Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File:                     sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier:          bImbyfZPq3P3YzwNuEWAIACZHpTZM2FphxvF4KumHv8=
Subject key identifier:   FA:30:42:01:A1:D0:15:2C:7C:B1:9B:E3:D4:5E:D4:C2:CE:84:CC:65
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer:       /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial:       01989F70DC533684C72B6C4D0043FFCC9DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number:          048E
Signing time:             Tue 12 Aug 2025 18:00:30 +0000
Manifest this update:     Tue 12 Aug 2025 18:00:30 +0000
Manifest next update:     Wed 13 Aug 2025 18:00:30 +0000
Files and hashes:         1: mMP3R6Y_E5t6fees10l8AYe8F8o.roa (hash: GVxHnVRZ4k3nHcgJKtEX5VgjvPdVGaTcdXcLRvNp8IM=)
                          2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: YxiKRDxmW/XjnFGUbltHS2TRtNV+re0j8L5M8gkKNRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:70:dc:53:36:84:c7:2b:6c:4d:00:43:ff:cc:9d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
        Validity
            Not Before: Aug 12 18:00:30 2025 GMT
            Not After : Aug 13 18:00:30 2025 GMT
        Subject: CN=fa304201a1d0152c7cb19be3d45ed4c2ce84cc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:29:e2:0e:de:28:f7:2f:27:fb:00:fb:ff:a4:
                    09:5d:ce:80:b5:5e:83:24:52:12:8a:ee:ef:39:8b:
                    1e:22:b2:42:62:b1:1f:75:01:38:d2:43:c6:ae:3a:
                    ee:02:ff:c6:46:a6:e0:76:06:84:7f:ed:03:2f:54:
                    8f:26:87:69:b1:d7:02:b0:57:8d:54:57:38:ae:a5:
                    b5:b6:17:19:b8:a3:3a:e6:f8:4a:56:7e:7e:87:37:
                    fb:47:e8:38:e3:c0:8b:b0:ef:18:74:2d:11:7d:52:
                    57:21:76:ff:df:94:2b:57:6c:b0:cb:74:7e:b0:56:
                    f6:11:f9:e7:d0:1c:e3:7f:ca:c0:00:c5:b5:a0:63:
                    04:59:86:6b:36:f2:eb:8d:e7:11:1c:52:06:1d:91:
                    84:32:d5:0b:9b:5d:dc:9c:1e:0a:2a:bc:7a:ad:d8:
                    ea:79:79:28:32:76:c8:a2:c6:61:60:8d:c1:97:fc:
                    3c:4a:0f:a8:12:4a:3b:9c:6a:a4:2a:ac:8b:88:0d:
                    bd:27:05:b8:f0:74:c4:8f:22:8f:c5:1e:02:6b:4f:
                    33:58:12:94:68:c8:5d:a7:20:28:9a:6a:aa:94:4a:
                    b2:c4:5c:29:7e:83:04:42:53:fb:f8:c5:3a:fa:a2:
                    04:1c:c9:26:bc:81:b0:24:bd:5b:36:03:28:17:a7:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:30:42:01:A1:D0:15:2C:7C:B1:9B:E3:D4:5E:D4:C2:CE:84:CC:65
            X509v3 Authority Key Identifier:
                keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:99:8c:b9:7d:d3:de:73:45:9d:8b:83:6c:12:e8:8d:bc:96:
         ba:1d:ce:93:9a:8b:57:74:58:44:0d:10:09:dd:bb:1b:f6:94:
         07:5e:c7:79:9c:f6:b9:c0:3f:35:81:5a:53:f8:1b:52:7b:3d:
         89:c9:00:bb:ad:fc:5a:7a:36:8f:b9:96:ae:7c:1e:2f:24:f3:
         79:9d:92:da:61:9a:6f:5e:b2:b3:43:5f:e2:12:c5:bc:e5:f1:
         18:85:5e:46:71:4e:83:4a:30:07:5e:19:66:23:69:a0:cb:6b:
         2d:ae:7f:62:99:ef:d9:7e:75:49:67:53:76:6b:4b:9c:2d:f4:
         a0:cf:53:66:c5:8b:4e:bd:85:36:2d:c5:2b:6d:0d:db:c6:07:
         32:fe:7c:cf:1f:2e:05:07:ef:f3:a6:e7:16:e4:81:80:44:db:
         78:42:95:3f:86:6f:39:c8:c8:43:d7:f2:b7:83:0b:54:68:64:
         41:e8:10:14:9c:46:21:64:8c:ec:c9:58:ab:2e:5d:6f:20:10:
         37:59:f6:a3:ed:a5:bf:ec:33:b7:d2:10:bb:22:c5:09:a2:1e:
         b4:e2:a2:f3:a6:37:24:f8:e3:09:53:e9:f2:e4:e2:c5:cb:66:
         56:58:12:a9:7e:ea:b0:d5:10:d4:c8:c3:28:4e:be:b9:fc:5b:
         27:91:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:39 2025 by rpki-client