Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
File:                     sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft (raw, json)
Hash identifier:          q2kv7dsHU5OH11SztNUkEsqwq90oARjwi5b6DB5yGfo=
Subject key identifier:   3D:A6:5D:A5:16:A2:E5:EB:44:E1:AB:2C:AD:A8:CD:D0:63:F6:1E:03
Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
Certificate issuer:       /CN=b162156f59cfc79396e64f3342de64de3f88ee18
Certificate serial:       0198D7731FAD8B7C005FFEB7F6158A54E71D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
Manifest number:          05FA
Signing time:             Sat 23 Aug 2025 15:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 15:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 15:01:42 +0000
Files and hashes:         1: bx_l27hAP8O-cN20bSgkC97xE0w.roa (hash: CvRYAhtCHrK4e4xO6GAddJnUj7IW4xcxplg1YukPV2Y=)
                          2: sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl (hash: hi1R334zBnRfYkz3ezHs9Z9HtQYQCvriQSm+l/duOKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:1f:ad:8b:7c:00:5f:fe:b7:f6:15:8a:54:e7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18
        Validity
            Not Before: Aug 23 15:01:42 2025 GMT
            Not After : Aug 24 15:01:42 2025 GMT
        Subject: CN=3da65da516a2e5eb44e1ab2cada8cdd063f61e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:28:78:05:b5:05:2f:9f:fd:0b:41:6e:ce:
                    33:0f:1a:8c:52:92:fd:73:a7:e5:1a:3c:1c:7f:be:
                    3b:f5:d7:e0:df:c0:d9:27:8f:54:69:a8:8a:18:a9:
                    c7:26:72:30:b7:73:56:c2:c8:0e:bf:e8:1c:26:85:
                    04:ef:8f:21:a6:3b:f1:fc:ed:a2:f1:08:58:e9:13:
                    8b:13:a0:27:53:28:8c:15:b0:14:de:c0:e0:ef:8c:
                    34:6e:b7:48:c1:3c:28:bf:d0:e4:fe:59:c6:75:b6:
                    fa:e4:19:fd:95:11:f8:e0:b1:7c:e6:0e:3c:e3:e2:
                    05:0c:68:00:fd:36:ec:84:01:28:8a:cb:2f:a4:cf:
                    6e:1a:ac:98:e6:53:68:ef:3f:f3:c5:57:97:72:90:
                    3c:e8:82:27:4e:80:d3:05:70:6b:bf:94:75:c4:95:
                    99:d8:6e:99:3c:23:76:24:51:30:c3:8f:25:8e:f3:
                    57:87:2b:c5:99:9e:70:c4:b7:da:30:7d:54:e6:94:
                    53:0d:b1:f1:07:8f:7a:84:0b:c0:dd:46:bb:49:14:
                    df:d8:ec:62:86:ea:e0:7e:af:66:7e:c6:ee:60:46:
                    52:2a:a1:5b:ae:04:68:ec:31:d5:96:b4:d2:13:ce:
                    93:37:d1:9f:6a:1a:f6:de:0e:1a:74:13:1e:f0:a7:
                    51:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A6:5D:A5:16:A2:E5:EB:44:E1:AB:2C:AD:A8:CD:D0:63:F6:1E:03
            X509v3 Authority Key Identifier:
                keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:3b:88:3d:62:d9:cb:ed:d7:3e:da:84:df:df:00:b3:27:9e:
         af:1f:74:c7:6a:2b:ef:8d:f0:5f:82:37:0b:b9:6f:30:27:17:
         31:22:bd:85:89:17:9d:f9:44:6a:bb:f4:a1:35:e5:fd:08:fd:
         c3:66:5f:63:0d:27:43:4b:83:94:98:60:71:88:f7:c3:09:2b:
         e4:ec:8d:c6:1f:1c:f5:b4:8b:fe:f3:27:d7:ef:6c:3f:5d:be:
         ed:7f:3e:c2:d4:2d:93:c8:87:ca:49:14:48:bd:90:0d:4d:d9:
         e0:c5:1d:ef:e5:32:6f:0e:83:af:d0:bd:58:7c:71:33:e8:e5:
         69:a8:1f:2f:5a:03:45:c3:67:1b:36:ef:c8:0b:47:10:67:6f:
         59:1d:5c:87:55:15:9a:f0:6b:a8:13:84:a3:a5:a2:0b:5d:87:
         5f:b1:e7:ea:ea:91:3e:0a:fb:26:83:50:42:a3:92:50:a1:1e:
         86:b4:21:ad:dc:ef:06:7e:18:72:c7:5b:fd:40:88:14:b9:d4:
         d2:f5:08:76:89:36:1b:b9:7b:21:56:0b:d8:f8:c7:c5:2c:ee:
         9e:eb:31:5c:15:d4:6f:87:56:49:de:29:b8:b6:cf:fa:fe:2f:
         55:04:de:3e:d8:89:33:0e:40:4c:61:d8:6a:8c:20:a8:0a:9d:
         2b:d2:0c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:46:40 2025 by rpki-client