Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File:                     Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier:          XEuG86fo9mrgQYHsFqVTTrkxdYmvSXlkaEQE/ufNnAA=
Subject key identifier:   F1:77:EE:77:B5:4A:E6:1A:D5:D6:E0:90:E5:38:32:82:6A:E4:A6:8A
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer:       /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial:       01988C58ABB8BB4F502711144CFF6E63272C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number:          0A31
Signing time:             Sat 09 Aug 2025 01:01:18 +0000
Manifest this update:     Sat 09 Aug 2025 01:01:18 +0000
Manifest next update:     Sun 10 Aug 2025 01:01:18 +0000
Files and hashes:         1: 63RWpTzYaUMklcl62HBy6xUd3L4.roa (hash: Un1n3GmyQj6VVqYhoRSHcYh85a7qnY1jg5MCSUwKUTc=)
                          2: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: jWDQQ57+BlV5enrhAXe5cRrc0JtE/MwZRNdGnXYfNa0=)
                          3: XoKGaT2Y4cimov2MwIZbMUFcNik.roa (hash: nUamhX6MnewzR6j8dYV1oqge5T4xxq+U39rAZAcBMTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:58:ab:b8:bb:4f:50:27:11:14:4c:ff:6e:63:27:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
        Validity
            Not Before: Aug  9 01:01:18 2025 GMT
            Not After : Aug 10 01:01:18 2025 GMT
        Subject: CN=f177ee77b54ae61ad5d6e090e53832826ae4a68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:b3:3e:39:13:c3:22:ea:5f:7d:ec:00:a8:
                    e0:83:75:d1:0e:03:d5:21:5a:1f:65:d2:a0:4e:32:
                    6d:cb:8d:26:7b:ed:f1:93:70:ca:7b:35:bd:f1:10:
                    84:01:60:bc:9b:00:03:d6:7b:7b:97:1f:eb:bb:bd:
                    4a:da:1e:8c:ba:bf:a0:64:12:00:90:24:17:12:b6:
                    ea:0a:50:93:8a:fe:9a:e4:f5:cc:75:3b:e7:d2:29:
                    5a:de:60:1e:15:d6:a3:e8:de:2a:1d:d4:2f:04:ec:
                    27:c4:75:7b:c1:f7:6c:59:a5:9a:f3:db:0b:c1:be:
                    a2:5d:0b:e2:5c:41:8d:70:87:ad:98:36:c5:33:5e:
                    7f:5f:37:cb:af:34:ba:63:37:12:83:bf:55:51:6f:
                    dc:88:ce:17:b4:5c:73:9f:f5:51:d2:18:68:5b:d9:
                    fc:35:5c:ed:a8:1a:20:de:8d:d6:5f:a2:c1:6e:23:
                    86:8a:31:b8:ed:08:14:d1:d4:b8:d8:5c:6c:e5:cf:
                    99:0a:2f:ff:ff:59:03:de:d6:5b:6b:dd:49:9f:59:
                    99:7d:5e:90:b8:7e:9a:1c:dd:1e:ca:5b:84:7b:c0:
                    79:9c:79:b2:a0:6c:56:68:64:7b:92:52:e2:34:a8:
                    86:98:1b:37:f3:49:5b:12:a7:e2:e0:54:97:ff:ab:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:77:EE:77:B5:4A:E6:1A:D5:D6:E0:90:E5:38:32:82:6A:E4:A6:8A
            X509v3 Authority Key Identifier:
                keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d6:d3:52:4c:5e:cc:a9:47:c1:48:0c:9f:ba:07:74:33:81:
         b9:8e:0e:0a:bf:a6:c7:bb:c4:a5:49:52:03:bc:49:26:8a:f8:
         fc:ca:3b:fb:9c:6f:66:0f:99:c3:c1:9e:87:7c:8c:d0:84:e2:
         db:f3:05:84:6a:e7:8f:b8:c3:f0:e1:04:01:db:a9:52:72:df:
         21:a9:d1:d4:ce:e1:39:a3:ca:41:19:c4:ba:e2:01:0a:1e:f8:
         da:06:cc:f5:e8:45:1a:e0:0c:1e:69:44:53:57:9f:fb:2c:2b:
         74:4f:8d:90:d0:1b:5d:8e:3c:33:46:89:c7:98:d6:38:fe:45:
         6e:15:34:01:2d:5e:19:d3:e0:77:43:75:45:bd:82:7f:57:23:
         21:eb:eb:62:22:ae:96:8e:f4:12:a2:92:cb:6b:32:fa:e8:5f:
         af:13:cd:a8:c6:d5:79:4e:e1:52:2e:ce:2e:72:87:87:18:80:
         dd:73:21:f5:97:fe:37:e9:f5:5e:d4:a0:f1:93:6b:24:e3:eb:
         0e:f0:92:b3:2c:49:e5:ea:c0:7c:fa:90:fd:45:0e:68:91:04:
         1a:51:f2:b3:ac:17:2e:79:d6:46:ce:95:d0:d0:49:6d:c4:63:
         36:40:15:a9:18:af:a3:ef:a9:dd:d4:81:9b:d7:c8:68:14:47:
         61:39:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:59 2025 by rpki-client