Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
File:                     SVls7MId0CZ3pyfvN_BolUbqUJc.mft (raw, json)
Hash identifier:          yW/heXAWr2nuGtAwBWoWMa0osG0FvD054j74mWOc6Nk=
Subject key identifier:   7D:3E:AD:70:8C:CA:5A:D1:1B:F4:9B:EB:4D:7A:7F:20:CC:9E:12:54
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Certificate issuer:       /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial:       01987373E82EF4500E99E87DDF48DAD2EFE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
Manifest number:          1622
Signing time:             Mon 04 Aug 2025 05:00:32 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:32 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:32 +0000
Files and hashes:         1: CgdiB-LvALW6eF8te_abb7XhHzw.roa (hash: FMmsOk3IFJDqEQcmSu8en9nadePYE7fdzLtSrsLGOLw=)
                          2: DheYS6kXlTHMFO59gGUyPsW4eds.roa (hash: n/9tk9beMA1XkkvC1xAFHfiOMzHgwQU8810EuXnnbI8=)
                          3: PBiMn82gChQHdPPkS-Oqs-Fnbh8.roa (hash: egCOLbWqDbWYCFc5/6lxhgVs+rP+45wHq+Te93L2gCw=)
                          4: SVls7MId0CZ3pyfvN_BolUbqUJc.crl (hash: 9Nz5hpL/xfXKxNwQ3fDUOpkMzU29ZdtKNpKth69kkZk=)
                          5: heiFtANLkWlLrNLuIvdxl9kb0CQ.roa (hash: TnGpURbkXAESJ2Gk47wlG4sEj84D3SKrlpwSgF/8yys=)
                          6: jj0FH0DBvDqihM_PehNtHmRi9os.roa (hash: YyltTND33n/AiLCX9ViD6/mj27hWtc2LPtOCmOwTReA=)
                          7: lH-qHFc7crMLSf4GUnVsxi7d5S0.roa (hash: mgWBS9e4WAOzI2AGy8eUIJvq5GzFNK7+k2P1TPWDi18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:73:e8:2e:f4:50:0e:99:e8:7d:df:48:da:d2:ef:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
        Validity
            Not Before: Aug  4 05:00:32 2025 GMT
            Not After : Aug  5 05:00:32 2025 GMT
        Subject: CN=7d3ead708cca5ad11bf49beb4d7a7f20cc9e1254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7e:8a:f6:d6:b3:f5:4a:54:2a:38:d5:3b:c9:
                    cc:74:90:32:e0:36:cf:d8:98:cb:e1:a0:35:a4:de:
                    34:eb:1d:56:69:f0:1b:1c:ab:be:b7:69:30:82:4c:
                    ee:1a:4e:44:25:d5:56:8c:9a:79:2f:1b:f8:db:d0:
                    44:aa:de:70:21:c3:23:c5:67:3b:8d:ad:bc:b7:a9:
                    12:26:c9:1e:a1:03:d2:7f:bf:b1:6c:f5:c2:17:9f:
                    d5:92:62:8e:61:12:e5:80:0f:72:78:7e:a8:e6:00:
                    97:f4:46:39:00:c0:ac:95:e9:47:df:28:e5:99:6f:
                    60:b1:78:42:f5:26:e6:36:ee:18:f6:e0:e6:90:be:
                    df:5d:56:a7:dc:d6:e8:a8:45:b2:a2:7b:97:3b:0b:
                    3d:60:59:f5:3f:c9:2b:b7:ab:88:5e:e2:0c:52:f3:
                    80:48:5a:e2:f1:6d:c1:11:91:96:ba:8a:0e:ec:7a:
                    49:e8:6f:4e:f0:f0:9d:70:38:09:39:29:e7:28:9d:
                    28:ea:b3:80:da:b8:83:8c:b2:bf:bf:54:6d:c4:af:
                    a0:25:96:ac:74:02:fc:05:66:79:b1:77:d2:17:6e:
                    6c:9f:0b:c1:a1:24:5a:b7:0b:b8:7a:eb:ef:c3:74:
                    9d:38:d1:7f:df:b6:e6:a8:b1:da:00:ec:e8:51:bc:
                    49:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3E:AD:70:8C:CA:5A:D1:1B:F4:9B:EB:4D:7A:7F:20:CC:9E:12:54
            X509v3 Authority Key Identifier:
                keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f5:8b:33:1c:cb:2c:13:68:3c:01:ce:f7:0e:8b:0a:48:ff:
         b1:42:cf:ed:96:62:6e:87:e6:5f:bb:74:bd:30:c0:25:d3:9c:
         12:41:34:cf:8a:02:f4:75:48:98:e7:9b:4a:26:3c:53:e6:e4:
         fb:c0:2e:8d:b9:13:ef:14:23:6a:f2:9b:df:1b:30:b6:1b:53:
         66:1a:f4:14:65:1d:f0:a5:4f:66:2f:29:e5:68:cb:21:38:62:
         a7:86:d3:3c:3c:dc:f8:72:10:b5:bf:26:98:a6:a5:64:27:dc:
         41:0d:6a:7f:a9:25:58:e6:15:a2:99:29:85:f6:b6:17:ae:c3:
         09:ea:93:af:75:b1:1c:76:1c:ce:64:1f:86:35:73:e8:36:b7:
         60:7d:84:03:7f:11:48:6b:0d:2e:21:cf:25:b9:dc:69:11:4a:
         04:ef:3b:e4:b0:d3:cd:b8:83:74:26:37:10:44:80:aa:56:64:
         4e:ee:54:dc:6e:7c:2a:db:dc:11:4f:31:73:42:13:af:22:39:
         17:a0:a9:85:76:7e:50:de:52:00:e0:78:4e:8b:20:9e:af:4f:
         02:0c:d3:73:58:8c:cc:98:1b:12:ac:eb:29:47:b4:78:17:98:
         65:91:81:b6:0d:55:b2:c5:1f:b5:37:82:fd:2f:84:66:bc:1d:
         09:67:78:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:43 2025 by rpki-client