Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File:                     1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier:          xVM2dW0IBCpnw/CXWeiwta6rju6o2Z3A1ayr6wkX+mk=
Subject key identifier:   02:48:29:82:E6:0A:21:81:B5:D0:35:45:BC:7B:1C:B3:80:B5:1A:5C
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer:       /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial:       01988C8F26C1A7659EB3181B4904F8C12A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number:          1151
Signing time:             Sat 09 Aug 2025 02:00:48 +0000
Manifest this update:     Sat 09 Aug 2025 02:00:48 +0000
Manifest next update:     Sun 10 Aug 2025 02:00:48 +0000
Files and hashes:         1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: L80NTiMblUeU57gq1zEP/vFB2rv7oaeIyxyeWrLL6DE=)
                          2: NhnMYjAslLVa-AUlcKz__rn95zo.roa (hash: tZEX0EAU3kMvQjAQCJnIAbh87GSUNy8524Ozv2q7nvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:8f:26:c1:a7:65:9e:b3:18:1b:49:04:f8:c1:2a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
        Validity
            Not Before: Aug  9 02:00:48 2025 GMT
            Not After : Aug 10 02:00:48 2025 GMT
        Subject: CN=02482982e60a2181b5d03545bc7b1cb380b51a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:70:47:c8:be:c5:04:5b:fe:13:b8:1f:d7:
                    62:fb:d3:33:12:49:7f:34:41:33:0a:c4:98:3f:32:
                    f4:c3:5d:2e:9e:5b:d5:5c:aa:e6:62:11:c2:95:ed:
                    61:29:ba:b2:cd:c8:f1:00:f5:db:41:33:c4:a8:5b:
                    42:1c:b7:d2:45:5e:1e:a6:2b:cd:3d:43:1d:41:f1:
                    bf:1a:cc:2c:a4:45:03:be:ae:db:57:a6:ce:ab:bb:
                    16:74:eb:1a:29:a0:86:87:f1:2c:a7:f3:7c:90:6e:
                    50:8f:70:1b:a6:12:c6:a8:93:c5:01:98:41:96:5d:
                    ac:ce:c9:ee:20:ca:7f:d3:88:4f:f9:be:d2:80:08:
                    a1:34:c5:b6:a5:17:5a:89:05:a9:9c:b9:86:52:e6:
                    db:ae:3a:1b:0e:27:28:f6:21:56:6d:53:81:e2:fd:
                    79:68:3b:6c:0b:55:1b:67:5a:7e:51:74:ee:65:45:
                    44:8c:f3:01:4b:91:72:65:ee:8e:e2:0f:84:20:00:
                    53:a2:51:ee:c6:75:e9:bb:30:0e:8e:91:73:5c:d8:
                    5c:83:c4:01:00:6a:c0:db:1c:1e:fc:82:4c:26:97:
                    79:df:d2:53:96:4e:10:7c:31:7e:59:0c:72:b7:35:
                    a7:a2:28:2c:c6:71:bb:ea:66:01:fd:ce:d5:4f:68:
                    41:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:48:29:82:E6:0A:21:81:B5:D0:35:45:BC:7B:1C:B3:80:B5:1A:5C
            X509v3 Authority Key Identifier:
                keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c0:4d:db:a6:66:64:9b:28:1d:2b:19:a0:1c:09:ae:05:1f:
         f7:b9:b2:49:f1:d2:37:0d:7a:72:6c:85:de:2a:77:19:2a:74:
         9b:5c:db:c5:50:d6:b3:34:49:d3:cd:37:e7:90:c2:28:85:58:
         7d:b9:bf:ef:f6:6d:68:11:14:17:c5:03:c2:85:8b:d9:77:26:
         86:49:be:f4:c6:cf:d5:af:07:07:52:56:fb:f5:6a:f3:31:e0:
         86:ce:e6:45:36:29:88:f2:14:3d:70:a1:9a:d1:e5:29:56:3e:
         30:53:2a:0a:3d:e5:b0:22:11:1b:2c:0f:45:91:83:93:2c:32:
         74:46:1b:1a:d9:7c:cc:30:0f:e7:93:77:24:db:27:53:9e:65:
         5d:bc:38:10:11:10:2e:a7:34:74:f8:ae:41:ce:82:71:ea:b2:
         06:17:56:d5:c2:9f:48:f4:09:30:41:72:e3:02:d8:b2:80:59:
         0d:32:7b:56:2f:7b:78:94:6b:e0:3b:52:e5:2e:7e:f9:7c:25:
         83:5c:2b:4e:a9:06:3e:4d:3e:9a:b8:12:80:82:bc:43:ca:d3:
         0f:ef:66:e7:45:bc:75:80:45:50:8c:1a:70:99:06:d2:da:59:
         62:f2:5d:f4:de:6c:a4:ee:be:c2:84:28:38:60:d5:bf:76:1c:
         e6:03:e9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:04 2025 by rpki-client