Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
File:                     szR4SqShmdfDbHOiZe0JSyGDgcM.mft (raw, json)
Hash identifier:          VtU1Ffpps/DGmOtZFqnmtwhqVhlP+9YAAWhph/6TmkA=
Subject key identifier:   30:2C:CF:F4:6A:92:52:C7:C7:4D:0D:A8:D8:60:C7:C1:67:CC:DA:C5
Authority key identifier: B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
Certificate issuer:       /CN=b334784aa4a199d7c36c73a265ed094b218381c3
Certificate serial:       019874506ABCB03B1DB24F63B1F8B8BF07DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
Manifest number:          0DEA
Signing time:             Mon 04 Aug 2025 09:01:23 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:23 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:23 +0000
Files and hashes:         1: szR4SqShmdfDbHOiZe0JSyGDgcM.crl (hash: HtXQLsPw7HNMNSUKgt7fwdiwlt65kARRO3LZykxmO18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:6a:bc:b0:3b:1d:b2:4f:63:b1:f8:b8:bf:07:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b334784aa4a199d7c36c73a265ed094b218381c3
        Validity
            Not Before: Aug  4 09:01:23 2025 GMT
            Not After : Aug  5 09:01:23 2025 GMT
        Subject: CN=302ccff46a9252c7c74d0da8d860c7c167ccdac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:15:d3:b1:b3:91:14:8e:3a:cf:ec:26:c9:
                    8e:04:29:2a:15:67:08:d1:ab:e4:a4:70:18:9e:31:
                    70:7c:8f:9d:87:8c:ec:ef:31:f7:b7:87:56:b5:02:
                    25:a1:01:9f:cb:02:de:b4:c4:f4:04:cc:03:5b:43:
                    8e:69:79:3b:fa:da:1b:d9:90:f2:07:52:e7:ee:ad:
                    46:27:68:9b:db:a5:bb:ba:95:ff:f0:ad:a5:36:ac:
                    18:5c:4e:19:bc:1e:01:69:15:29:4f:16:6f:7c:3d:
                    ac:e5:48:53:e5:20:67:d1:20:d0:2c:4c:2b:af:22:
                    11:c9:c7:d0:a7:59:f5:ae:c5:3c:c2:84:b0:66:35:
                    d1:6a:9d:07:38:38:c0:b4:30:82:43:93:f3:4b:ed:
                    98:2e:65:58:ea:49:fb:7a:4d:13:27:6f:0b:51:f1:
                    66:c3:89:ae:3d:60:f1:fe:e0:1c:4a:21:84:a5:c7:
                    43:4f:11:83:62:3b:34:b4:8f:34:bc:b4:a4:32:5a:
                    65:df:0c:18:4f:6d:11:8f:af:1c:0b:69:13:61:1c:
                    05:6b:6f:1f:3b:9b:cc:21:50:d7:64:0a:4b:59:82:
                    05:78:a8:bc:ed:63:03:5f:09:9d:d7:09:f8:78:6d:
                    e9:92:ea:e6:55:7a:1d:23:6c:46:e8:5e:af:60:16:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2C:CF:F4:6A:92:52:C7:C7:4D:0D:A8:D8:60:C7:C1:67:CC:DA:C5
            X509v3 Authority Key Identifier:
                keyid:B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6d:5d:99:97:2b:ff:80:54:43:26:5e:57:7b:e1:d4:19:4c:
         49:e4:de:f6:15:36:00:3e:33:75:48:0f:a6:a5:93:7d:3a:99:
         4c:6d:3a:ed:a0:f2:7f:38:e3:1c:c1:f9:1e:4d:a3:ec:73:7c:
         cd:fc:9f:90:68:8e:7c:b2:d1:e3:70:c6:77:ef:8a:b2:52:ec:
         f6:9c:dd:8b:57:7c:fd:ae:fe:b0:d5:80:d5:09:d1:57:99:83:
         a9:19:fe:f9:aa:bc:42:f8:98:88:9a:e2:7c:e2:21:ee:8a:77:
         8f:9f:b0:24:12:02:be:37:9f:61:ab:dd:eb:f5:cb:33:3e:3d:
         bd:27:44:5f:6a:f5:0d:c9:fa:dd:6b:6f:e9:da:54:8c:ae:fb:
         f4:aa:55:b5:64:2d:58:65:9a:2e:d9:5c:32:11:c8:ef:9f:59:
         6c:e5:9f:2f:9f:7b:63:23:33:6d:39:06:fa:91:ec:81:05:62:
         a4:08:0c:de:ac:5f:2f:bf:83:92:25:ba:cb:07:81:92:58:af:
         55:97:ab:20:0b:27:11:4f:80:ec:5c:65:3f:7f:4a:8c:b9:37:
         e4:c5:33:1d:53:18:d2:a7:1a:48:eb:3d:88:2f:9e:c2:8e:1b:
         d4:51:1a:44:e5:7b:38:aa:79:30:1b:96:68:ce:69:69:52:30:
         a1:54:86:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:26 2025 by rpki-client