Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
File:                     sVyi9obU5ISnfDTBc0dr9p0je30.mft (raw, json)
Hash identifier:          10z/ZW/PUFL0+4tr91lf/tK5hoNrlZgWaCGFvEHJHLY=
Subject key identifier:   50:9E:AA:B1:01:1D:82:F6:F2:27:94:13:AC:2B:C8:F7:FB:8B:C6:7A
Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
Certificate issuer:       /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Certificate serial:       0197BA7E0A7EF9333446F0DD9468DD6EBEA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
Manifest number:          1161
Signing time:             Sun 29 Jun 2025 07:01:51 +0000
Manifest this update:     Sun 29 Jun 2025 07:01:51 +0000
Manifest next update:     Mon 30 Jun 2025 07:01:51 +0000
Files and hashes:         1: HGyMO-gI6BJOthGGldBVkMwTP6M.roa (hash: LWkHdvqqdhuJkMVn2Z8NyBNjrEPjz4vXV3NQv+TmBQY=)
                          2: sVyi9obU5ISnfDTBc0dr9p0je30.crl (hash: rqviWWrzP3skG6cN5CehHNET7pH+/VSy17/oWe9TueU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7e:0a:7e:f9:33:34:46:f0:dd:94:68:dd:6e:be:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
        Validity
            Not Before: Jun 29 07:01:51 2025 GMT
            Not After : Jun 30 07:01:51 2025 GMT
        Subject: CN=509eaab1011d82f6f2279413ac2bc8f7fb8bc67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d6:66:b1:29:6a:fd:73:de:05:45:8b:36:b6:
                    17:31:8b:b3:12:97:9b:7d:5b:0d:8a:c8:0f:5f:75:
                    ac:48:bd:30:78:e6:de:8f:96:50:fa:ae:2c:be:f3:
                    da:46:03:f8:fd:94:b3:b2:6e:6c:81:54:fe:a1:06:
                    26:fa:91:90:a4:e3:e6:7c:cf:7b:ab:ee:43:f2:14:
                    a3:7b:97:91:75:1e:d7:9b:b0:5a:88:36:4f:bd:15:
                    f5:b1:23:ff:82:c4:c3:33:45:e6:43:85:10:5a:b3:
                    b8:ad:90:11:47:be:ab:5a:14:38:eb:f1:ee:ea:1d:
                    52:19:9e:01:4a:e4:09:1f:b6:f2:4c:c2:1a:2c:1f:
                    9a:74:91:c0:bb:fa:78:28:02:13:4e:9f:9b:19:03:
                    64:2d:28:7d:9f:76:31:88:d9:e9:7c:ab:09:12:15:
                    09:6e:9d:27:4a:d6:76:2b:2f:c2:3a:b0:d6:b7:1f:
                    9b:76:1a:eb:a1:26:19:6c:36:93:3e:f0:a9:a8:41:
                    8c:0b:7c:a7:e7:81:c2:92:88:74:0d:be:05:22:24:
                    b0:aa:86:21:16:bb:31:88:4a:fa:79:a2:6e:f0:c3:
                    40:45:90:7f:ad:88:2d:5c:46:78:25:59:cf:1f:ce:
                    1f:30:52:28:c4:ee:70:59:71:69:77:8d:c7:44:88:
                    4d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9E:AA:B1:01:1D:82:F6:F2:27:94:13:AC:2B:C8:F7:FB:8B:C6:7A
            X509v3 Authority Key Identifier:
                keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:07:d2:c4:d6:9d:e1:40:87:45:25:ab:24:bf:7c:1f:2a:b6:
         ab:d0:41:d2:61:48:8a:90:58:9c:9d:14:c9:ca:b2:63:78:d3:
         dc:7e:9a:bc:ec:b5:35:11:e1:b2:2b:a5:78:6d:d2:4a:e9:a1:
         71:1a:ef:ef:60:f2:af:97:be:a8:56:fd:1e:de:1f:0a:69:7e:
         7f:93:ac:e2:7f:99:99:8d:58:78:71:f0:4c:85:f4:72:d6:a7:
         99:e1:77:36:c5:4f:d3:0f:14:fc:61:c8:5f:0f:6d:23:94:36:
         00:47:b1:cd:e1:c9:ca:e9:7d:64:b8:1d:83:f9:ac:59:f1:76:
         19:e8:e1:46:f1:6d:86:8f:f0:8c:d3:74:21:5d:ef:39:c3:4a:
         e3:ea:20:17:ee:ab:78:16:a1:e2:0b:51:93:71:30:2b:7b:48:
         26:76:73:02:cc:c7:2b:f8:67:e9:3a:79:b7:df:17:8e:87:24:
         dc:92:4c:99:c0:5a:b9:ec:9d:e5:ef:96:4c:db:1e:26:e7:96:
         81:ef:08:7b:5f:25:56:8a:cc:c7:7c:6d:3d:eb:b4:23:a8:08:
         df:3e:62:22:c7:ba:72:ce:c3:da:ca:f8:0d:69:c8:e5:ea:09:
         41:93:8c:ab:91:e8:09:c8:36:b1:2c:9b:08:58:35:33:b6:d5:
         ab:29:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:46:11 2025 by rpki-client