Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
File:                     SdA41NOnW7-ev-owZGh7Xjs0b-M.mft (raw, json)
Hash identifier:          s/Rn7IjBEnoP+bOx84ZqHVMw+L4eahOhQ64/WUgwQLA=
Subject key identifier:   50:6C:C5:32:F4:57:7D:C1:C3:AF:38:0D:69:E7:19:8D:79:66:1D:E1
Authority key identifier: 49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3
Certificate issuer:       /CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3
Certificate serial:       01988B106EF646CC85B8583E2E488508AEF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
Manifest number:          0C44
Signing time:             Fri 08 Aug 2025 19:02:46 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:46 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:46 +0000
Files and hashes:         1: SdA41NOnW7-ev-owZGh7Xjs0b-M.crl (hash: xnf/3PggLQiLNX4/+KT3yoQO75NvjhAj4NXFM5xcwwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:10:6e:f6:46:cc:85:b8:58:3e:2e:48:85:08:ae:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3
        Validity
            Not Before: Aug  8 19:02:46 2025 GMT
            Not After : Aug  9 19:02:46 2025 GMT
        Subject: CN=506cc532f4577dc1c3af380d69e7198d79661de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:24:26:e6:c7:bd:d2:79:5c:bc:f4:a4:f6:
                    c8:25:79:57:f1:5c:24:5f:47:5f:0e:d3:43:7f:d9:
                    dd:f7:7e:3f:75:1f:9c:01:dc:93:69:80:7e:95:f6:
                    40:b4:f0:44:da:fb:49:64:bb:11:13:d2:94:88:2d:
                    48:76:37:f5:74:d1:51:a5:5d:02:a6:0e:bf:dc:6b:
                    77:16:13:19:c0:1b:6a:12:da:91:ae:fa:25:a2:60:
                    aa:e9:39:95:59:20:bb:ec:40:7a:5c:5f:13:e9:cf:
                    a6:4d:62:20:51:21:a2:41:59:02:4e:e2:9e:53:bf:
                    09:d1:53:0a:58:87:3a:0b:d5:e4:47:dc:76:05:82:
                    ac:ee:0c:fb:96:40:f0:67:f9:d0:ef:91:60:64:ad:
                    87:3b:7f:29:33:07:5f:89:4d:73:5e:15:1d:28:de:
                    ba:5e:31:b7:af:88:34:11:78:c3:0b:86:55:c0:e4:
                    50:a8:cc:85:d4:fe:a1:e2:86:e5:f9:c5:d5:7e:b2:
                    b9:80:33:80:05:c1:9b:96:5c:6d:11:d9:f9:5b:34:
                    50:d0:1a:fa:10:02:74:42:d8:cc:9b:e0:d5:29:ae:
                    ef:1a:ad:66:81:a0:31:6e:66:c3:15:4e:0b:27:9f:
                    6e:8e:ba:60:1e:db:69:3d:d2:bb:1e:41:81:05:68:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6C:C5:32:F4:57:7D:C1:C3:AF:38:0D:69:E7:19:8D:79:66:1D:E1
            X509v3 Authority Key Identifier:
                keyid:49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c5:68:40:f9:5a:81:88:1b:7e:68:0c:91:62:d8:fe:65:6e:
         02:a7:44:2b:67:4d:e6:49:b3:99:42:bd:ea:82:69:c7:08:54:
         79:2a:e1:db:4b:a1:65:f7:70:74:b6:2d:02:15:5f:02:07:3a:
         8b:b6:1f:91:1c:8a:5f:e3:b0:57:1d:a4:e6:be:df:f1:58:9f:
         10:57:46:03:dd:65:d6:3b:b3:b6:b7:d5:95:4e:b9:03:65:e6:
         f9:24:ad:10:b3:b5:9f:2e:4d:0d:ab:69:32:f0:65:63:27:85:
         60:77:c9:ae:d8:ae:01:b7:01:83:ba:93:86:a1:7a:91:f5:36:
         53:56:36:9f:b0:58:71:32:41:52:00:7d:de:79:45:5e:5c:d5:
         82:11:a6:f1:b5:96:d2:4a:4e:8b:ee:78:fb:54:0c:11:c4:46:
         86:e5:d8:5e:94:17:ee:c3:ad:a2:ac:22:05:de:a6:b3:68:c7:
         22:72:94:88:f3:c4:b6:5f:e4:82:9a:a5:6a:a2:73:d4:01:aa:
         ff:7a:56:6a:c9:54:0a:e4:e6:c8:6e:fd:e2:1f:7d:e1:55:23:
         5f:eb:78:48:e7:56:15:e3:2e:b4:45:1a:40:a6:b0:b7:5c:a7:
         f5:d4:53:a3:2a:04:4e:0c:08:6d:1d:d6:2b:02:f6:a4:f7:ad:
         bb:b5:1f:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLEG72RsyFuFg+LkiFCK70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZDAzOGQ0ZDNhNzViYmY5ZWJmZWEzMDY0Njg3YjVlM2Iz
NDZmZTMwHhcNMjUwODA4MTkwMjQ2WhcNMjUwODA5MTkwMjQ2WjAzMTEwLwYDVQQD
Eyg1MDZjYzUzMmY0NTc3ZGMxYzNhZjM4MGQ2OWU3MTk4ZDc5NjYxZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMQkJubHvdJ5XLz0pPbIJXlX8Vwk
X0dfDtNDf9nd934/dR+cAdyTaYB+lfZAtPBE2vtJZLsRE9KUiC1Idjf1dNFRpV0C
pg6/3Gt3FhMZwBtqEtqRrvolomCq6TmVWSC77EB6XF8T6c+mTWIgUSGiQVkCTuKe
U78J0VMKWIc6C9XkR9x2BYKs7gz7lkDwZ/nQ75FgZK2HO38pMwdfiU1zXhUdKN66
XjG3r4g0EXjDC4ZVwORQqMyF1P6h4obl+cXVfrK5gDOABcGbllxtEdn5WzRQ0Br6
EAJ0QtjMm+DVKa7vGq1mgaAxbmbDFU4LJ59ujrpgHttpPdK7HkGBBWgI5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBsxTL0V33Bw684DWnnGY15Zh3hMB8GA1UdIwQY
MBaAFEnQONTTp1u/nr/qMGRoe147NG/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2RBNDFOT25XNy1ldi1vd1pHaDdYanMwYi1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83MzU3NTYtODg1Ny00MjRkLTk1MjQt
MjBmNTMxMTIyYjU3LzEvU2RBNDFOT25XNy1ldi1vd1pHaDdYanMwYi1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC83MzU3NTYtODg1Ny00MjRkLTk1MjQtMjBmNTMxMTIyYjU3
LzEvU2RBNDFOT25XNy1ldi1vd1pHaDdYanMwYi1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMVoQPla
gYgbfmgMkWLY/mVuAqdEK2dN5kmzmUK96oJpxwhUeSrh20uhZfdwdLYtAhVfAgc6
i7YfkRyKX+OwVx2k5r7f8VifEFdGA91l1juztrfVlU65A2Xm+SStELO1ny5NDatp
MvBlYyeFYHfJrtiuAbcBg7qThqF6kfU2U1Y2n7BYcTJBUgB93nlFXlzVghGm8bWW
0kpOi+54+1QMEcRGhuXYXpQX7sOtoqwiBd6ms2jHInKUiPPEtl/kgpqlaqJz1AGq
/3pWaslUCuTmyG794h994VUjX+t4SOdWFeMutEUaQKawt1yn9dRToyoETgwIbR3W
KwL2pPetu7Uf8w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:55 2025 by rpki-client