Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
File:                     SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft (raw, json)
Hash identifier:          HgRMEq2C+/64XaXLgeI+rT1eNvligtqq/ffqxvLp10Q=
Subject key identifier:   B1:E5:F8:FA:A6:0F:82:DB:8E:8E:A9:A7:23:6F:E2:45:19:30:99:38
Authority key identifier: 49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
Certificate issuer:       /CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Certificate serial:       01987C0A6D859A0ED6398EBDAB258CD5E179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
Manifest number:          0BF7
Signing time:             Tue 05 Aug 2025 21:01:54 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:54 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:54 +0000
Files and hashes:         1: SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl (hash: UJmNvisUiOnvDdvhY4fPMAX9KdxnWGea5WiiqnCpHR0=)
                          2: t2TSolMpe1MqepO7ZiAhihdiw7E.roa (hash: 6XLtwGEoBLRfiwM7FwJJWhjDjtkkFPk9hmuRlaKNmqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:0a:6d:85:9a:0e:d6:39:8e:bd:ab:25:8c:d5:e1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
        Validity
            Not Before: Aug  5 21:01:54 2025 GMT
            Not After : Aug  6 21:01:54 2025 GMT
        Subject: CN=b1e5f8faa60f82db8e8ea9a7236fe24519309938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:80:d8:f7:6f:69:42:e3:e0:b9:b7:b3:02:c9:
                    36:4d:e2:43:a5:c7:45:98:71:51:74:ac:03:9e:a3:
                    05:80:4b:13:49:07:bc:65:e3:54:cf:5c:c6:d6:49:
                    c3:37:b7:0a:03:a2:c7:49:15:14:ad:c6:fd:42:64:
                    22:9a:07:38:0b:04:fe:76:28:0e:0b:b5:6b:f7:b4:
                    d3:3e:ec:66:63:78:f9:d1:07:08:fa:82:e2:9c:99:
                    e3:e5:d6:0c:76:ca:b7:1f:0f:82:55:58:72:c1:a9:
                    0f:18:e4:77:7b:3c:95:34:5f:d9:70:34:1b:f5:84:
                    9d:9c:96:1d:77:4e:7a:2d:41:d1:07:a5:73:8d:df:
                    91:e2:60:b2:1f:a6:21:4c:2a:09:4a:48:bf:03:ce:
                    61:d2:ec:1d:37:d7:ac:17:6e:e2:94:ff:25:c7:97:
                    90:83:97:c1:d1:33:e9:0d:45:ef:c1:7c:1c:d3:e4:
                    84:76:41:37:2d:b8:af:c0:14:2a:7e:46:af:8f:55:
                    1e:c7:f7:3e:bc:14:7a:ef:58:be:e1:3d:fa:cf:f8:
                    6b:95:fa:56:94:69:08:e0:a1:17:80:c7:e7:88:f3:
                    22:65:ee:7b:a6:3e:26:b4:33:e0:57:3c:15:31:be:
                    6c:b3:17:b2:fb:c3:41:01:a5:84:43:61:70:82:4e:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E5:F8:FA:A6:0F:82:DB:8E:8E:A9:A7:23:6F:E2:45:19:30:99:38
            X509v3 Authority Key Identifier:
                keyid:49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:5a:03:a9:93:62:be:70:cd:34:68:52:78:f2:43:16:60:4b:
         ea:4b:15:7e:34:ac:f6:54:33:f1:4a:b6:ce:91:2c:8f:5c:8e:
         7d:ee:c8:44:22:63:09:84:1d:72:a9:e6:43:1a:18:64:24:ec:
         38:b2:75:80:42:b7:f5:96:99:12:87:50:cc:4c:a1:f0:5d:4f:
         d7:9c:78:e3:25:11:95:6c:b3:76:d9:80:80:e4:18:da:ed:11:
         50:81:1b:b2:30:de:49:d7:29:b2:49:ab:a7:0d:49:5a:40:f1:
         7f:b8:5e:61:c5:18:f8:7b:f4:3a:aa:68:a1:7a:c3:5c:ef:cd:
         e1:91:a8:2f:64:c4:7f:6f:c2:9d:42:bf:7b:ec:5a:15:55:78:
         6e:71:14:ce:a5:34:45:b0:60:4b:9c:b5:42:9b:2e:ab:c1:a7:
         c4:cc:3f:77:2e:c0:fd:51:58:11:c5:d5:4d:b0:04:51:a5:ea:
         63:81:0e:40:35:cb:22:1d:a5:96:2a:ab:82:1c:7e:c4:0b:53:
         c1:74:ba:40:a4:72:ed:65:b2:8a:35:53:e9:e7:41:a8:7d:8d:
         4c:69:da:62:c5:e8:de:17:31:06:90:b9:e4:5b:d4:40:02:df:
         88:72:d2:90:32:de:38:5e:df:04:ec:11:a5:f3:8e:55:6e:ec:
         3c:31:ed:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:07:15 2025 by rpki-client