Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
File:                     SlyG9c47cLXbUxXWqp1XoAG81oY.mft (raw, json)
Hash identifier:          KyBJtXcf4ZeOdhrTxKvKKQgxRm/fmsMnCGnOtzIzvNM=
Subject key identifier:   3B:75:4F:27:5E:52:28:1B:3C:88:59:00:35:C3:B3:57:DA:C7:F1:39
Authority key identifier: 4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86
Certificate issuer:       /CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
Certificate serial:       01988C5821EC37330B79D7F6F76E3F3F6CCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
Manifest number:          0729
Signing time:             Sat 09 Aug 2025 01:00:42 +0000
Manifest this update:     Sat 09 Aug 2025 01:00:42 +0000
Manifest next update:     Sun 10 Aug 2025 01:00:42 +0000
Files and hashes:         1: SlyG9c47cLXbUxXWqp1XoAG81oY.crl (hash: U4TntdbUyylLtg9/BcS2yDaKAua0TSN6MYC+eHM8hks=)
                          2: npLLh9RrcQH8xkykt9enwrNvhXQ.roa (hash: +AU9dB6ggcPcc7d+ifQcSn4cZAw7WXAjX0hF7llZTBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:58:21:ec:37:33:0b:79:d7:f6:f7:6e:3f:3f:6c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
        Validity
            Not Before: Aug  9 01:00:42 2025 GMT
            Not After : Aug 10 01:00:42 2025 GMT
        Subject: CN=3b754f275e52281b3c88590035c3b357dac7f139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5f:69:e7:5d:28:ae:2d:81:a5:33:e4:84:4a:
                    0e:e9:7c:eb:ff:61:14:e0:62:43:82:14:ca:15:ff:
                    67:83:17:b4:0a:d9:76:18:de:d7:43:d6:b8:4a:19:
                    20:52:fc:1c:c8:3e:13:52:44:a4:a9:1b:d5:fa:e4:
                    68:b0:ab:85:b7:88:2d:79:cd:33:72:5b:8b:46:43:
                    e6:8f:9c:b5:4c:a3:b7:91:8e:9b:1f:2c:c2:05:2c:
                    ec:96:75:7f:99:5e:00:e0:94:c3:7d:43:6a:2f:c5:
                    80:16:4c:16:36:00:7e:92:af:e0:22:3a:e5:ae:a9:
                    ce:1c:a7:f1:db:72:9e:cc:b8:f7:57:90:87:c9:3b:
                    99:59:cb:a0:53:98:09:49:8b:6a:fa:b0:46:fc:79:
                    a4:be:ad:fa:84:03:2c:c4:eb:b1:7e:75:4f:06:c6:
                    2a:3a:0e:da:14:33:45:11:74:e5:0b:4a:a8:82:f5:
                    13:fa:f3:5d:19:4e:49:e1:dc:09:d8:37:6f:87:e6:
                    e6:c9:3a:de:3f:6d:de:4e:74:a1:bf:93:37:2f:b5:
                    f8:77:4f:6e:91:79:29:a4:e4:59:1a:01:98:ae:4f:
                    ff:04:eb:42:4f:54:48:c8:de:f4:4f:f2:16:ed:81:
                    24:58:f8:c8:e9:40:c1:d7:28:5d:34:a7:f7:04:d2:
                    93:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:75:4F:27:5E:52:28:1B:3C:88:59:00:35:C3:B3:57:DA:C7:F1:39
            X509v3 Authority Key Identifier:
                keyid:4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:53:56:cd:ba:b2:4d:df:39:06:4d:d2:d2:9a:df:2f:bc:7e:
         b5:24:69:7f:54:71:43:c8:bc:4a:aa:b0:78:46:8d:f0:20:9c:
         aa:e1:96:fa:9b:f7:56:b1:44:a2:78:15:01:d2:b4:83:17:a0:
         89:f5:18:ce:0a:a7:22:20:85:6e:ae:f6:08:1d:b3:32:a8:f9:
         8c:e4:d7:54:5f:99:bc:e7:74:9a:ad:da:8b:0d:24:28:8b:96:
         ad:3d:14:b2:78:46:23:a1:61:fc:1a:38:bd:5b:9c:3f:96:d3:
         86:e2:3b:6b:21:f5:8a:fe:a8:0c:40:9c:4e:1e:4b:b4:e9:f8:
         de:77:0f:04:c6:a3:68:02:f9:18:c0:b3:ed:43:25:ab:ee:b0:
         d2:83:a7:03:1f:d3:4d:81:dd:89:6f:10:f1:80:e3:5f:d4:0e:
         97:b2:d4:e8:71:72:85:f4:1f:ef:8b:80:95:f0:98:9d:05:d7:
         8e:08:5c:34:99:14:d8:55:5a:23:00:15:3e:89:7f:dc:94:8f:
         ec:d6:de:3b:c2:a8:5a:cc:c6:f0:be:0a:24:ae:b2:8a:91:f9:
         72:a9:0d:bb:e9:43:04:12:6a:7b:aa:60:09:a9:d6:34:bb:3f:
         93:42:2c:c2:cd:53:cd:b1:53:fe:06:7a:42:be:1f:b7:b6:67:
         98:61:55:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:41 2025 by rpki-client