Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
File:                     l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft (raw, json)
Hash identifier:          FefE300B9ur2ak1AoejYqtcYjR8U01H6DfKVlDqg6c4=
Subject key identifier:   32:AD:76:96:16:57:05:AE:67:79:A1:2C:B5:C3:47:F5:A2:73:C6:78
Authority key identifier: 97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44
Certificate issuer:       /CN=978f41e290285473c2a1e2be7f66f63452ed4644
Certificate serial:       0198D660C3836C81E532787A9942CA95C11D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
Manifest number:          157E
Signing time:             Sat 23 Aug 2025 10:02:02 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:02 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:02 +0000
Files and hashes:         1: 3FnVY4sBG3BUNdCMlG69JrkCRk4.roa (hash: xbgs2co1eheJ2l8YrvPyfXeU2aKPVWbDIStArstZGzA=)
                          2: l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl (hash: UVcp6BdbbUw6rjYEp+vFpaaDtxmKTR80awXaNaM2X94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:c3:83:6c:81:e5:32:78:7a:99:42:ca:95:c1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978f41e290285473c2a1e2be7f66f63452ed4644
        Validity
            Not Before: Aug 23 10:02:02 2025 GMT
            Not After : Aug 24 10:02:02 2025 GMT
        Subject: CN=32ad7696165705ae6779a12cb5c347f5a273c678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5d:1f:5f:5c:08:32:3b:0c:60:39:60:51:80:
                    54:b8:d4:3e:a4:01:57:19:e1:43:63:81:ed:a1:de:
                    77:5d:92:1f:7f:53:70:2d:13:26:cb:78:8e:08:bf:
                    36:96:88:d3:36:a7:05:af:52:e7:c2:83:13:9e:e7:
                    36:72:57:d8:54:16:e9:cd:c7:95:e0:68:6b:90:e6:
                    f3:e9:d9:f3:47:b7:32:3d:ce:88:62:8f:31:a6:b1:
                    9a:a4:69:c8:f7:90:34:5c:a9:c7:4a:17:4b:19:d5:
                    7b:c6:e0:87:07:ba:5a:1f:c8:c4:30:a0:00:54:3f:
                    80:cf:a0:c5:e1:ce:a5:0f:05:53:18:a3:b9:4f:1e:
                    e7:96:8f:59:a7:f5:7b:3d:e2:ff:5e:01:d6:82:55:
                    8a:4f:cd:b7:f6:8f:66:5d:04:71:85:27:75:55:2f:
                    6b:22:9c:22:5f:74:57:e7:80:9e:39:0d:8d:b5:47:
                    ed:33:1a:8f:d4:5c:c8:db:6d:90:c6:13:ac:1f:07:
                    79:e2:76:6f:58:36:80:ce:0b:39:a9:68:cb:1e:40:
                    c1:14:96:09:e0:cf:7d:34:e0:d9:62:5d:9b:19:5c:
                    c9:6b:1d:90:65:26:b8:70:d7:14:68:76:83:fd:c3:
                    03:f2:c2:9d:24:a9:22:be:67:e3:ff:10:05:03:bb:
                    4c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AD:76:96:16:57:05:AE:67:79:A1:2C:B5:C3:47:F5:A2:73:C6:78
            X509v3 Authority Key Identifier:
                keyid:97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:16:ac:da:74:d5:24:1d:49:09:91:e7:a8:84:7c:c2:af:6e:
         2b:75:61:e9:01:5f:59:f3:ef:f4:54:f8:2b:8f:b7:2d:96:90:
         7b:92:02:92:e9:70:24:9a:ed:77:b7:ef:f4:3e:5a:56:67:4d:
         1a:ca:c3:6a:0c:25:e9:03:7e:7e:62:7f:ee:1b:49:76:b5:82:
         cc:fe:56:3f:69:4f:19:19:08:18:8b:97:45:18:b2:c3:f0:36:
         b5:27:67:f9:3b:67:ba:21:77:4e:e5:04:ba:b3:42:df:c6:e0:
         7a:23:ed:89:25:c2:64:0b:1f:c0:89:6c:be:32:5f:8b:83:50:
         6c:11:c6:93:1c:7f:ad:7d:c6:c5:e6:92:25:bc:90:4d:85:c1:
         b0:59:d7:57:d4:60:7a:45:3d:47:92:b1:cc:64:e6:3d:37:8b:
         2c:a0:4e:fb:ef:86:00:50:6b:08:4c:c3:24:b5:04:55:66:9e:
         f9:f2:cd:a1:f9:93:bb:61:8e:23:b4:4c:a8:ca:37:0f:e2:3d:
         9c:d8:51:17:2c:73:af:b3:72:2b:a9:7f:30:e3:b0:a6:a0:ee:
         f9:52:10:d5:9d:63:a8:69:23:19:4b:f0:30:d0:ec:6c:e5:85:
         01:0b:22:d2:c7:30:24:32:12:3f:d6:8d:e5:3f:e0:ba:3b:30:
         da:f5:c9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:41:05 2025 by rpki-client