Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
File:                     scIIojstTYe-k_idUyvG9EkIgZs.mft (raw, json)
Hash identifier:          ug0fFMjYtG0jEdILm230TxvSgDzFu15w8h7Jgq8Cv/Y=
Subject key identifier:   99:A8:9A:13:D8:C4:0A:F7:41:D6:36:D8:AD:D1:B8:6D:DB:0A:6B:3B
Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
Certificate issuer:       /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Certificate serial:       01987306C3AF197108F8B2B07B5B53E94B58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
Manifest number:          0A7A
Signing time:             Mon 04 Aug 2025 03:01:19 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:19 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:19 +0000
Files and hashes:         1: St1eW7huW5NWmrTlCcZNOVav4YY.roa (hash: L1r59p9it1NHOb7n3iknNAhhpFyt7umgYxP2fwKVRnQ=)
                          2: scIIojstTYe-k_idUyvG9EkIgZs.crl (hash: L+uuLjPWkZOXqM2dhY2ea7XyEM2JUM728igHnCD5AZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:c3:af:19:71:08:f8:b2:b0:7b:5b:53:e9:4b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
        Validity
            Not Before: Aug  4 03:01:19 2025 GMT
            Not After : Aug  5 03:01:19 2025 GMT
        Subject: CN=99a89a13d8c40af741d636d8add1b86ddb0a6b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:06:49:a9:5f:b6:b3:56:50:59:68:ba:25:
                    6f:36:68:05:0a:e3:50:17:89:6e:ad:ca:70:f6:50:
                    2d:73:7e:f7:aa:99:12:86:43:aa:fb:ee:9d:5b:9a:
                    41:40:d1:e9:df:33:6b:49:5c:b7:da:dd:ad:86:2a:
                    1d:83:c7:44:da:83:6e:b2:09:60:0e:84:20:18:70:
                    e8:c2:98:97:02:b1:3a:b9:12:6f:a4:5c:c4:70:ad:
                    aa:4e:c4:f1:a7:a0:3b:cc:49:48:46:26:ec:72:bd:
                    e3:c9:f3:03:56:36:61:50:40:02:e4:82:19:2c:c9:
                    cd:b7:bf:2e:fd:9b:8d:79:b2:4d:a1:50:cf:27:5c:
                    60:2b:ae:49:a5:67:b7:2f:c9:bb:b5:71:ec:4c:69:
                    92:da:28:b7:1f:29:ba:1d:57:4d:d2:ce:f2:59:da:
                    22:0d:fb:45:48:a8:51:71:86:23:60:85:89:ed:9b:
                    89:b2:dc:11:c0:7c:8b:ed:88:b3:e2:2f:23:d6:ac:
                    f0:45:cd:cd:bd:6c:65:d1:af:47:78:2d:b8:d9:3d:
                    28:3e:6a:85:e1:3e:5e:c5:64:5e:27:37:42:60:3b:
                    51:3b:91:f2:a5:40:9e:98:0f:cb:e1:c4:93:82:8a:
                    31:05:4d:ef:f6:50:e5:a3:fc:95:0b:4a:46:86:04:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A8:9A:13:D8:C4:0A:F7:41:D6:36:D8:AD:D1:B8:6D:DB:0A:6B:3B
            X509v3 Authority Key Identifier:
                keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a2:fa:c5:72:ec:11:8e:47:b4:12:ef:90:12:87:e3:74:10:
         8f:43:34:fc:4d:e8:80:4c:76:8e:b2:08:69:4e:4c:8b:a4:4b:
         74:62:63:6e:4e:3e:44:21:84:1c:80:07:00:18:18:a2:80:e6:
         1f:4d:4a:7a:19:3c:3f:27:73:88:78:dd:e7:07:b2:38:16:e7:
         68:dc:ed:5e:98:8c:ac:1c:5e:dc:a9:0a:e1:84:84:23:a4:40:
         7d:4e:7b:12:7a:ed:88:17:3a:03:71:ad:7c:fa:03:d6:08:f6:
         7f:f3:b7:4a:b7:01:46:7f:9a:a5:13:60:94:8c:49:c4:6e:df:
         a9:3c:89:68:a5:63:54:66:99:d3:20:fc:ec:45:02:82:32:6b:
         6b:28:cb:8a:85:f8:a5:bd:9c:47:ac:fd:53:f1:3b:b0:c6:28:
         32:b9:21:02:62:26:d4:99:fe:06:95:8a:97:d8:f7:97:53:b8:
         9f:f2:51:f6:3c:5d:b4:95:12:ec:80:ef:19:44:3b:2b:41:5a:
         05:f0:11:49:62:fb:7f:6b:de:b6:e4:91:fb:fe:c9:bf:e6:10:
         e2:d5:2b:b4:be:9d:ba:43:d8:57:64:ff:1f:9f:ac:28:b3:35:
         c6:a8:c0:ea:fa:95:d6:a3:1c:41:81:8d:dc:c6:1b:c2:41:2c:
         29:1d:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:57 2025 by rpki-client