Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File:                     sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier:          eLlpWyELYLq4xekbwjkrbic+NYG+ar7L1yEWI79zo9g=
Subject key identifier:   4E:96:04:72:70:8C:25:65:BF:03:B9:B6:35:3A:BC:F0:00:09:C0:4B
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer:       /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial:       01987418F9E94C0FFB4CF0BFE64DE1567FE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number:          1615
Signing time:             Mon 04 Aug 2025 08:00:50 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:50 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:50 +0000
Files and hashes:         1: 3y9VMN9BUcZB2fmchyviGBmGtxw.roa (hash: WvArAvEQlUAHpEjB63U5q0z8PqLe+6GgRYCWBvbd2yM=)
                          2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: 2vNy6oUFe+z3z01HE9NJ+5qUcoNETsyuIrt69mpdq/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 08:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:f9:e9:4c:0f:fb:4c:f0:bf:e6:4d:e1:56:7f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
        Validity
            Not Before: Aug  4 08:00:50 2025 GMT
            Not After : Aug  5 08:00:50 2025 GMT
        Subject: CN=4e960472708c2565bf03b9b6353abcf00009c04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:55:1b:38:2e:6f:b9:c2:96:d0:33:e5:66:
                    21:4c:18:44:aa:31:37:f6:22:de:97:a6:e9:97:05:
                    e0:c1:d2:a2:bd:65:a7:b7:40:3e:14:04:fc:77:1f:
                    c5:d2:bc:01:ef:66:e7:41:e6:07:63:04:26:e6:06:
                    95:ae:28:0d:d2:3a:f6:7d:48:a1:e8:55:3e:7b:b6:
                    d6:33:0c:1d:8d:47:fe:28:9e:35:74:5b:ed:2d:03:
                    ba:ee:5c:f8:f0:46:f0:d9:c6:01:87:6e:e6:78:0c:
                    26:04:09:ad:2e:f3:b0:b9:30:83:4e:77:d3:66:ec:
                    0f:de:fd:38:4e:e2:8f:4d:8d:f1:1f:6f:08:13:96:
                    18:9e:6c:6b:48:64:bf:c9:ea:d0:1b:cc:ea:30:b0:
                    e0:50:d7:02:a4:f2:77:30:bf:dc:b6:41:fb:d7:ea:
                    6b:53:a6:50:b0:84:b0:38:2d:77:4f:0d:53:6a:8e:
                    c8:68:99:d2:64:ad:fb:9e:2e:75:3b:c2:36:0c:4d:
                    89:0b:99:11:bc:e7:59:a4:3f:32:31:f1:19:db:61:
                    30:7c:b9:4d:bb:35:0e:de:e9:8d:c8:fe:84:46:a4:
                    ed:de:f6:24:5b:7e:20:e0:d1:4b:c2:fd:8e:27:10:
                    4a:59:35:69:d1:db:5c:3b:1f:2d:12:b7:c0:96:10:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:96:04:72:70:8C:25:65:BF:03:B9:B6:35:3A:BC:F0:00:09:C0:4B
            X509v3 Authority Key Identifier:
                keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a0:da:61:72:12:40:46:43:95:6f:75:e7:4a:d8:dc:d6:14:
         51:26:7d:45:33:12:d4:07:21:f4:93:1e:cc:4e:2f:60:ab:de:
         c3:9c:38:d5:a0:49:8e:93:cd:16:ef:dd:af:c9:f3:99:39:3d:
         df:71:17:ef:d4:9b:8c:6b:13:65:1f:2e:fc:88:45:3c:fe:2f:
         7a:19:74:dd:b0:5d:8a:60:35:44:b2:08:fa:ff:3c:a8:c6:63:
         6e:85:90:b3:66:53:64:54:20:4d:54:bb:36:31:17:d9:be:d9:
         c7:23:6b:41:13:19:c1:a1:99:c1:56:85:4b:6f:86:de:01:8c:
         8f:4a:57:11:cf:54:9d:32:43:23:8f:2f:ec:da:c8:ef:6a:ac:
         3a:9f:df:b6:5b:40:1e:8a:a6:58:41:24:0b:b1:b2:c4:ca:a3:
         4d:07:cf:89:84:6a:48:da:1d:8d:cc:f2:2e:cf:da:a0:27:43:
         fd:c5:e9:41:9a:02:37:41:28:ce:fd:89:7a:ff:a4:79:fd:ee:
         a8:ae:80:4e:b4:ae:0e:d7:df:00:38:36:bf:d4:ae:57:92:fe:
         e7:8a:f2:7b:66:15:0e:e8:41:87:e4:2b:02:68:61:43:a7:5d:
         09:b8:73:52:f4:dd:96:d2:70:f8:42:48:9f:9a:c9:13:74:9a:
         61:84:ce:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:20:59 2025 by rpki-client