Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
File:                     SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json)
Hash identifier:          6APqZpHwhAsc7KqF83gEeOkXxlAjLeZA6FPmJsCPcuk=
Subject key identifier:   3F:F2:F2:2F:12:7D:CA:30:2E:90:BA:21:11:62:2C:80:50:C9:5C:81
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Certificate issuer:       /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial:       0198D54E38F7A5418B7E0073B0C29B4AC5C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
Manifest number:          11C6
Signing time:             Sat 23 Aug 2025 05:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:09 +0000
Files and hashes:         1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: AfGojgS9wU4tCOtMj/LF0Ju+l/LHr8/UYZXDVW5Z7wk=)
                          2: colowNm5_qh5Va7chPSOw1VK1ck.roa (hash: nloDqYvIeZi3RS1elNvQ7LOm+0c8P6a1rYXwvCChzp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:38:f7:a5:41:8b:7e:00:73:b0:c2:9b:4a:c5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
        Validity
            Not Before: Aug 23 05:02:09 2025 GMT
            Not After : Aug 24 05:02:09 2025 GMT
        Subject: CN=3ff2f22f127dca302e90ba2111622c8050c95c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:3e:8a:16:a3:07:63:67:b0:a1:c1:d8:d9:
                    f0:d3:93:55:5e:63:43:0b:56:5d:b6:a5:3b:96:ce:
                    68:09:ce:a2:39:3e:bb:72:af:9b:34:e8:e1:91:da:
                    21:83:75:1a:c0:16:5e:82:19:75:64:e4:17:a5:11:
                    6a:1a:be:4f:69:9d:a8:1a:a4:e6:e9:1f:73:b9:39:
                    08:9f:cd:4e:b2:c7:98:b3:b1:cf:3f:b9:4b:30:6e:
                    f8:13:90:2c:1a:ad:e8:44:a6:34:26:97:12:e9:0c:
                    29:f2:a8:07:0c:d6:cb:10:4f:c3:6f:63:6b:df:c5:
                    11:0d:18:83:61:9d:69:3f:07:9e:03:f3:57:14:b1:
                    80:4b:f6:49:43:6a:ba:15:e5:99:16:f6:8d:10:e0:
                    0a:3c:01:6e:03:88:57:1e:72:78:ed:a4:f2:e3:d8:
                    e6:8c:b6:93:dc:e2:6f:61:17:d2:81:e2:f5:a8:81:
                    bb:b1:c1:f6:85:27:a1:cc:00:c8:31:fb:c9:39:24:
                    9e:f1:0b:ff:2e:50:ef:d1:9e:ec:c3:c6:6b:7b:cc:
                    ca:fb:2c:97:b1:25:e2:be:ea:ee:15:2e:d1:4e:c9:
                    92:1a:be:f5:50:2b:5e:b5:61:c5:41:c8:6e:c6:42:
                    73:9e:83:4c:86:75:87:d8:ca:6a:7b:78:35:1e:bd:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F2:F2:2F:12:7D:CA:30:2E:90:BA:21:11:62:2C:80:50:C9:5C:81
            X509v3 Authority Key Identifier:
                keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f0:42:85:e5:8b:c7:02:71:f8:08:60:f4:4f:46:fb:ce:3b:
         5d:3e:12:72:9c:05:37:d9:39:65:20:b2:1e:74:d3:83:11:14:
         a0:13:c7:cf:73:e3:95:64:20:0e:44:57:9e:be:92:d0:51:e1:
         27:e8:0a:88:dd:5f:4b:4a:19:37:14:f4:b6:bd:66:46:44:6e:
         f1:e6:ad:c8:9b:5f:2c:b1:f1:f4:f9:6a:91:23:41:2c:36:b2:
         40:be:7e:c5:d9:bf:be:44:36:b4:dc:c6:a4:af:a7:32:ac:13:
         4e:3b:ed:e6:8e:12:b8:14:9b:2b:fd:6f:fb:a6:3a:b2:79:58:
         67:03:f7:66:c0:87:90:3d:f0:fc:a9:01:1c:eb:44:eb:d7:92:
         2b:da:85:07:8e:9c:3b:9a:41:96:ca:ad:9a:4b:28:ea:6e:f5:
         1c:af:47:5b:e2:4e:c4:57:58:ae:b4:37:af:9d:13:45:b7:4e:
         b5:e1:65:fd:eb:85:aa:87:24:75:80:dc:9e:3f:86:02:e3:7b:
         d6:fa:63:94:f1:33:54:cd:f0:f3:32:78:a4:71:63:af:34:7e:
         4e:c1:46:ee:0a:cd:09:3f:b4:dc:78:53:3d:e5:7a:dd:ed:11:
         e5:6f:e0:87:e6:3d:21:36:3f:b8:ab:8f:71:87:ef:64:9c:af:
         69:00:0e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:42 2025 by rpki-client