Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
File:                     sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft (raw, json)
Hash identifier:          dONrtgvLaePW9bieLidWtmM93kGbr+Ptf2/eWA6BSkg=
Subject key identifier:   B8:A6:00:1C:72:F6:4D:7F:58:FB:5B:41:B6:75:C0:30:5D:20:39:70
Authority key identifier: B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4
Certificate issuer:       /CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
Certificate serial:       0197797903C0D9BF680EEC8436FDFC9619D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
Manifest number:          14DB
Signing time:             Mon 16 Jun 2025 16:01:03 +0000
Manifest this update:     Mon 16 Jun 2025 16:01:03 +0000
Manifest next update:     Tue 17 Jun 2025 16:01:03 +0000
Files and hashes:         1: oJpDXJAu0YqhYsb3XLvaHm4tsBw.roa (hash: xhyugIU0xCgv9NQxhCyoywbyYjL95zytlkIM+aeR33s=)
                          2: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl (hash: qCEcP+MK4haI0uBdWhrx00FLJ4pxuTdV7difgWFXQ0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:79:03:c0:d9:bf:68:0e:ec:84:36:fd:fc:96:19:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
        Validity
            Not Before: Jun 16 16:01:03 2025 GMT
            Not After : Jun 17 16:01:03 2025 GMT
        Subject: CN=b8a6001c72f64d7f58fb5b41b675c0305d203970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:a3:bc:8a:ae:8a:ba:38:2d:aa:76:f8:f0:
                    fc:53:9d:fb:cd:c8:a5:80:4f:06:62:e7:63:ce:7e:
                    f6:79:9d:58:d7:c8:35:09:e7:79:ab:ab:4f:1b:ec:
                    af:85:47:1c:7e:37:c8:3c:96:b8:95:3f:a3:bb:d5:
                    54:aa:bf:59:5f:39:e9:5d:c7:07:6f:31:30:13:d9:
                    f6:87:4f:c0:72:08:d7:11:b2:78:dc:57:66:99:a0:
                    d0:9a:67:b1:c8:0d:ce:16:5b:a3:11:cd:9f:02:34:
                    63:65:d2:5e:11:3a:d4:32:74:0a:cf:61:42:99:22:
                    a9:7c:69:a3:d9:ea:25:da:0d:b6:9b:58:32:66:37:
                    20:6a:88:a8:cd:c1:74:e7:91:2b:24:46:77:18:7f:
                    11:ae:dc:62:79:99:e3:3e:83:f6:c6:34:e8:f9:a0:
                    72:e3:d1:d9:0b:5d:97:1e:45:72:14:7b:c8:ab:ad:
                    d4:39:f1:c1:c7:c2:0b:36:d0:48:08:bf:f5:e4:ac:
                    0f:60:6b:61:c2:06:0f:ff:16:f8:f3:04:1e:67:6a:
                    29:66:f4:b6:9a:eb:1e:34:08:15:f1:9e:c2:ca:b0:
                    74:81:6c:61:11:c1:20:8b:b4:2f:1b:7d:89:16:1d:
                    cd:ad:d0:a6:5e:04:9d:d0:2b:b8:da:14:aa:ff:16:
                    56:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A6:00:1C:72:F6:4D:7F:58:FB:5B:41:B6:75:C0:30:5D:20:39:70
            X509v3 Authority Key Identifier:
                keyid:B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d2:3b:9d:0b:c8:d5:f2:f5:e8:8e:ad:aa:c3:bf:4c:fb:6e:
         76:f3:bc:a6:ee:ca:04:15:61:d5:e9:1c:d8:ab:a1:c5:0a:e2:
         22:e1:8e:b1:4f:23:81:f1:25:58:01:88:b1:ba:f1:21:4a:07:
         33:2c:28:5f:b6:97:d6:37:9e:98:3f:e9:02:68:f0:61:5b:bd:
         5b:ed:01:3d:5f:6c:2b:06:7f:83:5d:80:cf:2a:5f:11:0b:54:
         2b:c4:c4:ad:05:c2:42:ce:c5:50:42:42:20:23:9d:40:b0:68:
         60:ca:29:a6:80:4c:eb:23:67:e3:a7:3b:27:d5:1b:bf:62:21:
         b7:75:35:14:ed:19:9d:20:46:8f:12:69:85:bc:7d:78:37:59:
         3f:5f:0b:ae:00:c3:f1:e3:ea:28:69:39:e4:5d:6b:23:c0:22:
         47:ba:8e:de:9e:e3:82:73:ef:8d:a3:74:7e:61:4a:c7:ed:a0:
         13:03:4a:79:89:2a:3a:c8:4d:56:44:dd:fb:5f:22:e6:10:5d:
         78:04:dc:d9:d0:11:cf:9a:e2:2b:0b:02:b9:b4:1c:03:48:86:
         30:c5:28:36:2a:49:ff:6d:a0:87:30:6f:2d:15:53:63:38:aa:
         6f:f7:ac:cd:b0:a5:b1:ef:42:e9:a2:61:db:df:01:46:06:b2:
         18:89:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:06:46 2025 by rpki-client