Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
File:                     SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft (raw, json)
Hash identifier:          cCldV4eQO27dyz+jWVjAiK2KQV1uMfhbCq81QaD9CKo=
Subject key identifier:   F4:BB:76:73:FC:C7:50:2C:04:8F:CC:8C:26:7C:35:44:93:74:F1:E1
Authority key identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
Certificate issuer:       /CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Certificate serial:       01989F39D8E87376EF885EEA73CF0ED35B2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
Manifest number:          043D
Signing time:             Tue 12 Aug 2025 17:00:24 +0000
Manifest this update:     Tue 12 Aug 2025 17:00:24 +0000
Manifest next update:     Wed 13 Aug 2025 17:00:24 +0000
Files and hashes:         1: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl (hash: 0wZSn1SI/dk1Miq7VuOFnNsaiZvGEYUdQYBGvvF+ZrE=)
                          2: ie5Rxl_8lGCYh_KgPEkCnbuQsRk.roa (hash: GBFEJYPtX3jgZYzHGm9uh7GT7ECNm8iOg9HQZDPhsqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:39:d8:e8:73:76:ef:88:5e:ea:73:cf:0e:d3:5b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
        Validity
            Not Before: Aug 12 17:00:24 2025 GMT
            Not After : Aug 13 17:00:24 2025 GMT
        Subject: CN=f4bb7673fcc7502c048fcc8c267c35449374f1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:05:91:80:19:fb:8d:31:3c:8d:f1:8a:e0:e1:
                    4f:87:59:58:00:a5:d8:34:fc:5a:72:df:17:68:c3:
                    87:f1:dc:f7:cd:0c:b4:69:3e:c2:ef:7b:a4:44:2a:
                    28:18:e2:86:d3:dd:bc:0a:19:cc:2e:50:64:8e:01:
                    fb:17:08:ec:66:f2:97:0c:9f:43:c6:56:8e:08:b1:
                    64:b9:b3:9e:bd:7b:dc:5b:bd:4d:3d:dc:46:1e:2e:
                    7f:cb:c6:4a:e0:07:9b:0b:64:5a:61:19:6c:1f:9d:
                    b6:2e:23:38:32:9e:a5:c0:a2:ce:c2:68:96:e4:f1:
                    7f:8a:e6:6c:d9:14:4d:74:84:b6:28:c5:36:64:e5:
                    9c:cc:95:e7:e1:55:45:1b:e9:1a:b2:86:25:6f:51:
                    05:95:a7:f0:38:ff:a3:ca:1a:74:db:7b:e0:01:f6:
                    64:59:fc:13:a4:e0:1f:34:03:b6:79:25:33:c4:00:
                    a3:9f:e8:e0:24:31:3e:f2:3d:d2:47:77:60:28:06:
                    41:44:8d:ad:90:2f:4c:7b:5d:e5:6f:72:b5:ab:79:
                    d2:53:a8:38:1e:96:21:35:d7:b3:0e:e3:cf:91:0e:
                    56:b0:5b:34:32:0a:3e:ea:6a:11:f5:8b:3d:10:ee:
                    d6:80:f2:62:53:0a:50:9c:ef:2e:cf:56:ec:9e:53:
                    57:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BB:76:73:FC:C7:50:2C:04:8F:CC:8C:26:7C:35:44:93:74:F1:E1
            X509v3 Authority Key Identifier:
                keyid:49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:64:ba:f8:9d:d6:4e:dc:a7:ba:fd:4f:b6:d4:8a:08:08:77:
         62:fd:d2:78:75:7c:15:23:8b:7c:a6:e9:a9:f6:08:d7:c5:65:
         c1:81:67:0b:a2:28:b7:d9:e8:f0:47:77:15:de:eb:9d:08:e8:
         9d:c2:ac:56:b5:5c:1d:57:ff:ab:70:9a:5c:f2:16:ff:4c:58:
         63:b9:38:63:25:fe:76:fd:78:e8:dd:45:98:08:8a:91:24:29:
         65:b9:17:1a:20:d2:ad:2b:28:ae:23:f9:29:11:bf:b4:0e:68:
         d7:08:6b:14:b4:13:2e:e8:fa:1a:2c:e8:16:05:3b:64:fb:69:
         fd:18:8f:39:04:e5:a4:19:83:14:3c:1b:e9:96:0b:89:f6:c4:
         7c:30:24:34:d6:44:dd:41:c2:a6:e3:35:69:09:a9:1b:ee:2c:
         b8:fe:22:0a:e9:1a:3e:6d:44:c0:80:0f:4e:90:c5:67:71:0e:
         1d:7d:d0:7d:71:dd:b1:96:d9:82:c8:66:c0:2a:47:1b:e9:b7:
         6d:a7:7e:20:43:72:fa:ea:13:1b:5b:5c:5b:93:51:a4:38:eb:
         be:fa:2c:31:8b:48:ae:36:6d:58:f0:2b:e6:df:67:bc:25:1f:
         68:1b:ac:b5:a4:73:52:a7:0a:b3:df:a8:85:96:ec:03:1c:51:
         44:f2:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:19:26 2025 by rpki-client