Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File:                     s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier:          X8bVXYDBnkEDAdnVmyKP8Im9LTQxoBmdHpHqBQxEpnM=
Subject key identifier:   ED:C8:62:5F:7C:65:69:86:D1:73:F2:1C:E0:E9:56:19:E4:5E:46:9D
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer:       /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial:       019894EDF7FF6D1A2143E6CED7D6C88EBCAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number:          1637
Signing time:             Sun 10 Aug 2025 17:01:20 +0000
Manifest this update:     Sun 10 Aug 2025 17:01:20 +0000
Manifest next update:     Mon 11 Aug 2025 17:01:20 +0000
Files and hashes:         1: 9-NB3ppe0EfeL2Nj37oF8VJ41t8.roa (hash: ZMKYndtOmSHpSKO5kfkDg42yZItGmF3H5NrIrUVaQPk=)
                          2: W3ef7yk_8thOKV8fePQf_c3aBKs.roa (hash: q4TpxDQr4+wv6OyV3D6r4UE1e0P7/7+4PMrtZl4uXJc=)
                          3: YRU1Ojg5qyXEoXOhvO7oLvQPC8c.roa (hash: TDJgwlET1jOQj6C/tybMD3s4rcsYrcr30h1aS7JqjFc=)
                          4: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: SHp2iWAw+RMerSQsP6vMGSAacQb1pHLv1h+bZHVrb2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:ed:f7:ff:6d:1a:21:43:e6:ce:d7:d6:c8:8e:bc:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
        Validity
            Not Before: Aug 10 17:01:20 2025 GMT
            Not After : Aug 11 17:01:20 2025 GMT
        Subject: CN=edc8625f7c656986d173f21ce0e95619e45e469d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:a1:b6:10:61:96:fb:00:3d:6a:76:58:c3:
                    b4:cb:70:1d:0d:ca:02:37:12:4e:b5:d1:c6:5e:4c:
                    f2:21:b3:42:cc:a8:c3:3f:ba:72:5f:6d:57:ac:1f:
                    a6:9a:9b:e8:18:7e:3a:46:98:96:bc:a7:f8:80:37:
                    bb:bc:1b:61:e1:74:f9:fe:99:10:bf:5c:20:29:eb:
                    57:38:50:8b:fe:13:2e:bd:8d:ee:d6:fe:a9:be:4c:
                    a2:59:e4:52:be:a7:87:43:a0:33:fa:1f:1a:33:71:
                    7f:19:d0:e3:47:d4:09:12:34:8f:1a:07:a7:74:7f:
                    dc:a0:5c:0d:c0:a8:15:85:54:8b:55:b4:e3:92:83:
                    bf:03:8a:48:0a:b4:e1:6a:9c:a0:7e:6d:6c:d7:35:
                    b9:f0:03:de:25:13:88:ce:2c:58:b4:9b:dc:cb:cc:
                    57:bc:4f:e6:28:9d:66:aa:44:7f:0a:b6:a2:08:03:
                    c3:1a:61:3c:69:51:16:5d:f2:e0:8e:8c:d9:a6:03:
                    d0:69:11:b0:79:5c:22:75:75:e7:b1:34:7a:22:5c:
                    f2:cd:43:20:95:06:de:ed:9b:bb:01:51:a4:83:4c:
                    48:e6:8e:38:0f:f4:7d:d1:cb:0c:f4:d5:06:47:38:
                    4c:ca:16:d5:5b:51:41:35:1e:b4:5a:bf:37:c1:fe:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C8:62:5F:7C:65:69:86:D1:73:F2:1C:E0:E9:56:19:E4:5E:46:9D
            X509v3 Authority Key Identifier:
                keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3f:ef:2d:8c:2f:7c:6e:e5:ec:02:4b:e8:c4:62:88:4b:ee:
         e0:9a:c9:d6:82:ea:49:b7:2a:f9:f3:ae:e5:49:da:9f:fc:d6:
         fe:c4:25:fd:22:cc:82:9a:73:8b:c3:7d:09:c0:e3:18:e9:82:
         0d:57:a1:72:b0:54:c6:1e:ab:04:42:93:62:52:04:65:1e:3e:
         2f:42:dc:52:3c:d0:f1:ed:5e:35:5a:14:71:88:c8:56:19:e5:
         a2:fc:05:29:58:ae:56:35:6b:e1:fe:f9:b7:ee:6f:b7:9c:76:
         87:30:a0:bd:79:a7:2d:47:46:cd:fe:c8:3e:55:ca:2e:da:26:
         33:b3:39:fb:d8:b8:5e:aa:9e:9d:b2:fc:67:28:d0:e7:ce:a9:
         e2:8b:26:7a:ba:b3:7f:87:41:9b:1a:5a:fd:10:d2:3c:29:e4:
         98:1f:99:55:78:45:81:65:2b:7e:60:cd:2c:3d:d2:c5:80:f1:
         89:f0:47:ce:f6:45:9d:47:17:2f:67:b1:c5:72:c8:1f:37:d9:
         fd:1d:23:2a:dd:8e:c5:2c:65:f8:e2:e5:5a:7e:e9:12:7f:13:
         82:b9:fa:85:0c:bf:2a:73:8c:ba:f9:9f:58:33:d8:9b:32:d0:
         69:3d:7c:7a:33:76:c2:42:b0:a2:84:0a:16:6c:9e:9c:a2:f7:
         7a:1d:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:54:23 2025 by rpki-client