Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
File:                     _SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft (raw, json)
Hash identifier:          6Nts/qs4awJRNULI1L2xJoKH2EUsgj4kr0e2JNYuPrc=
Subject key identifier:   97:23:18:C1:9F:33:1C:10:4A:05:CB:BD:AC:F4:02:1A:4C:24:0D:D4
Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
Certificate issuer:       /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
Certificate serial:       0198952483BC572CB9EEFD630CD580FD4295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
Manifest number:          1139
Signing time:             Sun 10 Aug 2025 18:00:54 +0000
Manifest this update:     Sun 10 Aug 2025 18:00:54 +0000
Manifest next update:     Mon 11 Aug 2025 18:00:54 +0000
Files and hashes:         1: 5ZcLxiewB6SlgnkXrkL_qV-6c70.roa (hash: GbaGUbv69G2XGzJlZWZreb/2hT1CRKa032XRQqRiLc0=)
                          2: I1O4inp7HBvWNe9o3Cdiqxo24PI.roa (hash: w0+4BIRKhD7XUvL36J282b0/EXDqyGM8URO+oQQ/ReM=)
                          3: QUq_as-wJbivzxLijTmqQSzAeeM.roa (hash: Obggdbq+FXYocjRAbiQV6ufwU9548OHhlSGKsE0Fnq0=)
                          4: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl (hash: B2OJdO8MNjVjj8H3L0o2+rg9TZji3eNXZkwGohl4UQQ=)
                          5: fUAyjzobbYqY4LtTx9KW62S7ym8.roa (hash: IdzdGJHWpk15Q0jGSrpbWLOfiHsRudIY06wcbYibU3s=)
                          6: rSVe0qwmHRmRSbc-BqRXWgwo8xg.roa (hash: r3p05wO+xtEje8UL55zhFJYQg8/aaGUGyXfpX1tlFYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:24:83:bc:57:2c:b9:ee:fd:63:0c:d5:80:fd:42:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
        Validity
            Not Before: Aug 10 18:00:54 2025 GMT
            Not After : Aug 11 18:00:54 2025 GMT
        Subject: CN=972318c19f331c104a05cbbdacf4021a4c240dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:44:7b:b3:47:fa:57:2e:4b:54:af:65:4d:
                    cb:26:cc:8d:7e:3c:3e:57:07:23:24:81:57:fd:59:
                    e4:94:3d:30:57:86:62:97:64:2e:44:b6:31:1a:fb:
                    1b:de:d4:73:8b:a5:28:54:64:71:8c:db:b4:5b:a6:
                    35:0c:27:0e:3c:e5:79:41:9a:fc:4a:20:93:c1:fe:
                    9b:9c:f0:30:ae:f8:fd:5f:87:ae:96:0e:cc:58:d3:
                    32:41:8e:5f:4e:63:62:76:62:42:8e:14:c9:41:c9:
                    d2:65:a4:cf:6a:37:b0:04:b8:52:d6:45:d8:1d:eb:
                    04:a7:cd:68:68:9e:86:6c:f0:9d:5c:4b:6f:43:f0:
                    84:8a:f7:27:0a:34:55:5c:80:6a:47:ea:72:b4:3f:
                    bc:9a:e9:10:47:4f:b5:ea:53:a9:c6:ab:24:7c:87:
                    fb:cc:c2:92:4e:6a:6f:ef:5a:17:70:9f:54:53:ba:
                    b9:f6:3c:bf:b6:f3:b8:37:51:34:bf:f2:86:fc:4b:
                    c7:af:29:fa:29:b1:0c:fa:78:9f:32:7e:85:82:bc:
                    85:1c:89:7a:fd:9b:c7:d7:2f:54:ba:23:fa:e7:dd:
                    8e:59:14:a2:e4:82:a0:a0:70:9d:3b:89:20:25:b3:
                    be:2d:37:d3:0c:3b:bc:03:ee:81:12:14:8c:71:24:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:23:18:C1:9F:33:1C:10:4A:05:CB:BD:AC:F4:02:1A:4C:24:0D:D4
            X509v3 Authority Key Identifier:
                keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c5:f3:6e:12:4b:11:ce:27:85:09:c0:da:ea:26:46:b1:1b:
         a0:c2:7c:69:43:4a:53:bb:83:ec:d1:b1:79:80:dd:8b:d4:4a:
         15:49:44:1d:56:8a:71:19:10:9f:31:2b:a3:79:07:18:64:7b:
         00:93:6c:82:b1:22:73:6a:ea:42:70:7d:e4:3e:8d:24:cc:26:
         e2:53:b3:58:97:13:43:7a:f0:e3:b2:64:14:81:fd:4b:81:ff:
         2c:75:96:6c:25:0e:c2:11:d1:d5:72:c6:0a:c6:74:00:e9:c2:
         d4:ac:7f:40:4c:b4:b2:b8:34:2e:e9:5f:7a:d8:bc:2c:ef:d9:
         1c:7c:2f:33:a9:88:76:a5:3b:22:c7:ea:5e:df:61:7e:4f:05:
         a4:bd:22:d8:a6:86:4c:71:2e:2b:6c:86:81:a3:5c:6d:17:be:
         ef:a0:22:0d:6c:fe:96:e2:55:df:dc:85:96:d8:e7:c6:d0:52:
         5f:45:9a:9a:8c:df:b5:23:93:08:54:bf:7a:1a:a4:67:5f:4a:
         1a:1a:ba:40:09:56:3e:9a:57:19:e0:b6:9b:bf:0b:47:0a:d6:
         7d:da:94:5f:a3:95:94:25:5d:9e:04:8b:d0:39:f8:bf:cb:98:
         c4:25:47:51:61:d1:8c:05:c1:ec:6b:ce:57:c8:70:76:e2:12:
         b1:b7:96:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:52:17 2025 by rpki-client