Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
File:                     SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json)
Hash identifier:          5gXVW/+Lkd3RkpuZUPF0bw2Mk3sq0nyLmeFFxusHm54=
Subject key identifier:   87:C4:23:4C:92:5E:01:CA:23:DB:84:E6:A2:84:2A:7F:97:38:1C:1F
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Certificate issuer:       /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial:       0198752B565DA98140516870F2507E480929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
Manifest number:          0711
Signing time:             Mon 04 Aug 2025 13:00:31 +0000
Manifest this update:     Mon 04 Aug 2025 13:00:31 +0000
Manifest next update:     Tue 05 Aug 2025 13:00:31 +0000
Files and hashes:         1: 9nEOqGi3_--NX0-5h6fT715ElSE.roa (hash: q/iRA1Cz4NG+otf3xGE1FkrnptD7RCBMfGXAmamLUgo=)
                          2: O442f9rKCameMmZGS2am4On1RJE.roa (hash: Tjn+0NJyIaKfDErYElD/Vnb1U5GiOqlQwXo7lUYpajU=)
                          3: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: whwPWfw5wqOzjdJfzslzP5rnI+hKxyxNh/3ric/27zg=)
                          4: XhNIRKox72ceLxS-HicNdteAlnc.roa (hash: QNRbEve8iPmaf5PJ3d4wKSJFvAQJTgfZsNNYbZDbIlc=)
                          5: gHtkVv0cKLf0CoLLrA1HPs8--tc.roa (hash: lzgrRuK97VTpJB6pUFDr+SFOzxSSWsmsSeiC+ga0uf8=)
                          6: oX3OGzwxfpoj75NeGxUgbWj5Nag.roa (hash: AUpPKp6STpZ3+I37dxgfx0DnwlKN78RdnPEKRCGUs1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:56:5d:a9:81:40:51:68:70:f2:50:7e:48:09:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
        Validity
            Not Before: Aug  4 13:00:31 2025 GMT
            Not After : Aug  5 13:00:31 2025 GMT
        Subject: CN=87c4234c925e01ca23db84e6a2842a7f97381c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:e3:ac:aa:42:75:bb:3d:c0:ba:1c:b4:91:
                    c7:1a:72:3b:27:1e:c0:bd:5b:2d:30:78:68:9c:6c:
                    af:f2:6c:88:e8:44:2d:61:57:d6:82:4a:24:0e:23:
                    2e:b4:31:d2:f1:f8:38:29:74:77:31:d7:fb:a5:67:
                    f6:ec:86:fb:c4:78:56:87:b2:35:46:33:96:b0:f5:
                    e2:2d:ce:0f:82:67:55:c6:62:99:6f:45:4e:43:3e:
                    48:4f:89:60:36:d3:64:25:d5:a4:ed:86:1e:1b:f2:
                    de:61:9b:0f:37:3c:3e:34:29:60:45:7b:4a:27:51:
                    6d:19:51:ec:d7:c8:b2:37:4c:86:32:a3:9a:00:ec:
                    e7:e1:a0:95:79:dd:20:55:fc:af:fe:d9:cb:13:94:
                    e8:89:36:1e:ed:fb:4d:9f:9b:f7:55:39:24:2f:e6:
                    37:bd:18:56:f8:b9:44:5f:5d:c4:5b:d2:cf:2d:5a:
                    cd:e1:b6:de:23:f9:93:e9:3f:b8:b2:55:5a:ec:f7:
                    b6:db:0c:14:34:6b:71:2d:93:70:a5:8e:1a:5e:03:
                    e7:6b:1e:8f:f2:25:27:66:9f:57:d9:5a:81:d4:c5:
                    ba:96:c4:a1:10:0c:f0:70:15:a1:9d:b4:20:a1:54:
                    e2:5a:77:a7:92:63:9a:31:0c:99:13:0f:8f:c0:91:
                    6a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C4:23:4C:92:5E:01:CA:23:DB:84:E6:A2:84:2A:7F:97:38:1C:1F
            X509v3 Authority Key Identifier:
                keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:42:81:59:e4:bd:00:32:9b:07:e9:67:89:34:90:c3:06:27:
         9e:29:b3:f8:a5:ed:16:46:36:80:8b:87:d7:25:ea:f9:f1:ae:
         ed:a9:e9:d6:c6:6c:a7:d6:cb:fd:ea:f4:eb:24:de:06:20:ab:
         c0:5d:95:79:8e:47:38:2f:74:74:08:f1:29:c1:80:bc:ae:5f:
         be:9c:a1:43:76:49:19:f6:53:48:58:45:b6:42:33:c6:d8:88:
         d1:7c:62:4d:62:e3:df:30:7b:d4:63:a2:cb:ea:db:79:db:d6:
         27:14:93:3e:fd:e1:cc:53:6c:80:df:32:89:4b:cf:06:4a:f4:
         b4:2a:a6:91:ad:49:2a:a3:6e:79:6a:e3:96:96:07:35:83:84:
         6f:06:7c:3e:04:42:de:ce:ce:4a:8e:6b:09:07:53:77:0b:03:
         1c:6f:16:fc:ed:1b:46:b6:4b:c9:ee:b6:d8:e6:a4:18:57:3d:
         e6:3a:d9:96:48:56:aa:dd:50:03:65:c8:77:6f:f3:4f:c6:01:
         b6:52:ad:68:27:39:c5:cf:b2:4e:58:7a:2b:05:5c:48:75:55:
         43:b8:92:61:4e:52:a1:50:40:fd:d9:97:4d:2d:19:96:f8:11:
         9d:5e:b2:f4:5f:1f:44:c6:fe:bd:56:b0:b5:70:3e:d6:f3:ad:
         6b:00:7f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:17:21 2025 by rpki-client