Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
File:                     SeuKtOPXneJ90f1pIZbi454aO6M.mft (raw, json)
Hash identifier:          KCUwI8hMYZyrg1KsygoV8zz3xyVOVylrZ7vd784gjdc=
Subject key identifier:   49:CA:29:3E:11:D3:04:BA:2F:59:80:20:0B:D5:01:BD:53:01:40:6A
Authority key identifier: 49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
Certificate issuer:       /CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Certificate serial:       0198D73BC605BCD11E1DC96F59A9C7CF9021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
Manifest number:          135D
Signing time:             Sat 23 Aug 2025 14:01:15 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:15 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:15 +0000
Files and hashes:         1: 4HGP5_Atly362ltpVWnT7X4r6Jo.roa (hash: SfLf19aMSy7qHdL6R0k0eaaiEIAvEDmplX9GloqeBUg=)
                          2: SeuKtOPXneJ90f1pIZbi454aO6M.crl (hash: mNRtSz/NeWQTod1Cid7p2FJK8mNWHr84YX1L4+3nsM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:c6:05:bc:d1:1e:1d:c9:6f:59:a9:c7:cf:90:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
        Validity
            Not Before: Aug 23 14:01:15 2025 GMT
            Not After : Aug 24 14:01:15 2025 GMT
        Subject: CN=49ca293e11d304ba2f5980200bd501bd5301406a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:d0:31:b4:a5:c2:b4:46:71:d5:77:20:48:
                    cb:72:4e:8a:d9:67:11:b2:f8:21:1f:76:6e:e7:79:
                    49:8c:da:79:54:83:96:86:5c:26:b1:fe:85:e5:f3:
                    36:cd:77:8d:38:b0:fc:99:fb:97:1a:0c:f1:ca:39:
                    0c:ae:b5:60:df:98:c9:43:2a:78:60:50:49:f8:73:
                    18:13:c0:b3:23:07:5e:45:41:1d:66:80:a3:03:9a:
                    c7:b8:25:14:74:08:38:20:4c:98:9d:98:6a:53:76:
                    48:39:55:b6:4a:fc:f7:08:06:50:bb:f6:fe:72:7c:
                    fd:49:b4:31:d4:ac:3d:88:2b:6b:5d:dc:b6:80:d3:
                    02:9e:30:70:be:d5:2a:40:eb:a3:4b:bc:83:cb:f8:
                    c6:c0:8d:b0:90:74:39:5a:06:8a:56:be:54:47:42:
                    12:b4:02:58:c9:3b:ad:b4:e3:6b:2f:e9:a2:08:98:
                    3c:4a:e1:09:a4:8b:c5:02:b2:f6:d8:69:30:55:5d:
                    4b:a9:e8:71:9e:d0:a8:92:51:1c:e4:e6:13:a6:ab:
                    7f:99:3f:01:16:51:25:55:22:5f:85:94:69:e6:ed:
                    14:04:85:4f:c4:00:35:c2:63:72:fd:e2:55:9d:43:
                    28:31:35:67:7e:02:06:5e:2f:56:aa:0a:ad:f3:51:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CA:29:3E:11:D3:04:BA:2F:59:80:20:0B:D5:01:BD:53:01:40:6A
            X509v3 Authority Key Identifier:
                keyid:49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:aa:68:0d:f3:3a:dc:a1:de:b6:33:b2:a5:4b:77:d3:0a:a7:
         2e:10:92:29:13:cb:f3:d3:5e:3a:2f:38:f7:5a:36:9d:2b:b5:
         c2:e6:c3:6f:fc:05:44:b7:e4:64:5a:2b:f7:a2:23:24:a3:e5:
         e7:0b:58:f9:0f:37:1d:e4:d2:37:80:c0:fc:35:08:08:b8:af:
         f2:cc:39:16:fb:52:db:df:9d:ab:4a:a3:ef:df:8b:9c:f0:04:
         eb:f9:86:65:ea:df:4d:42:33:ec:11:a6:33:e4:8a:8d:0d:5b:
         1a:c9:f5:cb:ae:32:33:22:ea:2e:1d:d3:21:99:a6:77:0c:15:
         1b:86:7d:9b:08:bc:1b:b3:d9:8e:4a:bf:bf:f6:5d:59:fe:7d:
         64:81:52:11:b1:c6:58:4b:89:aa:e8:74:98:4f:77:89:2a:03:
         45:a6:6b:84:e4:66:ef:81:a3:2d:8c:c7:d5:33:08:29:6e:ca:
         3f:33:9e:ca:55:cb:56:4d:7c:5b:14:92:15:32:b9:25:fa:db:
         ce:29:ff:a9:c8:d2:c7:f0:9f:3b:2b:5b:6b:cb:b2:c2:e8:17:
         8f:ce:9a:60:87:fc:4d:ce:63:41:ac:76:3b:8e:cf:95:b9:1c:
         3a:cc:3b:e4:20:f4:22:35:c4:73:cf:bc:d7:9c:5e:43:15:a4:
         a6:f9:c2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:19 2025 by rpki-client