Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
File:                     SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft (raw, json)
Hash identifier:          i9JkxvW9uAU+ASfm7h3fmTolcu7tZAiwqzoaUqD9550=
Subject key identifier:   21:4E:B1:AF:4E:73:19:EE:69:22:92:89:ED:FE:F7:BC:FF:04:FA:D4
Authority key identifier: 49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F
Certificate issuer:       /CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f
Certificate serial:       0199FBEAD7BD24EE5776F89C42A165A7CDDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
Manifest number:          0F3F
Signing time:             Sun 19 Oct 2025 10:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:35 +0000
Files and hashes:         1: SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl (hash: zbZxx1ReQQqpF9ABke1TYlLlvhhYePKqizpNUSHRkw0=)
                          2: qbL9OL5sc-w50AXrG2tZRkZnW2s.roa (hash: Q4+OtthvOte+9IlGsVQn+tB7AZLUhi+dropNGViFYc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:d7:bd:24:ee:57:76:f8:9c:42:a1:65:a7:cd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f
        Validity
            Not Before: Oct 19 10:01:35 2025 GMT
            Not After : Oct 20 10:01:35 2025 GMT
        Subject: CN=214eb1af4e7319ee69229289edfef7bcff04fad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c5:bd:c4:0b:f4:9c:e1:83:3a:57:56:97:56:
                    85:92:10:9c:57:b0:e4:1e:77:6b:04:96:a3:73:c2:
                    a4:0c:56:95:1f:29:7c:d1:32:8f:4e:db:11:68:0f:
                    3f:42:e0:2c:32:67:a6:5e:6b:64:16:32:4a:7c:50:
                    ce:6a:d2:55:22:26:a4:00:39:ba:4d:ac:7c:94:8f:
                    79:22:2a:27:0a:73:8b:22:27:10:4c:e3:15:d8:37:
                    22:c7:2f:e1:d9:c4:8b:52:58:de:d7:1c:00:06:3e:
                    e6:29:a4:2f:23:28:22:51:60:64:f0:0c:c0:07:43:
                    df:34:64:e3:14:17:95:db:f8:b3:2d:34:ad:7b:14:
                    4f:98:c2:4b:c1:19:de:2b:da:4b:ca:7e:c1:4c:62:
                    3d:89:94:7c:32:00:a6:50:c7:c6:c5:e9:00:0c:58:
                    72:29:0b:e1:64:cd:3c:69:78:b0:3e:f9:32:28:96:
                    96:2c:da:f1:48:bd:1f:2d:13:5b:17:88:65:49:de:
                    20:96:19:bd:9e:9a:50:7f:d7:b3:91:14:dd:83:8e:
                    e7:c7:e6:a1:39:eb:44:ec:d2:24:ac:62:86:a3:10:
                    5a:b8:5e:2d:f9:3d:de:ca:9e:27:42:3a:46:20:3d:
                    1a:93:98:4b:0b:dc:5e:bb:cd:df:d0:f0:c2:f4:4f:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4E:B1:AF:4E:73:19:EE:69:22:92:89:ED:FE:F7:BC:FF:04:FA:D4
            X509v3 Authority Key Identifier:
                keyid:49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f7:fe:2e:93:6a:d8:be:b8:4e:60:f5:05:ad:71:cd:5b:a6:
         15:1d:cb:f6:13:ff:45:7e:44:bf:32:b0:38:a0:80:e3:ad:6c:
         7e:5c:32:d9:c4:90:0d:64:93:26:60:b1:60:94:b3:8f:de:42:
         5e:f0:41:11:ff:a6:30:ed:78:2f:20:37:22:c5:5f:de:bf:b2:
         49:c9:6d:73:aa:9c:e6:84:82:f3:ef:ad:a3:b5:7b:e2:8c:06:
         82:08:f0:7f:d3:8c:b1:2b:21:b8:1d:1d:f3:8c:7b:fe:83:19:
         6e:6a:c7:8f:83:9f:bc:d1:1b:51:3d:59:ac:0c:31:84:4e:6c:
         d7:65:a1:f0:64:6d:67:53:f0:68:46:69:92:36:8e:fb:86:f1:
         0c:38:65:ba:dd:9d:fd:ac:26:af:5e:41:22:39:51:a0:43:ed:
         c3:04:db:7c:14:92:52:27:d8:c3:25:a9:89:4b:a6:e0:36:67:
         6f:7b:cb:b2:8a:17:13:ac:5a:0c:97:bd:4e:84:bc:be:61:3c:
         15:9c:53:ea:7f:f5:e7:c5:8e:05:6d:4e:fb:5e:1e:c3:51:fa:
         4a:36:7b:84:26:21:34:ee:ce:24:c2:4e:54:ed:42:4a:d3:33:
         d0:90:cc:5c:cc:e7:77:90:7e:b7:d6:30:36:f7:32:58:22:e4:
         af:e4:24:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:20 2025 by rpki-client