Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
File:                     SCc0v_AaPOqzULy4SyX3O-gp328.mft (raw, json)
Hash identifier:          qycR2IOZguTu/g1uAvaMWR9q0YnZUrgqT5fa2N4Uy4A=
Subject key identifier:   21:9E:72:A5:01:B8:A9:98:E0:7A:23:CC:9D:46:45:E7:5C:F9:73:94
Authority key identifier: 48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F
Certificate issuer:       /CN=482734bff01a3ceab350bcb84b25f73be829df6f
Certificate serial:       01988C21369F1E579639C3272BC194A6F893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
Manifest number:          6B
Signing time:             Sat 09 Aug 2025 00:00:43 +0000
Manifest this update:     Sat 09 Aug 2025 00:00:43 +0000
Manifest next update:     Sun 10 Aug 2025 00:00:43 +0000
Files and hashes:         1: FsbQ_xqqVCKA7JO_7TNtMcs5uDc.roa (hash: 8oLtr32VZblrtItn64+IZffUBFTx5wRyhUTx6ephSaw=)
                          2: SCc0v_AaPOqzULy4SyX3O-gp328.crl (hash: et/+0+Q9NbH44tAujHGAbQYpD5kN7Y9gnmpwkoPX/sY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:21:36:9f:1e:57:96:39:c3:27:2b:c1:94:a6:f8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482734bff01a3ceab350bcb84b25f73be829df6f
        Validity
            Not Before: Aug  9 00:00:43 2025 GMT
            Not After : Aug 10 00:00:43 2025 GMT
        Subject: CN=219e72a501b8a998e07a23cc9d4645e75cf97394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:91:a8:63:6d:b3:09:6a:fc:24:5f:63:c6:12:
                    3e:3e:c0:8f:98:4f:ba:8b:b7:3e:28:57:67:11:91:
                    02:2d:06:dc:fa:6e:45:ad:18:de:cd:ce:41:63:61:
                    f5:fe:d1:fb:bd:89:e1:ec:de:9a:f0:ad:46:13:a0:
                    55:17:9e:a9:3d:8c:f9:18:ee:55:0f:0f:66:65:ed:
                    f6:fc:19:d9:15:37:8d:20:9b:a8:2e:03:1f:9c:9f:
                    ad:9b:b2:0a:42:5c:19:65:24:46:41:23:62:bd:26:
                    18:e2:24:61:55:2e:a1:1c:f4:9b:20:b8:db:f6:88:
                    42:98:a7:31:87:ca:aa:14:fb:38:ca:a0:79:2d:f7:
                    2f:a6:f0:a2:b5:ee:4a:2d:26:6c:f4:c4:b2:60:2a:
                    f7:b9:f6:87:07:a8:73:ab:ca:27:24:9e:ed:09:fb:
                    fc:b7:ae:21:1b:ac:3c:5b:21:d2:da:6c:99:51:0c:
                    35:40:c5:d3:f0:00:98:06:ad:8d:6e:76:35:be:21:
                    c2:b6:71:74:1c:66:1c:15:da:03:ab:d5:fc:8f:de:
                    58:a0:cf:55:da:4a:1b:e6:ff:e1:6c:e9:fd:8d:17:
                    98:48:cf:41:fc:12:09:72:e6:00:d1:ae:9d:40:38:
                    2a:94:51:67:59:12:dc:13:48:90:83:41:27:0f:3a:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9E:72:A5:01:B8:A9:98:E0:7A:23:CC:9D:46:45:E7:5C:F9:73:94
            X509v3 Authority Key Identifier:
                keyid:48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:11:41:84:2d:f6:16:5a:79:8c:3c:f5:01:42:9c:d3:a8:dd:
         83:e7:93:0b:97:7a:24:b2:fa:50:14:c0:c5:ff:42:0f:6b:e7:
         3f:f0:e0:ab:bd:ee:fe:f6:d5:d2:f1:10:91:eb:0c:74:a0:d3:
         72:94:5e:54:8a:86:a2:9d:c4:9c:5e:cc:4b:f0:e8:00:c1:6c:
         cd:cc:e4:cf:bf:cd:78:28:61:31:22:9b:93:3e:e0:34:b8:80:
         49:c8:fc:70:c8:18:03:a0:bf:04:ee:e5:b1:1c:3d:1d:66:9e:
         fb:5a:2c:17:49:fa:18:46:ab:77:55:c8:34:ce:88:21:1e:b6:
         db:47:6e:99:8d:6f:04:5b:30:95:e0:e1:52:06:8d:30:77:75:
         3f:ce:f8:49:89:71:fe:8a:02:df:b1:d2:d3:3c:97:76:59:10:
         35:d9:a8:1c:8c:4d:e9:fa:98:3e:e5:82:35:0a:5c:52:16:31:
         0a:5e:18:f4:82:76:64:3b:86:22:18:6d:e7:16:16:14:ba:bc:
         89:06:ab:a8:9d:c5:51:59:68:dd:64:31:bc:b4:bc:6b:fa:40:
         d7:f1:99:16:b5:ca:ff:a1:c9:51:c9:b7:54:9a:de:fc:7e:ca:
         ce:bc:c4:a8:65:de:5b:6c:19:d8:88:24:8c:e8:3f:2e:61:40:
         8b:81:d1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:49:25 2025 by rpki-client