Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File:                     suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier:          2qMraZZOJbZO5PL++lTu6rBb0qwehJnA7CL1TWLFPSk=
Subject key identifier:   37:90:19:0F:58:D7:69:2A:A0:08:4C:80:81:72:B4:26:21:FA:6C:22
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer:       /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial:       019873E247E7106D0F3B1E0FC430D9C4320F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number:          1032
Signing time:             Mon 04 Aug 2025 07:01:05 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:05 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:05 +0000
Files and hashes:         1: cvFGyGJRsZnEcRCD9JCy58T9gVo.roa (hash: Yp1oBHirBIDihtEHMnqKxr3/5zdpx0QZszheovk5A64=)
                          2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: NsrcrGRW6GqvZW3QtTlv83iKRTf8SuHAGsFe9EG8w8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:47:e7:10:6d:0f:3b:1e:0f:c4:30:d9:c4:32:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
        Validity
            Not Before: Aug  4 07:01:05 2025 GMT
            Not After : Aug  5 07:01:05 2025 GMT
        Subject: CN=3790190f58d7692aa0084c808172b42621fa6c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:00:d0:c3:f3:16:71:6c:54:0b:fb:aa:40:
                    dc:44:da:0d:86:ab:f3:6f:06:03:47:12:03:3f:ce:
                    8d:3c:3f:b7:30:6b:6d:6c:a0:32:16:be:e8:c6:67:
                    15:cc:4f:ab:e6:42:e1:1f:db:bd:14:2b:69:48:99:
                    00:cb:7e:54:de:35:55:84:41:15:ea:b3:08:82:df:
                    a0:9f:14:b3:84:1a:29:31:27:96:5f:fa:e8:38:35:
                    02:cb:38:fe:13:b9:4c:37:15:0b:60:28:a4:05:d1:
                    0c:0c:ca:b6:34:3d:28:85:62:1b:29:bd:b1:a6:44:
                    2f:10:62:11:1c:44:9a:f9:ae:db:e7:b4:b6:bf:9b:
                    b3:7f:6e:d5:39:25:af:26:81:6d:64:a8:e2:6b:dd:
                    54:61:3c:f0:6a:db:7a:a1:14:1d:93:67:09:5a:4d:
                    1f:b6:74:84:7d:59:c3:35:14:07:d0:cc:79:86:76:
                    25:c8:b5:41:85:b6:31:9d:0b:00:17:c2:df:1c:f6:
                    08:15:a4:8f:21:42:8a:d3:3f:c2:75:10:c9:98:22:
                    4d:cd:55:fc:49:ba:6e:90:6b:a1:9c:68:e7:6b:d7:
                    6f:95:75:64:8f:a5:6d:7b:af:79:97:79:8a:7d:30:
                    cf:83:f5:9b:d2:be:0f:22:01:5a:a5:f2:5b:b5:58:
                    b5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:90:19:0F:58:D7:69:2A:A0:08:4C:80:81:72:B4:26:21:FA:6C:22
            X509v3 Authority Key Identifier:
                keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:34:d2:e5:88:c1:0a:19:13:af:95:91:d0:ea:ea:c1:a9:0c:
         26:39:46:36:1e:8a:53:ac:a6:fb:3f:83:7d:7f:c7:00:18:01:
         ff:40:38:73:a8:eb:0d:30:33:cb:19:9f:31:3f:43:75:99:d2:
         84:dc:e2:43:81:42:c8:a1:1a:79:8b:f2:c1:56:2a:78:ea:95:
         c5:81:93:59:22:de:14:e5:e0:3a:98:a7:1a:3a:20:8e:d3:02:
         b5:2f:c4:4d:1c:c0:5a:40:19:bf:21:19:41:1e:62:cf:49:62:
         9a:d7:49:1f:f2:be:08:c9:ab:4c:81:8e:83:e8:5d:e0:77:20:
         d5:a2:50:dd:11:bd:22:f2:e9:a4:97:1c:ae:f8:0a:05:87:f2:
         b3:4b:ec:45:86:69:ee:5a:95:23:3b:dd:a4:e7:6c:bf:f0:89:
         20:ff:00:45:f7:9f:99:ba:e8:5b:3d:b7:1e:0b:c8:56:ae:20:
         48:4e:cd:f4:57:57:0e:af:3a:4a:0c:8c:b6:fa:0f:8a:59:c2:
         83:3c:ec:a6:b4:9a:a7:97:52:df:bd:d7:b1:06:67:52:f4:4e:
         c2:13:fd:b7:40:1b:0a:4a:ce:2c:fc:99:a6:13:d3:f1:5b:a0:
         94:d4:51:00:f7:7d:4a:37:d7:b6:62:7b:db:ea:2c:ac:e1:16:
         5b:11:83:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:57 2025 by rpki-client