Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File:                     s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier:          UfCdscv3BjSfb7wt61NsBU5Ia4dCbTDmd1x0YqR8GeQ=
Subject key identifier:   CC:D0:50:D7:76:D9:3A:AF:F2:5D:E4:EC:60:51:F8:57:63:2A:5C:3B
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer:       /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial:       019873E226E53AE2F5CCF7DAB3509B01F313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number:          1184
Signing time:             Mon 04 Aug 2025 07:00:57 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:57 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:57 +0000
Files and hashes:         1: AWpLE7spKuCZAaiwcgrEYb9HbDE.roa (hash: HqSrJdcOFCUWqqNPEe+PAqwdq/X6tR+SRGcYc+ZwSvI=)
                          2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: or7/zI1bPfhn9z8y7swsbAdtu6j95nnR9cRzeqjVnIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:26:e5:3a:e2:f5:cc:f7:da:b3:50:9b:01:f3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
        Validity
            Not Before: Aug  4 07:00:57 2025 GMT
            Not After : Aug  5 07:00:57 2025 GMT
        Subject: CN=ccd050d776d93aaff25de4ec6051f857632a5c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:29:0d:4c:70:75:da:57:45:10:08:e6:41:
                    f4:eb:85:1f:4e:60:4f:db:0a:1b:45:e0:c6:25:b1:
                    f1:2a:27:db:5a:c8:49:f4:0b:c1:f9:84:a0:71:6c:
                    fe:94:2e:d9:69:34:29:39:f8:db:b0:3b:71:45:38:
                    93:9c:0c:73:2f:be:64:54:2d:8e:9d:2b:21:01:2a:
                    a9:d8:92:45:da:cb:32:84:38:54:eb:b6:38:b1:4f:
                    6a:62:31:56:fd:80:21:20:d9:d3:6f:e2:08:94:42:
                    c2:e2:e2:85:37:eb:58:14:52:ac:99:e8:b7:4f:07:
                    8f:1a:3c:2d:08:4f:2b:22:c5:e1:82:55:b5:15:1a:
                    31:2b:4c:68:cf:d7:cd:71:20:f9:7d:2e:8a:64:3a:
                    2e:0b:ba:9d:82:26:e8:32:74:22:2d:89:d3:a6:6f:
                    77:a9:5f:0b:c2:de:64:52:ee:9b:f0:a9:04:26:87:
                    4c:fd:cf:2e:4b:7c:37:5c:df:84:73:8e:18:fb:48:
                    f2:48:7d:e6:eb:14:b3:32:a6:40:26:1e:8a:3f:03:
                    b4:31:13:d2:58:be:77:37:84:3f:c4:01:1d:ae:f5:
                    39:b3:f2:e4:40:0c:29:21:73:9e:f4:67:e1:05:de:
                    c3:96:df:e4:a1:76:b8:38:28:f7:89:ca:70:e9:ff:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D0:50:D7:76:D9:3A:AF:F2:5D:E4:EC:60:51:F8:57:63:2A:5C:3B
            X509v3 Authority Key Identifier:
                keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e5:9e:91:75:0f:9e:2e:30:7e:c2:73:e5:1d:65:6d:aa:e3:
         99:b6:2d:bd:b4:9a:51:81:f0:ba:80:70:b9:e6:06:51:6a:f9:
         89:19:f1:1c:66:6b:e3:c1:7f:2b:8f:2a:8f:91:c7:32:12:a5:
         36:15:4f:13:42:11:12:c2:d8:fb:86:ca:2b:ce:2d:f3:59:56:
         6b:81:e4:52:ee:39:15:a0:e5:ac:b8:67:7a:61:56:71:68:37:
         f7:03:eb:9d:32:05:16:90:2c:84:20:90:32:ab:a0:73:b3:b0:
         4d:bb:87:c5:d8:f0:eb:43:bc:30:c6:0d:2d:65:c1:c8:ba:7d:
         25:79:05:0b:36:bf:76:45:a5:f5:5b:60:db:cb:2e:e6:62:01:
         33:ff:9a:9d:a4:26:54:9a:3a:89:31:45:8f:b3:30:d0:19:d9:
         95:49:54:e9:a9:bf:cb:03:75:f2:33:39:e0:04:2f:b4:c7:a9:
         c9:fa:91:be:65:a7:56:d0:e4:e0:1a:95:08:34:9c:46:bd:8b:
         d6:c7:b6:8f:69:df:b2:8c:2f:f1:e6:56:7f:a0:c9:87:c8:89:
         8e:e7:42:9e:72:cd:ad:96:3d:b4:76:ba:11:8b:e4:4a:17:c1:
         f1:4d:79:f5:38:d9:a6:89:9d:3c:79:a9:d7:15:38:76:42:c4:
         9b:6d:35:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:52 2025 by rpki-client