Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
File:                     SBcWctU_34slN3ZPU342Wlknva8.mft (raw, json)
Hash identifier:          7Yi6cpKSVwZZdxCHKOEAqLTQIQCj+rk0HmpFLSCqPOg=
Subject key identifier:   FD:D9:2F:0F:E5:BA:F7:95:A2:E5:E1:4F:48:83:8D:38:D1:FE:76:9E
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
Certificate issuer:       /CN=48171672d53fdf8b2537764f537e365a5927bdaf
Certificate serial:       0199FCFD5B6BCBBF856F05A390BAE3A36669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
Manifest number:          15AE
Signing time:             Sun 19 Oct 2025 15:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:26 +0000
Files and hashes:         1: SBcWctU_34slN3ZPU342Wlknva8.crl (hash: flbIs3UhBmggmt8SGxWJFT4xZ8Ug98WX8M2ZKTyD7LY=)
                          2: s2Lbl3UpxlmBcXTI8YXpsTqbGNc.roa (hash: WTVc9DfWoK4a3bzz5sw4kY8+A2sS9+yOsYCNmAmV+gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:5b:6b:cb:bf:85:6f:05:a3:90:ba:e3:a3:66:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
        Validity
            Not Before: Oct 19 15:01:26 2025 GMT
            Not After : Oct 20 15:01:26 2025 GMT
        Subject: CN=fdd92f0fe5baf795a2e5e14f48838d38d1fe769e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:0e:05:96:44:ea:30:c0:e0:3d:cf:02:68:
                    a4:7a:e3:b3:ba:c9:fc:d9:da:c1:42:48:f7:14:3c:
                    06:ba:d7:29:d7:dc:cc:3e:07:59:5c:49:ff:c1:e6:
                    47:8b:0f:76:de:2f:50:4a:e0:f7:30:b0:5a:58:6f:
                    a5:0b:3d:fd:72:39:6c:c2:aa:a7:b6:3d:5b:4f:de:
                    48:36:72:44:88:c4:7d:0f:ac:14:eb:77:66:e0:78:
                    83:57:3f:88:96:63:82:40:bf:c6:95:ea:e7:70:d0:
                    91:8a:2e:7d:c1:aa:6b:59:e2:9b:65:ac:97:1e:2c:
                    41:af:dd:e4:1d:82:8f:7d:e6:05:94:bf:de:9f:d4:
                    ca:16:7d:7e:28:ce:70:2b:e6:0a:96:e2:55:30:2d:
                    2e:8e:4c:a0:03:69:3c:54:e9:bc:82:b6:7d:63:f9:
                    1b:60:3f:eb:f9:66:e5:ec:6e:d7:a9:b1:18:e5:d3:
                    8b:4b:c1:3d:be:fe:bd:ef:c1:ef:6f:2f:9f:42:a4:
                    6a:ca:d4:fd:e0:71:38:0c:45:d2:ed:7a:3a:15:07:
                    79:99:aa:ff:72:a4:a0:6a:a9:ea:f7:76:30:2a:e6:
                    2e:a1:ec:ec:c9:db:d1:49:52:e1:ad:a0:19:9a:5d:
                    3a:2c:00:d5:a3:c2:58:16:f9:32:d5:f7:3c:8f:03:
                    d7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D9:2F:0F:E5:BA:F7:95:A2:E5:E1:4F:48:83:8D:38:D1:FE:76:9E
            X509v3 Authority Key Identifier:
                keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:94:25:74:01:dd:ac:73:12:34:bc:2c:58:09:6c:b5:0e:
         e2:78:c9:94:a9:e3:5a:a2:1e:e3:db:f7:bc:fc:8c:45:42:3d:
         f4:aa:8b:8c:db:f1:bd:44:8f:b2:15:9f:b8:3b:39:bd:29:68:
         08:93:3f:61:fa:61:37:8e:e2:f4:af:3f:6e:31:57:d8:0b:44:
         34:64:9c:14:3d:5e:ec:12:3d:b2:30:1e:e9:c2:92:f2:db:93:
         a7:26:63:df:0a:74:9e:68:95:87:e2:cc:96:c3:8f:28:d6:87:
         84:ac:15:ac:ce:22:f0:de:cb:8e:74:72:a4:5b:8e:1a:c9:95:
         4c:55:c6:e2:e9:36:6e:9f:07:ed:33:43:78:4b:e1:ba:ec:a0:
         de:57:37:79:e4:48:14:e6:b0:78:bd:44:0f:c4:6b:98:99:ce:
         6f:41:77:0f:70:fb:d1:f8:4d:71:d5:b1:26:09:96:0e:06:2a:
         82:f7:79:b4:0d:80:03:92:74:9a:cb:7e:7d:c8:b2:a3:8a:35:
         fc:99:00:b4:a9:8a:51:7a:f3:e3:05:c3:fe:a1:d0:0e:c7:e0:
         34:9e:e6:3a:65:df:2a:90:06:68:da:fd:32:a4:6d:b4:2a:57:
         5c:87:3e:37:71:b5:cf:c0:ce:e6:d2:a2:df:c6:14:9a:1c:e0:
         d8:28:30:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:04 2025 by rpki-client