Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
File:                     sMeY09W2CWzTnliSWiihffthznU.mft (raw, json)
Hash identifier:          Z3TOSkb1yhm0sRqOMKemQmDuHSuZ6B3b9JQuRRrJ2jw=
Subject key identifier:   CF:68:B7:49:8A:1D:D4:65:4E:F7:4D:39:EB:E2:A3:CC:3D:1D:CE:EC
Authority key identifier: B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
Certificate issuer:       /CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Certificate serial:       0198D4A8005604A7B191E9CCB0FE9C179438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
Manifest number:          0BA2
Signing time:             Sat 23 Aug 2025 02:00:36 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:36 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:36 +0000
Files and hashes:         1: lAlkLc1CavmRfvnNM-ldOwGYoR8.roa (hash: 0wroejPoBcULff3nhQGRj0gl288xNtfnDJXaFr+mf24=)
                          2: sMeY09W2CWzTnliSWiihffthznU.crl (hash: U15AETAdRwEWTHz4XRSBBM7FM3BYFxdjgSVgHIA36D8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:00:56:04:a7:b1:91:e9:cc:b0:fe:9c:17:94:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
        Validity
            Not Before: Aug 23 02:00:36 2025 GMT
            Not After : Aug 24 02:00:36 2025 GMT
        Subject: CN=cf68b7498a1dd4654ef74d39ebe2a3cc3d1dceec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:54:20:ec:fd:fb:10:ce:2a:b4:c8:10:95:
                    ac:46:0f:a8:37:ba:11:9a:9f:f8:14:05:3f:64:0e:
                    99:ad:36:0e:ec:ed:75:a5:46:16:83:bc:ee:7e:5e:
                    b8:c6:d6:e7:98:ec:b8:c5:8b:43:ed:3c:50:d5:4d:
                    ca:c9:9c:71:89:0d:8c:b6:d2:03:10:28:18:c8:15:
                    ed:7d:6b:23:8e:47:49:37:07:2c:47:22:39:21:16:
                    f2:d3:d8:e5:a6:01:df:26:10:bb:bd:0c:c8:5b:1c:
                    6f:2e:e9:f5:30:d5:e8:83:71:a2:a3:78:4a:82:29:
                    05:fd:18:47:9a:6b:73:8d:33:b9:bb:d5:e5:a5:ce:
                    8d:c6:5e:ba:3f:3d:e8:59:23:4d:f4:fa:c3:bb:41:
                    42:72:f3:73:94:1b:11:86:70:16:91:91:db:c7:45:
                    7b:98:fd:0a:fe:63:e2:a1:db:29:71:ab:c7:fd:e1:
                    f7:54:e3:21:05:e6:d4:a2:71:2f:28:e3:ec:ee:1a:
                    34:ec:42:2a:d7:55:92:26:0e:5e:87:ad:9c:0f:df:
                    5f:56:07:8b:f3:89:2c:06:de:ec:4f:18:0d:99:a6:
                    69:18:96:69:aa:37:70:4e:c4:4c:cc:0c:43:95:59:
                    53:08:22:39:74:6d:e3:aa:76:4f:87:a4:84:9c:0e:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:68:B7:49:8A:1D:D4:65:4E:F7:4D:39:EB:E2:A3:CC:3D:1D:CE:EC
            X509v3 Authority Key Identifier:
                keyid:B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e1:bb:b0:3c:48:95:9f:46:47:4a:40:71:7d:96:e8:d4:76:
         0d:7f:41:54:8f:a5:10:67:55:bc:f3:61:16:fc:fb:b9:85:b4:
         a8:41:bb:d7:d3:41:10:b4:b8:77:42:7c:3c:3a:d0:50:61:a6:
         04:fb:a3:d5:34:da:e8:44:f9:7e:8a:64:da:d8:47:3f:39:55:
         63:3d:ee:af:b7:0a:3d:a7:f6:69:a5:cc:2c:ee:23:86:b0:fe:
         6e:7d:64:1d:08:4e:99:e3:b6:35:0a:b3:9e:02:8c:b5:63:c3:
         75:4d:0d:0e:e8:bd:81:0a:78:c2:b6:00:ab:d9:52:b8:85:62:
         1e:38:d4:5e:20:75:e8:d8:b8:43:82:a3:4e:ab:e6:9f:ba:f3:
         83:38:d7:d8:6f:6a:34:5d:8c:8e:8e:31:e1:fb:04:45:06:d7:
         ce:5c:1e:e2:a8:ea:c0:2e:57:9b:95:ad:f7:44:9a:7a:73:23:
         c5:a1:8f:65:77:b5:32:84:01:be:ea:d5:6f:d0:ae:83:9e:2a:
         05:2b:d3:6c:6f:4d:81:23:1f:b9:4c:f3:7d:7a:3f:60:8e:63:
         5d:2b:08:3f:b0:30:0b:44:5a:9e:c9:1b:48:15:6a:48:ef:0a:
         d7:5b:ed:eb:25:8b:e2:b9:9d:b9:dd:48:c1:fc:93:cb:73:e8:
         99:4b:92:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:23 2025 by rpki-client