Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File:                     sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier:          volS7UDcef96jbV7S7cw1d8DHjO/z5K/eaQ5XKfIaso=
Subject key identifier:   38:FC:D7:FC:91:DC:50:5C:E7:92:B1:59:8E:DA:0B:88:5A:94:61:14
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer:       /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial:       0198819E2705C42FA5E45D24FEF99EAC773E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number:          0F84
Signing time:             Wed 06 Aug 2025 23:01:22 +0000
Manifest this update:     Wed 06 Aug 2025 23:01:22 +0000
Manifest next update:     Thu 07 Aug 2025 23:01:22 +0000
Files and hashes:         1: VXSaoq70xTeN6W3C76eUA8OC5cU.roa (hash: vEwflplyRjS2mkClV+Bpny4Bw/QU3HBBti723DFTvj4=)
                          2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: 7qjm4A2V44ibLAJFXRDyl1+9eiC+1Iwq0asWBwxNSNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:9e:27:05:c4:2f:a5:e4:5d:24:fe:f9:9e:ac:77:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
        Validity
            Not Before: Aug  6 23:01:22 2025 GMT
            Not After : Aug  7 23:01:22 2025 GMT
        Subject: CN=38fcd7fc91dc505ce792b1598eda0b885a946114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:36:ea:f0:e3:73:f9:4b:c1:93:74:13:55:10:
                    07:a8:3f:0d:3f:ba:33:d6:6f:05:02:3b:27:97:22:
                    eb:84:f1:f3:12:b9:7c:c4:2c:b0:b3:e0:40:16:44:
                    8c:fe:ea:e6:49:fc:b1:fe:5d:1b:77:2a:3a:e6:cf:
                    bc:e5:d9:69:c6:d1:3e:94:4b:94:9d:23:7f:bc:17:
                    81:b6:fd:70:be:40:a8:8b:12:b9:1f:79:b8:fc:7f:
                    ae:7d:c5:61:4b:ab:41:9e:44:89:e1:20:e8:b4:1d:
                    af:eb:7f:7e:83:f0:31:98:73:1a:2d:10:32:6a:3b:
                    26:7d:cf:b1:ce:f7:27:63:2b:35:e9:46:16:4e:b6:
                    75:e5:6e:15:b4:26:e2:3a:fa:4c:ba:42:fd:02:ea:
                    a1:f0:04:25:e8:b7:f8:46:06:26:d7:73:52:24:b7:
                    f6:b5:ad:0c:76:e0:73:4a:c5:46:4f:e0:c4:1b:71:
                    f4:4a:3c:f3:35:c2:84:04:de:95:92:34:f5:7f:5b:
                    3f:4a:f0:f6:a4:6e:88:08:ea:f6:40:95:32:fa:27:
                    6a:6f:1b:c0:18:75:4b:f6:a0:5d:77:e9:58:db:2f:
                    b1:8d:19:a5:cd:f6:83:0e:f2:ac:36:d2:d5:7c:8d:
                    3b:98:3b:b8:1a:a6:d7:6a:82:3b:06:33:98:31:2b:
                    3f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FC:D7:FC:91:DC:50:5C:E7:92:B1:59:8E:DA:0B:88:5A:94:61:14
            X509v3 Authority Key Identifier:
                keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:72:d1:b8:3b:07:d4:ea:5d:2d:ac:12:0d:8a:ee:c3:a2:a3:
         1c:af:e1:db:30:e8:da:2c:ec:4a:13:e4:19:7e:22:9a:3f:8d:
         b8:ae:d3:50:16:48:a1:f2:1d:cf:8c:da:41:41:2f:ea:ab:05:
         f2:41:f2:28:ff:ea:f7:3a:44:c4:a2:ac:f6:a8:25:50:67:e5:
         07:48:d7:94:1d:02:46:d1:c6:64:1d:6b:0a:fe:b9:c1:ce:de:
         55:bb:5b:ef:b1:92:52:24:17:62:34:91:a7:63:ac:16:02:c1:
         69:dc:b4:61:2c:74:8c:07:01:75:60:94:7c:ee:d1:4d:24:3b:
         25:0f:11:39:f1:49:85:02:20:88:e8:52:44:db:25:20:58:fb:
         04:3a:41:c3:c4:8d:bc:21:6f:1c:8b:b7:49:7d:fe:27:34:41:
         b6:ef:14:81:2f:fd:85:45:91:4e:db:07:3c:ec:27:53:dc:0c:
         3c:f6:2f:37:07:8e:f0:f9:19:fa:ab:36:44:da:70:5f:82:a5:
         17:1a:3e:6e:79:77:31:d3:7b:49:c0:8c:84:d3:6b:b2:07:06:
         ba:75:89:ef:35:ab:80:4f:76:a3:11:a5:68:8b:73:1d:66:08:
         fb:59:1a:75:fa:11:83:34:9d:f9:c5:c4:76:50:fe:dc:22:a5:
         c9:30:b8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:09 2025 by rpki-client