Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
File:                     Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft (raw, json)
Hash identifier:          CUKuSvfnhjDjO+op5hEmg2vjOT0aGkXk751DmpvzAl8=
Subject key identifier:   1B:B7:C8:1E:21:E8:82:9B:EF:71:D6:E4:49:37:5A:53:23:E7:6E:E1
Authority key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
Certificate issuer:       /CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Certificate serial:       0199FB460A50C15E872628FCF63A8547A37A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
Manifest number:          1177
Signing time:             Sun 19 Oct 2025 07:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:35 +0000
Files and hashes:         1: Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl (hash: 81hXNWozVehv1eUgDs8vPX8KPNGTeaykROvDl9xmYqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:0a:50:c1:5e:87:26:28:fc:f6:3a:85:47:a3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
        Validity
            Not Before: Oct 19 07:01:35 2025 GMT
            Not After : Oct 20 07:01:35 2025 GMT
        Subject: CN=1bb7c81e21e8829bef71d6e449375a5323e76ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:be:a5:29:be:15:b0:dd:77:90:ed:29:8b:ec:
                    09:af:ec:4f:82:48:02:d5:9e:8e:a3:dc:e2:81:d8:
                    7e:79:71:d5:35:e9:af:ad:04:e3:52:8d:71:88:14:
                    4e:d9:f9:c7:0f:01:84:f5:c6:2e:81:24:f3:d8:47:
                    23:ea:47:50:3e:3b:fb:af:58:31:f9:f5:da:1e:51:
                    20:73:21:48:4c:41:66:dd:9e:a0:d6:c5:c7:4a:3d:
                    a8:a5:9c:12:48:e6:1a:a5:5a:98:1f:b9:47:19:38:
                    5d:b9:5f:4d:b8:c6:41:74:e4:9d:f8:44:9d:07:9c:
                    46:bf:7f:44:29:65:b8:e5:08:79:f7:e9:06:41:7c:
                    91:7a:34:55:b5:b9:03:5c:ed:22:cb:dd:a9:d1:11:
                    e4:f1:c1:c4:03:fb:41:ac:35:ed:e2:a4:06:88:7e:
                    f2:d6:da:11:58:79:43:5a:c7:ea:37:d3:0f:f1:12:
                    b6:a6:2b:74:84:e6:a7:cf:dd:c3:f8:4a:56:15:36:
                    30:cc:1c:c0:b3:5c:2f:82:54:11:67:cb:3b:5c:a8:
                    5b:a8:0e:99:0f:df:0a:10:e0:ba:e8:6d:7c:24:35:
                    25:90:1b:1e:a7:9c:79:d1:6e:07:21:65:9f:d7:f6:
                    ee:17:6d:95:79:18:77:05:20:13:d1:2f:73:00:fa:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B7:C8:1E:21:E8:82:9B:EF:71:D6:E4:49:37:5A:53:23:E7:6E:E1
            X509v3 Authority Key Identifier:
                keyid:49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1d:6b:cf:b8:fd:8c:0e:c5:f8:04:64:e9:fa:57:1e:73:2f:
         a0:9d:b7:4e:3b:32:43:40:04:fc:aa:5d:e0:49:63:65:28:41:
         c6:e3:df:61:5b:33:1d:f1:b9:67:60:34:6c:32:db:5e:59:8b:
         ee:89:55:fc:0b:0c:e1:87:95:fc:3c:1b:a8:cf:05:93:53:16:
         7c:3a:34:3e:28:4d:d9:1d:fa:49:2a:45:c7:1d:4a:d8:b0:42:
         54:4a:06:e4:d7:e1:ef:64:f1:16:50:f8:7d:38:a3:fd:36:7c:
         85:ea:dc:89:46:fc:20:0b:a0:a1:ab:d0:fd:40:9c:7e:b5:a7:
         65:76:aa:10:10:8d:53:dc:3b:3c:4f:64:dd:c1:bc:1b:e2:23:
         57:3a:e5:a5:1a:9f:1d:1d:c4:c3:26:4b:82:11:41:56:a8:61:
         f0:4f:61:bf:77:9d:74:ca:5a:63:2b:1c:b3:d1:ea:6f:2d:f0:
         c1:a9:6e:1e:d5:5a:6c:d0:7c:aa:b6:f5:12:3b:db:59:2f:79:
         1c:d0:6b:2c:56:66:92:76:50:5c:d9:4e:99:fc:b3:62:d0:a5:
         d6:02:9e:ad:f6:b7:09:68:6e:12:61:96:34:f9:7c:74:bb:68:
         56:6b:f5:81:71:f3:53:61:b6:a1:e1:34:91:88:d9:2e:c3:b1:
         52:03:b5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:51 2025 by rpki-client