Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
File:                     S-G7vlQAedK38nC5LOrzsqgW6Po.mft (raw, json)
Hash identifier:          BzESXKbdFvP8oaMSmqY/9VGZW0kyVdFXpuAxBb5uxFY=
Subject key identifier:   90:8B:06:11:70:6F:E3:7A:F3:F6:C9:7B:25:2E:2B:20:37:5F:EC:7C
Authority key identifier: 4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
Certificate issuer:       /CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Certificate serial:       0198820BCE657377EE3F8625EE1A5783CC0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
Manifest number:          0C3A
Signing time:             Thu 07 Aug 2025 01:01:08 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:08 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:08 +0000
Files and hashes:         1: 9hr0RxcMrr0PdZUeFGL7xFCCX6M.roa (hash: c+l8O2VvW8FmRNHxjGZmeZsqcY4y9njJ0XhuiOI82Ig=)
                          2: S-G7vlQAedK38nC5LOrzsqgW6Po.crl (hash: 03uKG9djtMThJFc2KuKJz9gU3b3efGYk7ryk3aIWU8Y=)
                          3: Wo69R9wkZdSu2YDZamu1cwfnvYY.roa (hash: M7Dkgn12kNJ0G/XHeqGYMOBhXYTKj/x9/fg1DkcC9rY=)
                          4: Yz-y591eNOrcrLSkt7bX4CY92Hg.roa (hash: oW3oUBZKt4uL8vuRz0uNo1Cj56FiYIaWKe1rVvQOsZY=)
                          5: sxzxRsYpVJ4N1lToM8Cy5xPqMsU.roa (hash: g5PD0lSPsiV5TiY4CJ8jfV/ckG/Bc1/ChU4XFCIeK1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:ce:65:73:77:ee:3f:86:25:ee:1a:57:83:cc:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
        Validity
            Not Before: Aug  7 01:01:08 2025 GMT
            Not After : Aug  8 01:01:08 2025 GMT
        Subject: CN=908b0611706fe37af3f6c97b252e2b20375fec7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:1b:23:2f:47:53:c6:cb:7d:6f:33:a2:a3:
                    c1:5a:f1:9e:37:58:87:65:a2:f6:7a:a4:db:31:f3:
                    ac:56:a1:5b:43:dc:dc:7b:a4:47:35:5b:df:b0:b7:
                    e4:b3:c1:25:76:6c:14:57:38:d6:03:1e:27:2b:4b:
                    91:4f:22:26:c6:87:0d:05:09:46:d0:86:af:bc:18:
                    e3:59:5b:0b:8d:60:73:7a:b3:f7:58:71:f7:fa:81:
                    2a:91:71:37:60:28:cf:8e:af:9c:e9:fa:a5:25:50:
                    76:e8:18:a4:06:c9:69:77:0f:5f:72:b9:c2:b4:56:
                    06:c5:e5:fd:d1:b4:50:1c:18:a2:2f:0f:85:76:86:
                    a9:a1:47:32:b1:11:ba:b4:ea:b3:7c:78:0a:dc:b3:
                    e0:83:f0:94:3f:86:87:40:73:25:7b:b7:69:5c:54:
                    0e:c8:84:87:55:77:03:5a:c0:f9:e4:cc:ea:8a:dd:
                    d1:f4:d5:5f:6a:0a:93:0b:76:a5:fc:ea:b3:c1:f6:
                    a1:57:54:64:80:6a:af:2a:e3:b1:17:a4:9a:b5:9a:
                    93:c7:7b:98:ab:22:e3:cd:f7:d5:31:f1:e0:d2:03:
                    80:17:c9:98:b9:28:57:d5:7a:11:5e:02:61:1a:0b:
                    e7:f1:8c:3b:a2:33:4a:ca:e2:3d:0f:d3:a8:00:df:
                    75:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8B:06:11:70:6F:E3:7A:F3:F6:C9:7B:25:2E:2B:20:37:5F:EC:7C
            X509v3 Authority Key Identifier:
                keyid:4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7c:3b:0d:07:96:a5:81:dd:10:5c:7d:a1:85:fb:fe:78:b4:
         ef:52:ef:5c:13:a2:31:96:53:d6:2f:ff:6f:93:0e:1f:7a:18:
         60:3a:08:fd:44:0e:80:fc:0a:93:3c:52:a5:2c:fc:36:b0:7d:
         95:96:6e:66:e6:8a:0d:ad:e8:ad:7a:c0:b6:04:6a:ef:0a:a2:
         16:45:26:64:e2:64:bd:7d:f9:8f:98:01:4e:80:97:e1:88:9a:
         33:21:23:99:1d:e5:f9:4e:47:0c:d9:7c:6c:64:cf:0a:d5:12:
         10:42:27:ed:fc:fd:f2:b0:56:fc:fe:9b:be:5a:e1:bd:c0:ad:
         4e:36:87:3f:6e:14:75:d1:9f:1a:62:dc:68:37:17:82:33:66:
         96:23:6f:c8:b1:32:5f:16:33:2e:ca:b4:cb:f3:c7:9f:7d:a8:
         14:2f:af:eb:11:0a:4f:d9:a1:8c:44:2c:78:77:9a:d2:3e:ce:
         2d:d3:1b:52:13:b1:11:28:5d:1f:09:64:0d:0e:4c:16:ec:6d:
         a8:f9:30:ba:73:99:13:46:45:ac:d4:33:7b:ba:bb:5c:71:ff:
         93:67:96:b5:d5:32:38:d5:a5:39:bb:97:3f:9f:d7:09:d3:2f:
         fc:fa:4a:98:5e:c0:20:3a:d0:2e:bb:52:c1:2f:94:5f:dc:8c:
         0a:41:ba:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:06 2025 by rpki-client