Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft
File:                     syj-JYobm_YUimzg6KcS8YhAkEw.mft (raw, json)
Hash identifier:          fsrFXXegdk6EFswErxiCukSM6d8665VUmjhfDZL3kp4=
Subject key identifier:   14:AD:77:52:C8:B8:4E:E2:A9:A1:F1:20:B4:67:39:37:47:9B:09:9B
Authority key identifier: B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C
Certificate issuer:       /CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c
Certificate serial:       01987E65E4E4F67FEE51C6EAA10CB64A655F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft
Manifest number:          1624
Signing time:             Wed 06 Aug 2025 08:01:03 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:03 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:03 +0000
Files and hashes:         1: csVsVOJyNiX8ZBdrkB1Q1Y3Vh50.roa (hash: WI/e8U0rzHFdNl/a0Rdvy6scdzkHY7t0thSHPZwHq5o=)
                          2: syj-JYobm_YUimzg6KcS8YhAkEw.crl (hash: F1sbILspwVgpXI9pli4NdueTBJV8P++HG9kZHzAQH9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:65:e4:e4:f6:7f:ee:51:c6:ea:a1:0c:b6:4a:65:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c
        Validity
            Not Before: Aug  6 08:01:03 2025 GMT
            Not After : Aug  7 08:01:03 2025 GMT
        Subject: CN=14ad7752c8b84ee2a9a1f120b4673937479b099b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:14:77:04:df:b6:8a:07:6d:d2:e0:17:a3:bb:
                    e7:29:cb:81:86:42:95:2b:3b:e2:78:1f:b1:52:37:
                    e6:99:0e:0e:4a:b4:9b:cb:fa:da:82:c2:5c:00:07:
                    b9:dc:42:f9:5f:0a:d1:87:db:a1:85:c2:18:c4:fb:
                    93:0e:f6:3b:a7:8e:80:e8:82:00:3f:66:76:31:04:
                    35:21:b0:93:b6:9f:e1:7c:70:11:1d:3d:03:35:a8:
                    c3:6e:05:b8:2b:6e:d0:21:99:ff:82:e6:d1:b9:25:
                    84:0e:f2:da:97:2b:88:57:20:51:a9:31:6a:33:c7:
                    82:44:8d:fe:f7:67:ce:7a:31:4e:44:69:3f:d7:c5:
                    62:51:9f:2d:fd:b9:11:dd:f9:ac:81:e9:83:33:ea:
                    18:15:cd:82:90:e1:da:a0:99:87:8e:a5:0a:fc:71:
                    ce:94:11:83:23:8c:fa:68:7a:bd:37:fc:8b:61:ef:
                    0d:a3:4e:85:3a:1c:33:bf:b7:22:25:67:39:63:ed:
                    e2:14:07:09:48:ab:a8:67:6b:56:e7:b4:37:67:a3:
                    0d:1f:2e:ce:b5:2b:32:23:64:ed:a3:88:5a:3a:cf:
                    ac:1e:c4:11:24:e5:14:b7:fb:10:07:71:d0:ca:ae:
                    85:7b:7f:11:66:cb:34:1f:c4:b6:d5:60:69:36:29:
                    19:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AD:77:52:C8:B8:4E:E2:A9:A1:F1:20:B4:67:39:37:47:9B:09:9B
            X509v3 Authority Key Identifier:
                keyid:B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:31:b0:0d:42:c8:9f:0d:a7:4d:b1:0c:74:66:59:0f:69:44:
         e1:c0:91:78:25:ca:82:2d:40:c5:1a:9f:71:4f:95:fa:09:83:
         50:d6:6a:cc:80:d2:b2:02:c4:98:a2:e5:2b:0d:cf:fe:9b:9a:
         55:31:94:29:8e:78:2f:4a:46:71:2f:5e:26:9a:b1:52:39:ad:
         a6:6a:4b:d7:24:0b:11:a4:ca:e8:6b:0f:f7:09:7b:65:7f:ff:
         de:80:75:f0:31:8a:ba:f3:3f:d7:94:ec:85:0d:35:d1:3c:87:
         1f:10:ed:f6:9d:43:a1:59:c5:0a:81:10:21:dd:27:40:74:6b:
         dd:41:fd:8e:58:37:f6:a9:9e:be:d2:60:b3:5c:65:b6:a5:fb:
         8d:cc:c7:ac:c1:a7:ef:d9:4e:e3:06:4e:fe:05:59:99:8e:e5:
         e6:f6:7c:f3:83:72:ab:50:13:f2:a3:96:b5:76:d0:d2:2f:cb:
         38:5b:88:c9:54:18:f5:22:d8:74:b8:7a:a9:7a:e3:ec:9a:b0:
         1f:a7:80:93:d3:5a:80:57:fb:dc:0f:6d:4b:48:89:83:30:d0:
         88:69:93:d7:fc:3b:d2:29:5f:69:0d:d2:e6:3c:f5:46:64:37:
         87:46:64:fb:94:05:96:1d:78:d2:b5:22:17:41:c2:f3:63:6d:
         07:44:5a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:15:01 2025 by rpki-client