Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File:                     S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier:          wuCsnWeFZdDQTvDHOLqpteOykgTdBcg4iw9iAxkxXIw=
Subject key identifier:   C2:31:C0:A8:03:E9:6D:8D:62:B1:B4:98:CB:78:31:D0:BC:8D:88:CA
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer:       /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial:       0198D7A9030EAD5A39CCE8F2F123FEDF9A50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number:          1664
Signing time:             Sat 23 Aug 2025 16:00:34 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:34 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:34 +0000
Files and hashes:         1: 1rcq_o200rsmi-REU7sJaiqQFHA.roa (hash: bYmvDflVlbyI3MswkBtNAMjVL4ovj4FMhccHYAbAe2c=)
                          2: IX3hpyLIN4WhHMana79sWPUI4X0.roa (hash: rCe6IZNZSjHSC1lZ+kxokCfhrF01W07U8ihTWZLrEJU=)
                          3: IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa (hash: HjUM6VN/VoF4kqrbPTW3NPTllgIWYUt/BGC2HsAIgNk=)
                          4: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: qdpE2x/i3pFAEyZBFD2LEn7FobVQfpPywcll+JTQ76Y=)
                          5: eiTWJKHAu5xriuE2QvW7x5YIzOU.roa (hash: s87ilBuA43+J3H8PQ6AAVQPStmwyHIxSZQ+1oBAYKOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:03:0e:ad:5a:39:cc:e8:f2:f1:23:fe:df:9a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
        Validity
            Not Before: Aug 23 16:00:34 2025 GMT
            Not After : Aug 24 16:00:34 2025 GMT
        Subject: CN=c231c0a803e96d8d62b1b498cb7831d0bc8d88ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1d:4d:19:a6:5b:53:c7:52:50:cd:1a:f8:eb:
                    82:c1:2e:54:a5:4c:93:9d:1a:e1:6d:05:c7:84:6a:
                    0b:e4:4c:d8:4f:d4:4e:93:34:01:55:7f:3c:3f:b4:
                    29:92:bf:3c:55:02:cb:f7:a3:c8:e1:0a:cd:9d:04:
                    5d:19:a0:4f:d7:7e:d1:4e:c9:6e:f3:b3:5c:17:30:
                    3e:4c:6c:e2:e1:af:70:76:72:3f:35:20:21:9f:de:
                    c5:f1:d2:ef:6c:7d:12:2a:9a:29:a0:61:53:dc:28:
                    1c:28:5d:69:9b:a3:b5:05:83:bb:8c:86:98:70:59:
                    13:9b:79:e8:86:dc:ba:13:07:f2:9a:60:97:a6:a5:
                    88:97:44:f9:cf:97:20:c3:7b:e6:4c:20:92:94:40:
                    b2:7b:4b:2b:fa:92:4d:4f:9d:b9:bb:9d:14:10:06:
                    c9:41:27:7b:30:f5:aa:46:ad:b3:62:d8:04:e1:b5:
                    4f:e7:77:4f:98:38:5f:c2:5f:a4:25:a3:d0:01:df:
                    ad:1c:08:be:47:c8:95:1f:b5:dd:5a:c4:d6:67:6f:
                    6f:f4:44:40:0c:05:4b:3e:94:da:07:d0:24:47:06:
                    39:71:36:2c:81:80:f8:d7:b3:c6:ec:32:af:a3:b6:
                    4c:1f:21:8c:a7:f5:e5:22:32:f5:f0:dc:63:5a:f0:
                    1f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:31:C0:A8:03:E9:6D:8D:62:B1:B4:98:CB:78:31:D0:BC:8D:88:CA
            X509v3 Authority Key Identifier:
                keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:da:0b:9d:5f:b6:36:09:db:f6:b8:38:d7:37:7e:31:45:9f:
         2d:5a:98:3c:2b:e5:ff:be:6d:5d:b1:b1:77:bf:ed:98:3f:b7:
         06:b2:d1:d9:a1:22:5c:f5:c4:ad:a1:39:eb:48:23:35:f1:ce:
         d8:de:69:41:aa:cd:5a:f6:29:62:2e:6e:91:12:56:5a:64:35:
         ed:8e:eb:e8:ec:3e:1d:5a:1e:e8:31:96:f0:57:44:61:eb:b2:
         f9:1b:46:40:7d:ef:43:5e:a0:b8:27:da:a1:58:c6:df:6c:40:
         57:8d:bf:22:43:a8:7d:26:ae:30:97:b6:5b:e3:ae:b6:f7:50:
         ad:bc:02:59:c2:c9:af:9c:b1:30:ac:cf:3b:6e:03:3b:a8:43:
         59:4c:9c:eb:b6:e2:85:73:dd:53:ad:4b:f1:0d:96:f5:a2:4b:
         24:43:16:5b:bd:09:4a:b0:67:9e:98:32:82:1c:16:4f:4e:39:
         17:58:6b:58:46:f4:41:a8:2d:7e:27:16:89:fb:cc:97:90:67:
         07:56:bc:31:e2:ca:8a:b1:31:e0:66:48:e5:ee:fd:cd:f7:a8:
         4d:59:51:3a:ae:30:b2:0d:36:af:b3:09:95:f2:e0:6b:29:cd:
         04:52:b4:f6:ad:59:d1:6e:ad:61:0a:c4:11:a3:fb:99:67:98:
         59:80:c4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:02 2025 by rpki-client