Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File:                     sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier:          rnlCE+B0WB25LF4BhMRHqPhE1CBi/4PMcu/gfUMGW/Q=
Subject key identifier:   29:41:38:1C:6B:CD:54:BF:BC:9E:42:FA:C7:A6:00:3C:D4:BC:BD:92
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer:       /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial:       0198917ECDBD4E3B3189CC6087CA90CB2544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number:          031F
Signing time:             Sun 10 Aug 2025 01:01:03 +0000
Manifest this update:     Sun 10 Aug 2025 01:01:03 +0000
Manifest next update:     Mon 11 Aug 2025 01:01:03 +0000
Files and hashes:         1: cutf0Yk4GqOLANVUSKcxrSdUxug.roa (hash: Q8Q4U3gD48zecWRmDv6Pw0MZwpRvb60BHrR0/Xs/Hmo=)
                          2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: ERnrZNIiZ6PlJDuESeCLFdXjkt4ikAGMyCB55zQgXe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:7e:cd:bd:4e:3b:31:89:cc:60:87:ca:90:cb:25:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
        Validity
            Not Before: Aug 10 01:01:03 2025 GMT
            Not After : Aug 11 01:01:03 2025 GMT
        Subject: CN=2941381c6bcd54bfbc9e42fac7a6003cd4bcbd92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:83:c4:7e:f5:57:c6:25:3b:5d:0b:08:69:
                    b6:15:2a:81:0e:5d:11:49:83:dd:ca:8a:65:31:17:
                    88:d5:4d:63:c0:93:70:bb:36:ec:a1:28:cf:cf:6f:
                    2b:f6:2c:4c:9e:af:5f:18:ee:be:bd:e9:b1:8b:96:
                    46:c9:68:a3:ac:cd:e9:3b:67:d6:b4:92:02:2e:6f:
                    32:ec:44:16:6f:1e:09:9d:f9:fa:23:af:cf:a3:e9:
                    59:67:21:1e:ab:bf:fe:33:ea:15:1b:0d:16:28:3d:
                    9c:11:bd:88:ad:26:15:80:66:27:a7:bd:ed:71:b7:
                    ff:10:99:bc:08:9a:db:e5:ab:83:b7:2a:e1:4e:4f:
                    59:94:4e:c0:f6:54:0c:10:ad:3e:8a:86:ec:ed:02:
                    5a:c1:6f:86:f2:65:f8:3b:f1:02:00:33:bc:26:15:
                    16:4e:19:67:ce:75:df:f6:b7:1f:f0:7a:3f:1b:c1:
                    8e:7e:7d:2c:86:fe:11:0f:b7:38:23:ae:5c:3c:76:
                    1c:34:33:c3:0b:94:83:54:74:61:34:d0:cb:09:dd:
                    42:35:8b:38:dd:23:d4:f1:35:97:06:d8:84:82:44:
                    9d:88:30:51:25:35:a1:be:ee:6e:ba:5f:8a:f2:70:
                    db:3e:00:d7:08:5f:73:5e:55:ec:b0:91:2f:c1:0f:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:41:38:1C:6B:CD:54:BF:BC:9E:42:FA:C7:A6:00:3C:D4:BC:BD:92
            X509v3 Authority Key Identifier:
                keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4e:cd:7a:7c:3d:a3:b4:65:9f:2c:4f:08:13:9b:49:ec:00:
         e5:2d:6f:e8:a3:a0:c1:da:76:a9:72:c6:b3:ac:a6:fd:a0:8b:
         8f:5f:7c:0b:42:0a:4e:68:6a:fc:09:21:0d:e1:60:8d:7e:2e:
         c7:f2:51:c5:fd:dc:7c:e8:62:74:ad:64:1b:11:3b:1a:e1:9d:
         d2:e5:4f:08:f7:c8:82:29:fb:f7:e0:fb:6a:c2:4b:2b:12:86:
         7b:9b:34:b1:2e:bb:74:32:5f:6f:0e:f0:ce:89:86:0d:39:61:
         a4:71:da:08:79:31:b4:74:d2:eb:a8:58:96:62:d0:a1:19:ef:
         14:0f:92:c2:de:87:bf:3d:19:95:63:bd:bb:62:0d:43:39:57:
         b7:bd:1b:c8:0b:ad:cf:b3:37:59:3b:bc:98:e9:f6:d5:29:8a:
         8f:52:27:a2:bb:db:ae:26:fb:eb:24:d5:1e:fd:6c:c8:1e:5e:
         ff:76:2d:f1:f4:52:8a:66:67:80:8a:26:c3:c3:67:46:3d:79:
         8f:cc:c6:09:df:f0:71:3b:6a:ba:01:8c:10:76:be:fb:1a:17:
         16:c1:82:ca:56:96:43:a7:14:50:b8:1c:e3:d6:25:e5:3f:1c:
         f3:24:a3:07:18:04:49:36:25:c0:95:91:e7:de:02:97:e7:52:
         90:6c:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:51:44 2025 by rpki-client