Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
File:                     stsr_PWdmcpwgzcI_TADLyP-9IU.mft (raw, json)
Hash identifier:          dDBbJc4ue/mLIkh64NBvmVpeobpO80Va6/MI82oMKo4=
Subject key identifier:   8B:E6:DD:6F:14:A3:D9:1C:23:AF:DD:B8:D6:DD:E8:83:64:3D:40:BA
Authority key identifier: B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
Certificate issuer:       /CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Certificate serial:       0198729827AD21589FDDD770ACB2B16FB5C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
Manifest number:          15E2
Signing time:             Mon 04 Aug 2025 01:00:30 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:30 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:30 +0000
Files and hashes:         1: 8OSq_me_piuY9aTEESBxQ_Nz1Zc.roa (hash: jli/f4rA8lzODNLo/sC1h2DAhvEwSPZMgYQGoXMtAvM=)
                          2: stsr_PWdmcpwgzcI_TADLyP-9IU.crl (hash: wKzaGVeCsfjn4WPMiEKFtRquYoOvkaWcOFlp5exFAfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:27:ad:21:58:9f:dd:d7:70:ac:b2:b1:6f:b5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2db2bfcf59d99ca70833708fd30032f23fef485
        Validity
            Not Before: Aug  4 01:00:30 2025 GMT
            Not After : Aug  5 01:00:30 2025 GMT
        Subject: CN=8be6dd6f14a3d91c23afddb8d6dde883643d40ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:4d:8f:00:c8:45:5a:5a:94:99:5c:90:4a:
                    55:18:31:49:ef:6a:8d:02:67:01:6a:0f:e9:1c:a9:
                    50:47:f9:5b:1a:c0:38:d9:15:4c:05:8e:18:a9:8a:
                    75:6e:e3:1f:aa:83:14:77:96:60:9e:2d:a8:2e:cd:
                    45:c6:b1:07:e0:c0:93:0f:25:0e:5a:ac:a5:60:e8:
                    7f:88:76:12:da:52:d2:18:56:d2:14:67:95:a6:25:
                    53:ee:32:9c:57:c0:99:72:00:33:5f:83:fa:72:57:
                    76:b6:57:5f:b9:f0:d7:e2:fe:47:49:33:16:ec:a2:
                    50:92:60:3c:1a:3e:fc:1f:a4:89:9a:fe:42:9a:ce:
                    b5:bb:12:36:6a:8c:3b:71:da:68:28:e0:8a:22:47:
                    25:dd:64:fa:ca:0b:ee:25:38:1d:f7:9b:df:0f:c3:
                    43:17:3f:b9:a1:ff:65:d3:a9:e4:19:5e:12:dd:63:
                    63:b2:0e:05:24:00:df:d9:7d:36:6e:b5:cf:d8:02:
                    2e:85:fe:17:ec:db:78:72:5d:f1:9f:49:a9:dc:2c:
                    d7:75:70:3b:cd:69:50:4f:33:65:ad:58:60:22:57:
                    74:f1:85:97:1d:db:1d:57:10:73:78:64:31:dc:ec:
                    ce:77:f2:7e:1a:ec:0f:13:c0:1f:45:07:d2:2e:f4:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E6:DD:6F:14:A3:D9:1C:23:AF:DD:B8:D6:DD:E8:83:64:3D:40:BA
            X509v3 Authority Key Identifier:
                keyid:B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:bf:71:1a:2b:d0:7e:25:58:2a:61:70:fa:e4:9e:09:8a:e3:
         4b:c2:f9:a3:97:d7:6a:29:4e:e8:9d:7f:76:f9:65:89:5c:03:
         dd:ed:a0:c6:44:ee:89:34:48:2d:8a:06:04:8e:67:73:12:10:
         a4:9b:08:3f:77:af:7c:05:21:e3:84:80:49:d3:4a:92:0e:c5:
         aa:82:70:aa:cd:46:49:2e:64:41:64:d7:9b:7c:ff:91:89:81:
         61:ed:ee:fb:ce:f5:0b:7d:9f:4a:87:b8:63:39:7e:97:c8:4e:
         a3:e3:74:64:80:8d:0a:a2:4b:a7:cd:9f:fe:c6:35:83:87:2b:
         1a:84:be:1e:a8:c0:c8:5c:50:ba:99:94:e4:8d:8e:4c:a4:fa:
         fb:d3:c7:a1:f0:cd:ac:91:dc:a5:72:81:f3:e7:89:07:83:59:
         20:12:46:8f:af:12:85:54:7a:11:45:a3:f4:fc:ba:81:1f:1c:
         20:8b:ea:f8:83:5f:1d:cf:1e:68:65:cf:9d:3d:09:7b:ce:4f:
         31:d8:61:55:e4:75:57:43:6b:74:5c:75:6d:68:22:60:f3:2d:
         97:6f:ba:e7:c7:5e:15:cf:4e:78:ff:f9:b1:75:1f:9a:c1:9a:
         fa:52:3e:07:1e:64:82:d2:b0:61:4d:50:19:aa:7f:2e:76:ce:
         62:e7:b4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:44 2025 by rpki-client