Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
File:                     _FXgUz76pWJPU4uS7RqXP-_4l1E.mft (raw, json)
Hash identifier:          S+P0TwFI18n371M1qaGanTrLKMire9oGCfISa9U2wk0=
Subject key identifier:   51:22:B4:E2:CB:7C:01:0B:35:C3:0F:25:AD:07:BD:1A:4A:BD:E0:AB
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Certificate issuer:       /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial:       0198733D9903A0BC6DB3EC4C73B713EB078F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
Manifest number:          1101
Signing time:             Mon 04 Aug 2025 04:01:13 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:13 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:13 +0000
Files and hashes:         1: _FXgUz76pWJPU4uS7RqXP-_4l1E.crl (hash: 8jq3tSIoHoCBqzH8ncIw/Ll2ly7uIjdqJpFbe98WpJI=)
                          2: yh5VzgeOwtUgAcziSiqUhcW6kK8.roa (hash: hvI53ao0Y2iffOi0mRz/DzGNpvNOk5YefpCNLUXPIjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:99:03:a0:bc:6d:b3:ec:4c:73:b7:13:eb:07:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
        Validity
            Not Before: Aug  4 04:01:13 2025 GMT
            Not After : Aug  5 04:01:13 2025 GMT
        Subject: CN=5122b4e2cb7c010b35c30f25ad07bd1a4abde0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b5:3f:63:ff:a9:e7:c2:05:76:f8:ca:29:24:
                    22:9b:f1:fc:54:9d:5f:50:3b:21:4a:a1:76:04:db:
                    aa:a9:f6:01:ff:0f:8f:c6:91:a2:8b:67:b5:dc:f8:
                    d5:b6:6b:7c:ef:a9:e9:86:3a:f1:40:10:8b:3f:09:
                    f0:1e:7a:2e:47:8c:a1:0a:db:3a:b4:35:97:11:e9:
                    5a:4e:dd:40:95:6c:fb:b1:a1:8e:2f:ab:b1:a6:e7:
                    9d:e8:a7:2e:4c:ed:19:54:5e:e5:9a:c9:8d:db:e0:
                    99:7d:13:09:8e:5c:98:e1:52:4a:36:31:a6:3f:8f:
                    ac:e7:82:a1:19:fa:da:c5:d7:b1:bc:b0:ff:38:41:
                    83:61:60:fa:0d:c3:85:30:c2:12:61:03:b6:dc:66:
                    9b:31:23:99:48:a4:0a:0e:18:5a:01:3e:da:60:19:
                    bf:f0:75:b8:4d:00:a0:8a:b8:ed:d8:7d:97:fa:b5:
                    5f:e5:a5:61:bd:54:82:fd:3c:d6:4f:b2:b8:c3:e5:
                    e9:56:f3:5e:b4:f2:1f:42:96:38:d1:b6:02:45:a5:
                    f7:eb:8a:f7:45:e1:f2:ab:e5:0c:f9:5c:12:a4:6b:
                    35:b0:ba:9c:dc:25:55:9f:28:f4:b5:6e:9b:75:75:
                    e7:59:40:6c:5b:b8:4a:3a:f4:9f:0a:09:1e:6b:91:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:22:B4:E2:CB:7C:01:0B:35:C3:0F:25:AD:07:BD:1A:4A:BD:E0:AB
            X509v3 Authority Key Identifier:
                keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3c:4b:c5:27:12:cb:c7:80:d1:94:15:4a:ec:29:83:46:bf:
         89:57:2e:3d:dd:c1:f7:ba:5f:e9:b3:37:2e:71:be:e1:eb:07:
         b0:ca:78:7a:40:46:cc:4f:30:26:b1:4b:24:cf:36:b2:11:9c:
         26:11:60:75:10:71:2c:87:d7:88:2a:27:38:62:74:01:89:37:
         f2:a2:8e:5b:a1:16:c7:d5:52:b0:87:b2:23:de:31:45:41:b5:
         e1:dc:dc:7b:11:3d:ef:b3:12:d7:65:59:32:42:d5:91:f8:6f:
         0a:6d:34:92:e3:2b:ee:0f:83:2a:18:6c:ba:7a:7e:3d:05:80:
         a3:46:4a:92:bd:c2:0c:1e:0e:b4:29:be:e8:db:4b:c9:57:06:
         e8:e0:7b:47:9f:2f:bf:15:0b:73:9a:43:72:c0:39:bd:49:54:
         2c:7f:11:8b:3e:2a:3a:cf:2a:95:1c:ce:76:5b:5b:42:82:75:
         a0:f8:1d:e9:4a:dd:a0:73:7d:3a:b8:c7:41:5a:16:31:7f:95:
         4b:07:c7:85:1e:72:d1:d6:80:78:36:2e:40:04:ee:70:04:60:
         bf:b7:27:f8:19:23:b2:c5:a3:43:ad:8c:90:89:2e:50:d5:03:
         ef:b3:b0:57:04:3f:87:42:5f:24:ca:35:95:96:28:57:32:c2:
         ec:80:c4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:55 2025 by rpki-client