Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
File:                     SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft (raw, json)
Hash identifier:          7DDHSQx8SZlqAiAWRpwG67Ebkiq4OhDc8ffMH0rfeko=
Subject key identifier:   C7:9B:E6:2D:F8:45:57:32:46:20:D9:3D:F3:04:A2:E7:81:65:70:C9
Authority key identifier: 49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
Certificate issuer:       /CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Certificate serial:       0198D4E0ADF5F5C83202E673BD7EB01EECD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
Manifest number:          0C25
Signing time:             Sat 23 Aug 2025 03:02:30 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:30 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:30 +0000
Files and hashes:         1: SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl (hash: sDEyruckZuh6byII7TDIySs2shIw0/6Lh341Gtj/YtQ=)
                          2: t2TSolMpe1MqepO7ZiAhihdiw7E.roa (hash: 6XLtwGEoBLRfiwM7FwJJWhjDjtkkFPk9hmuRlaKNmqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:ad:f5:f5:c8:32:02:e6:73:bd:7e:b0:1e:ec:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
        Validity
            Not Before: Aug 23 03:02:30 2025 GMT
            Not After : Aug 24 03:02:30 2025 GMT
        Subject: CN=c79be62df84557324620d93df304a2e7816570c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:0d:88:76:5b:f1:f6:13:27:54:b4:9e:a3:
                    db:14:4a:e4:f8:61:8c:74:8b:e8:b6:c1:38:72:40:
                    70:b7:9d:cc:7d:e8:3a:fa:3d:59:5a:e0:2c:b1:f5:
                    d7:81:d6:ea:b2:79:f1:b3:0f:55:96:45:f8:44:82:
                    28:da:a6:af:2b:7d:56:47:76:3b:c7:3b:eb:b7:41:
                    94:8f:26:cf:fd:14:fe:26:bf:e4:51:ac:62:ba:83:
                    87:f6:95:86:e0:da:3d:79:87:0b:36:c2:ba:b9:cf:
                    bc:c2:c1:8a:86:02:3c:54:cd:47:82:41:55:d0:a0:
                    da:a2:74:72:bf:db:eb:aa:79:2e:f8:70:b4:95:d3:
                    73:24:2d:c0:82:d5:60:98:b7:d3:7d:36:68:82:b8:
                    64:72:0d:1e:49:91:1c:cd:76:61:ef:6c:e4:6b:ec:
                    72:c0:b6:a3:ac:8b:36:56:5f:37:29:9d:01:cc:5e:
                    6b:aa:74:83:08:82:c9:e5:09:2c:95:b4:43:1e:4c:
                    a9:32:29:4a:73:ce:dd:d2:95:34:d3:a8:0d:81:e5:
                    58:3f:ae:29:c1:2b:e1:52:3f:2d:f4:01:93:6b:d7:
                    bb:dc:49:9b:6f:ab:ba:5c:c1:bb:a3:28:c4:72:0e:
                    78:c9:d2:9a:59:32:2a:b5:00:1a:ca:d3:82:36:99:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9B:E6:2D:F8:45:57:32:46:20:D9:3D:F3:04:A2:E7:81:65:70:C9
            X509v3 Authority Key Identifier:
                keyid:49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:6e:22:02:4d:0c:40:c9:3c:78:ce:4b:bc:1d:be:00:60:d1:
         af:06:3a:7c:b4:72:c4:28:73:2c:fd:75:65:28:c4:cd:b3:d1:
         a6:4c:73:0f:83:5e:bb:a0:b9:ad:1b:c8:7e:49:72:79:5c:8b:
         ca:33:2b:d3:ee:3d:70:5c:51:66:62:24:e3:8e:0f:9f:6d:16:
         74:25:53:0e:d0:d9:e7:cc:81:03:8a:7f:df:7b:ea:b9:62:0e:
         ec:a6:d9:80:7d:93:31:18:9a:2c:35:d5:a8:2d:2c:c8:1d:6f:
         85:61:1c:bd:9a:f9:e4:99:50:c8:78:9a:e8:d8:f1:d1:58:98:
         2f:a8:c8:96:5b:37:4e:5c:cb:98:7d:ce:c3:37:0c:e4:7c:aa:
         e3:76:a9:0b:f2:ce:7d:e5:9f:42:ee:62:b7:30:42:95:ce:16:
         3c:27:df:dd:09:21:b4:38:04:d5:17:7b:33:79:9d:0f:e1:b3:
         6d:f1:83:e3:46:9e:1f:38:11:7c:53:7c:eb:8c:c5:63:1d:93:
         9b:87:e3:77:7f:ff:d9:ad:01:59:31:5f:6d:62:90:ac:99:e2:
         1c:02:49:87:52:7d:f8:5f:07:69:f0:3d:93:17:f6:78:46:a5:
         76:f0:b3:6f:cb:7b:93:8e:20:e0:59:5a:f0:8e:c1:a8:9f:ab:
         95:47:89:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:53 2025 by rpki-client