Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File:                     STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier:          vcgpjm3EMxDsVwsNLLJLlnA7ZFRvpWYijKw63HUxkA8=
Subject key identifier:   11:53:E7:BC:52:08:80:19:4F:BE:9B:B3:96:83:21:DB:EB:81:6F:20
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer:       /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial:       01988BB3549282A8F277B276C800A965CFCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number:          044B
Signing time:             Fri 08 Aug 2025 22:00:42 +0000
Manifest this update:     Fri 08 Aug 2025 22:00:42 +0000
Manifest next update:     Sat 09 Aug 2025 22:00:42 +0000
Files and hashes:         1: 1eZlwD4fnzVx_ZuiX-KY-unzRYA.roa (hash: FfjJukJvNSQzT9n6wjLCsM9xDWFdpCKe+CsdvwMwZRs=)
                          2: GXnQPnuqnvBWk7kpONau-2u0RoQ.roa (hash: uxonlVe7DqVs73Mq5GsJwlXeQ95X/yFAybekoDtId+I=)
                          3: KyYmqZA206kErzPtR2YQzPU--WY.roa (hash: fQeQLftranJsCVjcRRs8kVttSYkJPcfUSHb9P69BPM8=)
                          4: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: +xuPzphqj0CQANpX4n1QqDFzecHoB52FcXeZXBUVpH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:54:92:82:a8:f2:77:b2:76:c8:00:a9:65:cf:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
        Validity
            Not Before: Aug  8 22:00:42 2025 GMT
            Not After : Aug  9 22:00:42 2025 GMT
        Subject: CN=1153e7bc520880194fbe9bb3968321dbeb816f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:82:96:58:91:07:b6:92:7c:e8:8b:61:4b:
                    8d:0b:2e:dd:02:3f:d3:dd:d2:a6:31:ef:6c:71:4b:
                    5d:8a:43:07:e7:5e:da:a7:94:2b:a5:f6:20:00:76:
                    1a:45:c5:ea:0f:de:19:53:b4:cc:c1:be:78:bc:5e:
                    9e:f9:66:44:aa:0f:97:0c:ed:80:0c:f6:ac:5b:e9:
                    ec:f1:aa:d1:a1:74:95:10:74:fd:0c:33:80:42:4e:
                    29:8d:e2:c7:e2:33:42:a1:0e:ec:08:58:5d:f4:d5:
                    1f:f4:ff:49:90:b8:97:df:14:17:ff:91:01:34:28:
                    f2:55:a5:37:39:00:92:96:b7:55:6e:32:df:0d:8f:
                    6f:d0:8c:1c:77:3a:02:7a:a3:59:a1:78:d2:2b:75:
                    66:83:85:74:56:ac:d9:c7:1c:79:1c:4d:b9:33:8c:
                    c2:84:74:2f:5b:8e:ae:1b:da:ba:8e:15:36:56:bb:
                    ed:48:66:da:28:5a:ce:c7:0c:92:e3:58:3c:aa:94:
                    59:58:4e:0f:02:c9:e9:39:c0:43:8d:49:79:70:cd:
                    97:a9:b7:7e:b2:5c:fc:96:c3:f0:5a:a1:88:0b:4e:
                    0e:ae:c3:db:47:7f:d1:e9:32:a4:33:b1:3c:89:1b:
                    cc:1d:02:76:04:93:e5:85:d8:bd:39:45:00:de:e4:
                    3c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:53:E7:BC:52:08:80:19:4F:BE:9B:B3:96:83:21:DB:EB:81:6F:20
            X509v3 Authority Key Identifier:
                keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3c:e6:87:88:96:61:d9:bf:8e:a3:ad:d7:6e:18:84:04:c7:
         87:4e:55:26:5f:70:4d:89:ab:39:bc:cc:5e:6d:b0:1d:df:a9:
         69:b4:ff:f4:0b:33:d4:9e:f4:1a:36:80:c0:ca:45:aa:4e:88:
         69:3d:ee:c5:ae:b7:bc:bc:8f:b0:4a:36:1c:20:3d:4d:93:e2:
         39:e9:ce:59:8f:5f:d2:ff:79:e0:4e:7a:ee:d7:3a:5d:bc:0f:
         20:55:ed:7b:bc:a0:d9:6b:13:c2:62:5b:5c:17:82:72:ee:c5:
         32:4d:82:b8:5a:6a:d5:ba:ff:ab:30:a6:32:e7:50:1f:7f:6f:
         f2:04:70:b8:dc:63:bf:b8:89:58:41:03:58:d2:23:8d:90:b9:
         47:71:7b:ee:09:64:fa:8e:97:c8:ef:8a:e1:fb:67:9c:a7:18:
         96:70:7c:d4:d9:78:56:eb:49:f7:b9:63:2f:35:84:1b:6b:b3:
         a4:8f:08:63:fc:eb:1b:af:ac:a8:71:0d:ac:67:81:97:e1:49:
         00:0d:1a:a4:14:30:91:01:57:1c:23:ed:96:af:17:c6:dd:2b:
         21:28:f6:92:f1:0b:e6:ca:6c:e7:bd:05:7d:42:80:3f:fc:e5:
         8d:4e:b1:d5:c5:ac:bf:6d:3e:37:23:4c:05:db:ff:0c:4e:74:
         bf:8b:46:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:50 2025 by rpki-client