Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File:                     S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier:          dVvfaVz8o4Pt3yPRfqN7A8gAJ2aldSolikV2WdeuwEs=
Subject key identifier:   46:91:77:9E:EC:FB:8F:4F:06:55:81:6B:72:69:CE:84:CD:96:62:E7
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer:       /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial:       01987419635B84B1A02815427D37AC808FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number:          0CAB
Signing time:             Mon 04 Aug 2025 08:01:17 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:17 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:17 +0000
Files and hashes:         1: 6KASjwCz7ilKa_zbYR8rA5RUBrc.roa (hash: T4+QVQXXLI7KFzCBe08m6pD6fADi9vWJFsV+O2tzwnA=)
                          2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: xE3O79q57BUCLOistzJ9pEY1mBoHhiyUhYJCeAck6Zg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:63:5b:84:b1:a0:28:15:42:7d:37:ac:80:8f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
        Validity
            Not Before: Aug  4 08:01:17 2025 GMT
            Not After : Aug  5 08:01:17 2025 GMT
        Subject: CN=4691779eecfb8f4f0655816b7269ce84cd9662e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:c2:58:0f:ee:75:e7:73:ab:3f:8e:9a:ec:
                    e3:ac:70:68:a1:00:fa:76:a8:0b:37:85:b5:c2:8c:
                    b8:e9:13:c3:8d:6d:bd:4e:21:07:f0:8b:06:99:1b:
                    ff:9f:ae:a4:00:28:0c:9b:c6:a6:be:00:83:b5:59:
                    9f:9f:7c:43:93:89:ac:79:39:32:91:fd:3b:2e:04:
                    1b:42:18:6f:6f:27:7c:b8:2f:db:42:bb:85:fe:c8:
                    16:01:0a:65:d3:2e:11:b0:a2:53:fa:8e:42:da:7d:
                    3d:63:b5:e2:89:03:43:99:72:58:98:6f:da:97:31:
                    bc:64:bb:42:3c:39:43:a4:31:a9:ba:51:2e:25:11:
                    6b:fa:34:cb:6c:41:a3:78:c4:83:46:c7:18:79:3e:
                    d4:6d:6c:ed:ca:5f:30:83:63:01:44:56:52:c6:e5:
                    e3:eb:48:9e:60:38:fb:0c:77:e7:9a:0d:78:00:77:
                    80:dc:65:52:21:43:aa:64:66:66:df:1c:4f:c3:09:
                    c9:68:6d:7c:d6:a9:92:11:47:ef:03:b5:55:12:bb:
                    19:81:df:83:1a:c9:d9:f8:21:63:3a:26:22:64:18:
                    22:cb:8a:34:b1:41:4f:ca:41:ff:90:96:43:9c:5b:
                    2a:1b:ba:c5:40:c3:c9:48:5b:4e:be:81:97:f7:1b:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:91:77:9E:EC:FB:8F:4F:06:55:81:6B:72:69:CE:84:CD:96:62:E7
            X509v3 Authority Key Identifier:
                keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:80:3a:fa:d2:b0:96:68:50:b5:2b:64:c3:49:71:29:14:81:
         3d:16:c3:02:9b:96:c2:a7:96:bb:ff:a6:6b:7e:62:f2:ed:63:
         9d:6d:43:f0:5d:99:3b:58:96:a0:dd:d9:35:47:47:2c:b3:5e:
         7f:85:09:1a:ba:08:3f:33:b9:fa:35:ae:96:21:8f:35:64:ea:
         68:82:e3:f3:83:56:5b:c7:86:07:ec:12:76:a9:7d:13:c6:ba:
         59:38:fa:4c:52:5d:73:a6:ee:66:96:b4:6a:4e:0a:44:f3:ba:
         1e:22:f5:b3:81:4a:21:5f:6c:b2:35:76:15:5b:48:45:9e:21:
         cf:73:29:82:c9:43:16:ea:6f:cc:89:4d:91:f3:5d:d3:48:69:
         14:fb:01:b1:dc:78:0c:1a:6f:df:dd:34:d0:8f:86:36:f0:cf:
         7b:68:7a:eb:9c:71:b7:a0:43:2f:4d:ae:2a:dc:04:9d:6e:e2:
         39:bd:f9:89:bc:d3:d5:9c:5e:06:43:88:1a:f4:46:53:47:0a:
         94:7a:cf:97:74:99:73:d2:b9:3b:82:da:6a:03:c0:17:06:61:
         63:bf:57:ac:c1:e5:d0:dd:60:02:c5:0d:08:50:b2:75:32:1b:
         76:14:97:d0:90:5f:d9:c5:c8:c0:c8:49:bb:f9:2d:2c:02:54:
         57:13:b8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:51 2025 by rpki-client