ef:a6:e4:a8:5b:4b:0d:aa:a6:
                    9f:13:77:6d:3c:b8:55:d6:6d:be:83:3f:c1:ee:fc:
                    8b:0f:12:57:3c:ff:3a:6c:f0:3c:f1:c2:79:96:41:
                    0f:f1:dd:10:84:91:81:4a:83:43:05:fb:97:e1:76:
                    8e:5a:33:f6:19:b3:2d:8a:d6:bd:1b:b1:0d:b6:41:
                    ff:e8:c7:69:53:90:d3:f8:4a:b2:f7:d9:e9:65:22:
                    b7:2f:62:f6:9b:e6:df:dd:16:de:74:0e:e8:c5:4b:
                    2a:09:51:d0:d3:95:0b:aa:33:01:20:44:84:80:cf:
                    fa:d1:61:ac:14:b2:91:c1:2f:85:41:f1:35:81:06:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:89:73:21:B3:6C:EC:0D:8F:DC:88:C2:6E:67:9F:CB:02:61:E4:2C
            X509v3 Authority Key Identifier:
                keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f3:a9:7f:ba:64:5f:bf:57:47:0c:49:44:ab:ac:d0:0b:59:
         86:b5:48:9d:3d:ee:33:33:0e:40:fe:d4:9e:30:1d:4e:35:1b:
         26:3b:67:fd:fa:3b:3f:12:2b:71:d2:28:ea:de:48:57:d6:ca:
         1b:9c:65:b4:95:af:90:ea:47:a5:b1:10:55:a7:9d:3a:1f:fb:
         e3:2c:b5:19:a2:ab:64:24:6e:95:52:2b:a2:9b:76:35:35:de:
         d2:45:1f:3d:63:d5:b4:3f:2c:0d:b0:d0:16:a4:f7:e9:b4:86:
         27:ea:45:93:b9:58:b4:5c:8f:c9:3f:27:2b:f8:00:65:4d:c2:
         cd:23:a8:1a:d6:a8:02:8c:61:db:58:e8:4d:e4:17:01:d3:3e:
         29:08:9a:a3:08:3e:5a:86:06:87:5b:92:6a:c7:81:8a:57:e0:
         a9:82:76:83:6f:ab:f9:e1:86:97:56:0c:2d:ef:ab:c6:65:25:
         1d:25:87:20:f8:7f:67:0c:bb:2e:2d:99:2b:40:3c:88:11:c4:
         5c:b0:89:5b:09:d8:b6:53:ca:be:4d:65:db:6e:9f:2a:c2:17:
         4b:ef:59:95:62:82:84:6b:23:3f:1f:d5:0b:a7:3f:ca:0a:a6:
         8c:4e:6f:dc:8f:03:f2:a1:b6:b1:f7:b5:33:85:67:c8:18:87:
         cf:83:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:44:06 2025 by rpki-client