Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File:                     sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier:          DM3//gDGpKroIDd9S5qRPWYnph6L8nG+mSXnZx/kgok=
Subject key identifier:   0E:90:21:4D:92:94:87:3F:0B:F8:4D:49:63:4C:AE:86:42:CC:55:7A
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer:       /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial:       0198D583C1008BE2021322B4D772255A07D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number:          0969
Signing time:             Sat 23 Aug 2025 06:00:37 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:37 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:37 +0000
Files and hashes:         1: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: eHs1VDf+G0MVOGL/LaDgs1Odv5+VfwegxJj2IO9PktY=)
                          2: zGycLxq7YqbVlBvuNEd47CRzT-U.roa (hash: o72/nsIKF1YG4XUjUYVm0HFMSGLne+bRa8vjHOf30pI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:c1:00:8b:e2:02:13:22:b4:d7:72:25:5a:07:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
        Validity
            Not Before: Aug 23 06:00:37 2025 GMT
            Not After : Aug 24 06:00:37 2025 GMT
        Subject: CN=0e90214d9294873f0bf84d49634cae8642cc557a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:ef:1f:b4:d8:22:f0:ee:f2:6b:26:4b:90:
                    97:d6:60:73:93:ac:89:4f:4d:63:35:0b:fb:8c:85:
                    e8:00:dc:18:dd:2c:91:ef:cf:72:88:ec:ed:18:57:
                    01:27:9f:fc:ea:1b:ba:55:e9:83:eb:cf:a8:7d:ef:
                    36:57:e6:05:a7:77:4a:6b:8c:91:c6:1f:ea:e9:42:
                    a4:16:47:94:58:ec:58:8e:96:e1:b0:b2:00:ed:c9:
                    4e:bc:09:82:e2:d1:bd:ab:e6:83:c7:e7:d1:85:c6:
                    70:56:61:dc:09:ce:6e:89:d9:61:81:c5:14:b3:72:
                    11:3d:58:8e:fe:d7:2c:b8:6c:c1:dd:7f:8b:e3:8d:
                    a2:62:59:7d:a6:a4:49:cd:0e:19:db:32:8f:c7:a4:
                    a9:ba:f8:82:c8:e9:4d:f1:80:16:9a:39:71:be:16:
                    b3:eb:5a:fb:b0:9d:79:60:af:f8:82:6e:6a:5f:fb:
                    2f:29:12:09:e5:b1:5a:f0:fc:5e:a3:df:f1:2b:f0:
                    8f:f6:80:03:68:b6:3d:dc:aa:86:0b:8e:78:ed:65:
                    72:68:6f:36:cc:a3:df:ed:76:f3:b5:b3:4f:03:f1:
                    63:ed:71:39:0a:6d:c2:56:81:19:96:a2:13:74:bf:
                    da:7c:d2:3f:e4:6c:3e:c8:78:d5:f7:c0:39:8d:6e:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:90:21:4D:92:94:87:3F:0B:F8:4D:49:63:4C:AE:86:42:CC:55:7A
            X509v3 Authority Key Identifier:
                keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:50:f0:74:ea:f2:9f:34:b4:90:40:1d:09:0b:87:ac:61:71:
         e5:7e:6f:73:6b:60:e6:e4:c0:c9:63:d8:b9:02:a6:cb:d5:10:
         0b:c2:ac:91:7a:2b:4f:60:25:db:f9:65:3d:84:29:a5:27:c8:
         9e:26:c5:f7:08:99:1b:3d:43:53:2e:48:bd:13:6b:3b:b5:03:
         4a:0d:77:cf:26:4e:b9:d5:88:d3:f4:80:0d:fa:c3:88:39:d7:
         6d:87:38:22:67:ba:43:f1:31:d0:3a:e8:f6:27:90:c3:44:28:
         5e:29:4d:c2:77:39:bf:39:33:82:aa:a5:71:41:1b:a3:7f:41:
         c0:65:a7:4c:6f:df:8b:db:70:e3:95:fa:e7:b2:c4:1c:e8:46:
         75:43:74:6a:d3:63:a7:15:32:fb:14:70:cd:d7:1d:80:64:70:
         61:03:c2:51:f1:ec:54:3f:1d:9f:9c:aa:be:48:2e:a9:76:8b:
         82:db:9c:dd:6f:49:6a:ca:a7:b3:28:a0:9c:48:97:dc:3f:3e:
         31:11:b9:04:db:34:64:d6:dd:0d:d8:1d:9d:e6:d3:51:b0:61:
         60:c9:8f:c3:e0:38:13:e5:39:c8:66:16:76:cc:be:10:18:ae:
         a7:47:58:26:57:20:f1:b9:4d:2f:ed:6d:14:56:c1:47:ef:16:
         3a:84:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:07 2025 by rpki-client