Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
File:                     sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft (raw, json)
Hash identifier:          5ozmkpqS4EghY6Y33eX7LOy3Y2zPn8zAZRdZu6H3R4s=
Subject key identifier:   0A:AC:55:53:F4:2A:49:3B:38:CA:E8:C1:60:48:61:50:F6:67:10:D1
Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
Certificate issuer:       /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Certificate serial:       0198756297E03B6B44F25FA91BFB3E93B40F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 14:00:52 +0000
Manifest this update:     Mon 04 Aug 2025 14:00:52 +0000
Manifest next update:     Tue 05 Aug 2025 14:00:52 +0000
Files and hashes:         1: bjFNuvRZLnVPhxbqDpaNVvasSyc.roa (hash: Or9p+aN5TKflixXpvac1BP39grelci5lle0PuJ0UsF8=)
                          2: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl (hash: Ht6geVtuPn871t8R+NPz25UWwZyzGONPio7ySrWY4dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:62:97:e0:3b:6b:44:f2:5f:a9:1b:fb:3e:93:b4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
        Validity
            Not Before: Aug  4 14:00:52 2025 GMT
            Not After : Aug  5 14:00:52 2025 GMT
        Subject: CN=0aac5553f42a493b38cae8c160486150f66710d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:52:f7:27:cd:9a:2c:42:77:1d:56:1c:c2:17:
                    90:a7:34:13:dd:d9:a7:77:9a:23:08:f5:6c:8b:ad:
                    19:79:d0:ed:eb:a4:ae:3f:be:e6:6d:e9:18:20:54:
                    8b:0d:1c:58:fd:d0:21:c2:b0:89:dd:bf:3f:72:e2:
                    82:83:24:00:a9:6c:4f:5b:8a:95:04:4b:99:26:7f:
                    df:94:91:c2:7d:79:19:10:8c:6b:1b:53:1c:be:96:
                    30:a8:c2:0f:9a:71:84:97:25:3d:c7:eb:6b:6e:46:
                    7d:d9:c5:51:83:c6:ba:4e:2c:1b:41:2a:93:f5:01:
                    41:94:aa:cd:2b:8e:c6:36:4c:df:56:91:d7:34:fb:
                    d4:dd:5b:3e:91:a1:cc:ec:f5:9d:c1:7d:0d:e9:7c:
                    b3:91:19:ff:7b:61:fa:37:37:08:4f:94:27:ca:95:
                    12:86:3e:91:8a:52:75:75:4c:36:8a:b0:f0:71:cd:
                    5f:b2:42:22:de:67:3a:58:3a:e2:bd:70:b7:70:4d:
                    fd:02:a8:6b:d8:2a:0c:3d:b0:5b:d7:f1:2e:eb:83:
                    22:67:4a:cd:2a:66:a4:bc:7c:54:bd:02:4e:b9:62:
                    cb:d3:1a:92:2d:e7:5c:5a:2e:aa:28:9b:52:69:54:
                    71:6f:2b:df:8d:d9:6d:73:70:b5:7b:1f:09:04:55:
                    e1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AC:55:53:F4:2A:49:3B:38:CA:E8:C1:60:48:61:50:F6:67:10:D1
            X509v3 Authority Key Identifier:
                keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:48:7a:d1:c9:8a:cd:97:00:a0:07:ff:07:7c:76:99:57:1a:
         76:d7:20:ba:27:35:a4:ec:b5:50:c6:6a:c1:0c:21:bc:6c:a6:
         a1:cc:66:a6:1a:9f:c9:bb:2f:11:c0:0b:aa:26:6d:88:06:3e:
         8a:0f:c7:1d:1a:a6:19:e0:52:37:74:0f:67:00:7b:1e:87:5a:
         dd:46:a5:e4:6a:30:91:8c:cb:fc:2a:ff:21:18:64:55:a2:72:
         49:3c:5f:ac:59:cf:b2:54:6d:3a:58:c3:e5:d1:e6:54:a0:bb:
         7f:97:b6:c9:47:2d:b0:fe:6d:bb:80:96:5c:f3:f0:7b:f1:2d:
         39:33:b9:c6:16:fc:9d:b5:19:33:37:6e:92:c2:dc:8b:81:5b:
         3b:a5:bf:01:32:57:af:b3:ac:41:ea:0b:69:f3:d2:94:89:c3:
         59:94:87:21:8e:db:37:5d:f4:c8:cb:2d:52:48:69:83:e1:2c:
         4c:77:1c:bd:e0:fe:56:5a:ae:50:b0:6c:40:b9:9f:71:0b:3b:
         b4:aa:4c:2b:2c:20:c8:c8:cf:c8:f4:97:9c:41:58:1d:fc:32:
         16:b1:6a:10:61:a4:53:aa:a2:18:b6:c8:a0:37:65:85:31:ab:
         f4:49:2b:03:e6:5f:bc:a5:53:7c:7e:fa:f8:9d:cb:72:c4:0a:
         8e:20:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:54:31 2025 by rpki-client