Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
File:                     SeMF15ys2--_HoMrNNfAa7tfYno.mft (raw, json)
Hash identifier:          yzlTl3cPlxHtgkZW+ffguen1KCq0+tK+gqEGbU54XKQ=
Subject key identifier:   EE:61:8B:42:E1:77:E6:91:43:12:20:FB:B2:4A:5F:83:53:EE:DA:00
Authority key identifier: 49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
Certificate issuer:       /CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Certificate serial:       0198873372DCD72A1357B25764EB19F4B1FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
Manifest number:          1623
Signing time:             Fri 08 Aug 2025 01:02:32 +0000
Manifest this update:     Fri 08 Aug 2025 01:02:32 +0000
Manifest next update:     Sat 09 Aug 2025 01:02:32 +0000
Files and hashes:         1: SeMF15ys2--_HoMrNNfAa7tfYno.crl (hash: GNZyyPDPRGYxEHe3fJahqL/HoMYbWSCRnC+YyztnfJk=)
                          2: aCk5yRvbKuue3ENXzksiDKszHOM.roa (hash: gF9bCRgORNZDjS/+hA/hEjcZSXZaNJqm2ogN9Lhnwwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:87:33:72:dc:d7:2a:13:57:b2:57:64:eb:19:f4:b1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
        Validity
            Not Before: Aug  8 01:02:32 2025 GMT
            Not After : Aug  9 01:02:32 2025 GMT
        Subject: CN=ee618b42e177e691431220fbb24a5f8353eeda00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:de:59:9c:5a:bf:74:c7:25:b9:4c:a5:f1:
                    d4:85:36:99:cb:14:cc:3b:88:62:4c:47:2b:9d:1f:
                    f9:82:36:32:d3:b7:f1:98:2f:4b:e7:bd:e4:5c:9c:
                    17:53:86:f5:db:0d:73:ae:ae:b7:12:15:a4:f7:64:
                    e3:36:f4:8f:ac:0a:6b:46:88:bd:35:b9:2b:09:26:
                    c8:bd:74:48:b5:b7:e7:e1:81:78:71:0f:7b:fe:aa:
                    46:d6:bd:be:8c:96:56:07:6e:26:26:c3:0c:b6:86:
                    11:89:02:f6:e5:78:04:cb:0f:72:88:14:a6:0b:87:
                    80:20:44:81:c2:4b:93:a4:50:05:ef:f1:f1:50:fe:
                    c4:09:4c:a9:bb:00:48:55:8c:67:35:5c:15:a8:ca:
                    a5:cc:4a:43:30:73:2f:a9:30:23:71:7c:a8:9e:d0:
                    bd:f9:04:4c:61:fe:28:8b:d7:26:7d:04:d9:e9:69:
                    aa:a8:b7:83:b7:b4:da:aa:d3:b2:55:00:22:d3:61:
                    ec:55:d2:b6:e9:ec:07:c0:4a:74:0b:01:e6:a9:69:
                    c3:06:fc:97:27:70:43:9e:90:ab:3a:dc:d6:cf:68:
                    4b:e3:95:06:8f:49:77:d3:90:af:c2:26:c6:41:b5:
                    9b:bf:12:5a:a6:10:88:f1:e3:df:93:33:9d:50:12:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:61:8B:42:E1:77:E6:91:43:12:20:FB:B2:4A:5F:83:53:EE:DA:00
            X509v3 Authority Key Identifier:
                keyid:49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ee:d8:18:00:6c:81:53:6f:eb:30:1f:8a:b5:32:90:bd:16:
         ae:6c:05:78:18:e5:55:fb:3b:c6:91:5a:0a:a9:2b:a4:e8:86:
         9c:9b:e1:bb:22:dd:8e:f2:e5:87:2f:1f:8c:be:f9:df:2d:11:
         e4:b9:b5:d3:2d:6e:e0:d2:96:98:00:be:f8:0d:28:55:b0:91:
         cb:6a:08:65:66:59:b8:e6:8a:d6:3e:12:a6:5a:82:b7:64:0c:
         bb:84:a2:ad:72:ce:31:45:21:30:b4:68:05:03:cb:4c:7e:af:
         00:d4:33:d9:8f:d9:f9:96:8c:3a:ba:6c:f5:d2:8b:07:c4:b2:
         1b:5e:2c:64:21:aa:97:d0:9e:1b:f3:e8:3b:f0:1b:61:3d:bb:
         8c:f1:9b:ab:eb:cd:f7:14:3c:40:55:01:41:6d:c1:bd:ec:74:
         7a:e6:96:29:4f:41:be:02:c6:bc:43:55:f9:cb:a7:e3:8e:4e:
         47:3c:17:62:6f:03:cb:07:2d:48:47:44:46:5d:e9:eb:97:30:
         35:4c:28:2b:94:17:7a:9f:32:b6:a7:f3:50:10:96:4c:ff:ce:
         92:80:8d:0f:82:51:2d:ad:83:36:57:55:f8:15:d4:7e:5e:a2:
         ca:03:b2:e2:e6:6e:a0:47:95:67:ef:7e:83:b0:0a:02:d4:b7:
         81:9b:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:22:06 2025 by rpki-client