Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
File:                     sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft (raw, json)
Hash identifier:          zuEdItutsuY1YQg/cVL2Sqn9jDNLzA+c+HmWXhJuULU=
Subject key identifier:   A2:D7:06:C7:92:71:F3:2E:2A:C0:15:5E:AF:96:B7:11:45:E6:09:7E
Authority key identifier: B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4
Certificate issuer:       /CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
Certificate serial:       01987298615444DB0A75534306B6E65EDCA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
Manifest number:          155C
Signing time:             Mon 04 Aug 2025 01:00:45 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:45 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:45 +0000
Files and hashes:         1: oJpDXJAu0YqhYsb3XLvaHm4tsBw.roa (hash: xhyugIU0xCgv9NQxhCyoywbyYjL95zytlkIM+aeR33s=)
                          2: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl (hash: afl1Sa5/ZI9A8i7SQvoOoVhsCRcAE60cjh3WX3SOkEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:61:54:44:db:0a:75:53:43:06:b6:e6:5e:dc:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
        Validity
            Not Before: Aug  4 01:00:45 2025 GMT
            Not After : Aug  5 01:00:45 2025 GMT
        Subject: CN=a2d706c79271f32e2ac0155eaf96b71145e6097e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:45:7b:33:b6:a1:da:dc:8e:24:f4:c0:f0:55:
                    1f:ec:98:9d:aa:b9:ba:ed:11:31:90:0a:df:82:4b:
                    f5:b3:f1:dd:01:34:10:3a:8d:fc:e2:5a:c5:16:8e:
                    5e:ae:14:90:f1:96:03:97:1b:87:c7:3a:d1:ca:1f:
                    f1:35:19:9a:22:43:5f:c5:91:9e:2f:79:9b:29:9f:
                    be:37:ce:a1:97:f3:cf:05:15:c1:3b:c5:b3:c7:9e:
                    e4:9b:10:6b:74:d4:35:92:6f:2f:c0:b9:f1:04:36:
                    08:26:79:26:b3:fb:c9:22:85:24:dd:7e:92:ed:51:
                    de:77:d6:c8:c8:af:20:70:05:db:62:f0:f4:c4:b6:
                    e8:ff:72:ce:5e:ca:30:6e:02:38:10:06:7d:3b:33:
                    5e:eb:84:5c:0a:d1:03:46:1a:b7:79:60:66:bd:a1:
                    22:87:d8:ee:ed:8c:05:7e:d1:e3:33:84:2b:ed:fd:
                    74:d0:f7:b1:37:de:62:5e:1c:66:db:8b:bd:76:a0:
                    18:65:18:52:dd:c2:49:73:56:55:79:4e:19:a8:92:
                    09:2e:3a:07:1d:9a:40:5b:ab:16:38:cc:fd:d9:23:
                    78:79:9d:c3:3e:44:33:88:9e:16:a2:47:8e:11:1c:
                    b1:b0:d8:93:27:b5:4f:9a:a7:59:67:0a:92:c0:53:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D7:06:C7:92:71:F3:2E:2A:C0:15:5E:AF:96:B7:11:45:E6:09:7E
            X509v3 Authority Key Identifier:
                keyid:B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:be:8d:bb:6c:8b:c9:75:9c:7d:3b:e2:5a:e1:3b:24:4c:26:
         35:24:0f:a3:37:69:af:0c:2f:14:db:7c:52:69:b4:22:17:24:
         01:6f:cc:ff:e0:e8:c6:2f:6a:da:08:93:31:60:28:b1:cc:fc:
         6d:bf:ef:33:fb:cf:41:0f:a8:c3:9e:12:30:10:33:c4:41:53:
         d9:ba:89:09:db:b1:bf:49:62:77:24:e0:f1:b7:92:bc:3b:3a:
         79:d9:aa:14:3d:b2:17:ce:0f:79:23:ba:4b:2c:54:d8:4c:a4:
         ee:b7:ed:78:b3:68:36:2b:bf:be:d6:48:1d:8f:b2:85:1f:29:
         55:fe:27:11:51:38:b8:1f:76:47:e8:61:b4:47:77:df:ed:46:
         ed:d7:26:ee:d4:3c:cd:e9:6d:e7:15:24:60:0f:d0:f1:b7:3f:
         bf:2f:c6:f4:90:b0:e6:c0:7a:4a:02:48:50:cf:cc:83:17:b3:
         e2:40:57:0a:b7:c1:7a:06:f8:65:04:17:bf:0e:3c:58:2d:c7:
         1c:40:ec:1d:3d:78:2e:95:42:ca:3a:c4:1d:64:26:ed:ed:75:
         cc:b0:4c:29:6d:16:27:2a:fc:b1:72:4e:4f:91:dd:6e:49:d4:
         88:d1:ed:9b:03:9b:48:78:47:9e:58:13:8f:2c:bb:8f:a6:df:
         0e:2f:77:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:55 2025 by rpki-client