Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File:                     BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier:          m3Es+AIv3WmA3XYmDCcSsqfGQ5qZAzSocKTTrwQrQuo=
Subject key identifier:   01:63:EB:08:F7:94:8A:65:6A:F8:84:68:BA:FD:DA:3E:71:A2:0B:7E
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer:       /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial:       019874500C07341EEE6E9649ADAEB8530578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number:          02FF
Signing time:             Mon 04 Aug 2025 09:00:59 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:59 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:59 +0000
Files and hashes:         1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: uKGgyJtk4653BTINGdQL2BmJLXZGuLEJ/dnQwKBbIE0=)
                          2: XlhaEzLsA7jWqPOILfz8Yhd9kdk.roa (hash: fE0R2m8vpEkHRD5syUluKcIvECTiC6hfTnpdsOL+n0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:0c:07:34:1e:ee:6e:96:49:ad:ae:b8:53:05:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
        Validity
            Not Before: Aug  4 09:00:59 2025 GMT
            Not After : Aug  5 09:00:59 2025 GMT
        Subject: CN=0163eb08f7948a656af88468bafdda3e71a20b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:52:fb:58:e9:8c:5d:d6:c0:8f:bd:d9:3d:
                    40:11:ab:07:af:13:10:92:60:19:42:0d:12:ec:f7:
                    c0:58:94:5e:c1:73:64:19:05:ff:e7:b4:1d:17:89:
                    44:bc:0a:1f:36:e7:ac:a0:c0:ed:1e:e1:f6:15:58:
                    2d:bb:0b:b0:e0:44:b1:51:51:e1:94:1b:42:65:58:
                    f8:17:7a:e4:11:50:be:e2:7d:67:80:2b:30:06:e7:
                    99:72:c1:8e:bf:b1:fb:9e:00:6c:b2:a7:f7:60:3d:
                    a8:a7:e2:b0:f7:eb:7d:38:b3:42:3c:0a:5b:0d:2c:
                    ac:d3:a0:25:12:1b:0c:9a:50:37:ea:3f:f2:f3:9a:
                    1b:3f:dc:66:7a:8f:40:05:9b:0a:b6:85:3c:31:1c:
                    8a:1e:9e:9d:26:94:ec:d6:7b:9c:5c:5e:9d:81:5c:
                    94:18:0c:74:68:de:57:b0:93:9d:e8:4c:21:bc:a4:
                    b0:a5:9f:f9:53:73:1d:ce:d8:4d:f1:26:e8:e1:bb:
                    26:30:b1:83:01:a8:2b:9f:0e:be:59:5c:c8:30:cb:
                    f6:31:bd:1c:52:4e:c7:0c:f8:53:cc:50:05:26:b6:
                    84:d3:19:86:cc:0e:22:62:33:81:57:2d:00:9b:c1:
                    e9:13:c8:91:20:82:6a:6f:9f:de:8f:3f:77:38:b7:
                    f4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:63:EB:08:F7:94:8A:65:6A:F8:84:68:BA:FD:DA:3E:71:A2:0B:7E
            X509v3 Authority Key Identifier:
                keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ee:24:bc:ca:4b:df:2d:65:bd:03:11:d1:ef:85:ba:ac:ff:
         cf:4e:65:ad:b4:ad:47:7d:eb:b2:74:c0:16:17:e4:a9:d0:dc:
         c8:f6:7f:d5:dd:e0:0f:91:f7:44:69:a0:f7:d4:c1:bf:94:9b:
         c1:fa:ca:77:cc:98:8d:ee:cd:ba:16:16:51:b9:70:a2:f3:e7:
         52:fe:16:d7:ce:42:87:6b:05:34:66:fb:7c:e0:5d:82:5e:9e:
         34:a3:d1:76:95:48:8a:49:e6:a4:97:23:e9:e9:cd:a7:58:13:
         e4:d5:ec:2a:38:de:aa:3c:8b:37:2d:00:92:29:9c:5c:de:49:
         f9:e2:aa:38:49:7c:db:91:c2:01:39:48:2e:e3:cc:18:f0:21:
         63:85:13:49:cb:37:d5:17:ef:61:7b:ff:f2:3a:12:07:c3:c6:
         1f:04:a2:7e:5f:df:21:b7:81:e4:2c:3b:33:f3:1c:c6:72:fd:
         b2:93:97:c1:d9:42:cc:1d:d1:3f:1a:1b:0d:4f:20:db:d7:c7:
         a0:bd:ca:dd:b8:ca:c5:8d:20:0e:30:9c:62:7c:7a:6d:e4:2c:
         97:88:02:cd:c2:16:5a:c9:21:1d:08:27:ca:ec:59:83:88:b6:
         2c:8b:f8:6f:ae:f2:8b:75:4e:4c:47:d6:a0:bf:89:75:c6:5e:
         89:dd:2a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:39 2025 by rpki-client