Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File:                     1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier:          E4VtFL8/0TRIAykL9Hc7NK1ftZzBPcCRp1Ov6bjbi+Y=
Subject key identifier:   90:54:28:22:BC:80:A3:7A:63:ED:D4:31:8C:B1:A9:60:A8:35:52:47
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer:       /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial:       019873E2F3936CB05384D398BEC4A83DDEB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number:          0762
Signing time:             Mon 04 Aug 2025 07:01:49 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:49 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:49 +0000
Files and hashes:         1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: 5+GQp0mdeZ7CsKEhlk0SfhOoI/GunozY/ESaQKkd4f0=)
                          2: 8BItxdRwiz6e55f08Mt17mlwvV8.roa (hash: cojnwxd3ILvAkZ0dYhgxffSNvY1zxZ63Duvu6PuvkIM=)
                          3: QO_GooH2m885Q2taEPXMPgyGMvU.roa (hash: 1VnTsOfjtKGYm7FG0JLVMLSQUzntH2YHEOdl/AmQZTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:f3:93:6c:b0:53:84:d3:98:be:c4:a8:3d:de:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
        Validity
            Not Before: Aug  4 07:01:49 2025 GMT
            Not After : Aug  5 07:01:49 2025 GMT
        Subject: CN=90542822bc80a37a63edd4318cb1a960a8355247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3c:0a:4c:49:c2:b8:2d:c7:73:50:04:8e:4f:
                    01:97:08:d6:de:f0:64:3d:5e:46:90:94:df:06:14:
                    79:71:03:d6:03:f1:95:88:11:c7:81:bc:b7:3b:94:
                    01:df:bc:7e:57:79:02:17:b5:46:81:61:2b:6c:b9:
                    5b:4f:a9:69:3b:ed:1b:00:97:67:b6:2f:16:be:f2:
                    9f:aa:f0:0c:d6:9c:09:76:e2:41:47:fa:22:0e:4b:
                    05:4d:16:85:e8:e8:c0:6b:49:02:f3:24:c8:89:ae:
                    a6:17:11:2d:f8:de:0d:1c:f3:09:6c:50:91:ea:35:
                    0a:12:e4:1f:db:f7:0e:4a:6c:fd:38:d6:c5:e6:e8:
                    b8:4c:94:01:02:a6:17:e0:3f:39:2c:7e:b8:d1:ee:
                    c2:12:f6:f6:82:19:54:29:2c:c4:46:a8:68:a5:ea:
                    f5:c3:2b:2e:8a:e4:9d:46:3b:ef:6d:d3:bc:74:fc:
                    50:c3:e5:f0:dc:4f:ba:5e:15:ea:b8:e1:25:c5:f5:
                    a1:a7:8b:51:3b:5c:75:22:0c:63:e0:81:9a:b9:7c:
                    94:35:57:a1:21:7e:23:a9:64:42:39:bd:c6:38:45:
                    40:a0:39:42:a9:e4:00:96:db:eb:b0:57:3d:f5:80:
                    1a:4e:59:96:1a:b2:1b:41:5b:10:66:ca:73:18:c4:
                    f2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:54:28:22:BC:80:A3:7A:63:ED:D4:31:8C:B1:A9:60:A8:35:52:47
            X509v3 Authority Key Identifier:
                keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1a:b2:58:55:58:e6:92:d6:06:af:3e:f2:0f:69:0b:36:eb:
         85:3b:e6:10:9d:dd:80:dd:51:06:1a:13:f6:7d:04:6a:cf:7e:
         57:fa:08:7d:b9:5f:ab:38:62:97:6e:63:cc:52:dc:20:fe:ed:
         a0:fc:9f:99:b2:98:33:fe:a6:b6:48:ce:fa:2d:68:12:8f:63:
         0f:42:6d:91:aa:45:c7:29:7d:22:b8:66:8f:62:95:78:a2:0a:
         a2:c7:15:d0:ac:4e:2a:87:c7:72:ed:2d:8d:2b:76:39:cf:15:
         3e:ee:5e:51:94:ec:1e:e5:d3:92:88:51:2a:5d:a6:94:41:93:
         61:e9:6b:54:b7:43:02:20:a6:ec:8f:c4:fe:af:08:08:76:28:
         f1:54:c9:da:5f:2b:6b:42:f1:bc:43:b1:62:87:d0:c5:18:fe:
         94:68:2b:8a:5e:98:38:d7:c0:00:d8:a6:10:11:32:58:2b:c4:
         90:e6:0a:7b:7b:aa:36:89:2e:fa:24:94:ff:1d:83:33:81:14:
         19:e3:69:94:17:55:1f:c0:42:69:e1:2d:87:dc:b8:b2:47:b8:
         81:e5:97:67:e6:4c:a3:00:37:35:14:d2:df:d8:73:a4:8e:2d:
         eb:e7:5a:a6:46:94:88:c2:6a:4b:b2:8b:e9:bf:4e:9a:64:f5:
         ae:fc:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:20:11 2025 by rpki-client