Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
File:                     MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft (raw, json)
Hash identifier:          DLgZrVlpaHM9gpu9xAbzmP2S+0/ZJUggweM6e6pMnz0=
Subject key identifier:   BF:7B:D6:1A:7F:A2:38:C1:D2:B9:15:82:BA:78:FE:70:65:A2:4E:42
Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
Certificate issuer:       /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Certificate serial:       01987CAE2B1BDC421868DF7571E271AA604A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 00:00:45 +0000
Manifest this update:     Wed 06 Aug 2025 00:00:45 +0000
Manifest next update:     Thu 07 Aug 2025 00:00:45 +0000
Files and hashes:         1: 3Ld3_xMK0PlfZFY-qBwXca5iVGM.roa (hash: CjU6hi/Jh6Zo5sGQ2UDjZfEn9Czpv8lCLYgvh/6NOKs=)
                          2: MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl (hash: KbWaT81gSIlTQrqCCUa26t2ShnIRdaz3ky9knK7Wqec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:2b:1b:dc:42:18:68:df:75:71:e2:71:aa:60:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
        Validity
            Not Before: Aug  6 00:00:45 2025 GMT
            Not After : Aug  7 00:00:45 2025 GMT
        Subject: CN=bf7bd61a7fa238c1d2b91582ba78fe7065a24e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0d:81:a9:00:0a:b1:09:95:cb:19:55:a8:57:
                    38:59:03:e1:de:59:90:a3:2d:16:fd:37:e9:27:69:
                    12:9c:2e:60:41:98:94:b5:06:7d:c0:bd:e4:b9:b0:
                    4f:39:3f:42:5c:9d:d7:a4:ef:ff:08:48:ee:6f:f4:
                    d0:54:5d:95:71:52:32:de:df:2e:52:c0:3a:f7:24:
                    48:8a:dc:6c:ca:a7:57:8d:63:1f:ea:3c:ff:14:9d:
                    bf:02:ac:9c:16:d0:5f:c5:fb:7c:fd:5f:e3:be:46:
                    5f:65:55:71:d4:a7:76:bb:c6:d2:07:30:e3:e2:f4:
                    3e:93:ee:e7:cb:2f:32:88:5b:00:7f:86:6b:45:e1:
                    30:62:f2:a1:97:bc:25:1b:2e:ab:56:5c:51:0f:6a:
                    18:6c:c3:a3:98:1c:26:a3:eb:8b:81:88:11:cf:d6:
                    21:34:cf:da:32:e2:be:24:97:f9:b0:7d:a6:72:2e:
                    ad:c2:d5:1b:e4:00:ac:31:f5:2b:36:23:ce:58:e5:
                    6d:19:0f:57:f4:40:4a:00:89:89:fc:4c:da:56:a2:
                    9f:7c:1d:4c:26:b3:cd:99:5b:02:34:d9:64:4a:d8:
                    b5:b4:67:5b:28:ee:54:85:d2:0d:99:af:45:e1:06:
                    ba:55:9e:00:8c:6b:9b:60:2d:b2:4e:d4:2b:75:94:
                    b6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7B:D6:1A:7F:A2:38:C1:D2:B9:15:82:BA:78:FE:70:65:A2:4E:42
            X509v3 Authority Key Identifier:
                keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9b:3e:6d:0b:65:29:ef:3a:f2:31:59:cb:35:e2:8e:c8:c0:
         11:71:a2:29:d5:49:bb:fc:c8:09:5c:58:0f:a4:94:a2:f7:86:
         af:47:12:e1:6c:1d:97:76:25:43:56:c7:d4:4d:0c:4f:66:73:
         a9:dc:1d:2f:4a:9d:dd:5c:73:e6:63:26:ff:24:30:b8:75:25:
         bc:6a:d6:80:b6:05:ce:82:21:05:44:c4:23:6b:89:16:52:a3:
         df:e1:c0:ac:53:bd:25:d9:65:9e:ab:46:24:5d:1a:e2:24:16:
         88:a6:f9:8c:b6:17:e0:b8:10:bc:ae:db:8e:76:95:13:1a:50:
         b0:b9:39:1d:ad:20:bd:2c:8b:64:c2:4b:d7:26:a0:03:dc:1a:
         73:fe:1c:89:0a:1b:bb:f3:6a:68:e5:cd:03:07:1b:91:46:72:
         56:7b:c9:26:89:00:17:1c:db:83:e4:a6:c9:43:3a:f5:b8:2a:
         8a:6f:43:c6:df:ea:5a:18:3c:30:72:d7:1b:bb:69:61:c5:fa:
         ef:95:ac:31:a4:e4:e4:88:01:e9:1d:3d:5b:ec:42:8b:77:ab:
         30:e6:9e:ba:d6:66:37:cb:5f:6e:b0:a2:29:8b:26:25:04:4f:
         83:d9:fd:dd:4b:64:02:43:1b:25:36:85:24:dd:52:ca:dc:3a:
         5c:7f:75:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:40 2025 by rpki-client