Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
File:                     mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft (raw, json)
Hash identifier:          GsgHs/WlMdd2M/9b5oqidTMGIfAAyPCdqTauJ2b/HXw=
Subject key identifier:   C4:E2:79:93:E6:AE:EC:E0:E5:78:88:B6:B8:39:0D:FD:D5:4C:D1:8A
Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
Certificate issuer:       /CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Certificate serial:       0198D6613B6D52588AFAEC39CFBB0C7E4DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
Manifest number:          0546
Signing time:             Sat 23 Aug 2025 10:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:33 +0000
Files and hashes:         1: 6X834B5gcsNjXymrQMfROjTj6Pc.roa (hash: eUjrS9xR0GNckSwbqncq7fyluCC422BD9P+h/ci+z+8=)
                          2: mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl (hash: k+uMwzcndHIPwdTVDuUS+UCsPd/xh06UmzxRfFufksQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:3b:6d:52:58:8a:fa:ec:39:cf:bb:0c:7e:4d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa
        Validity
            Not Before: Aug 23 10:02:33 2025 GMT
            Not After : Aug 24 10:02:33 2025 GMT
        Subject: CN=c4e27993e6aeece0e57888b6b8390dfdd54cd18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:22:36:2f:40:2e:5a:08:85:db:b4:05:a4:f1:
                    fc:a3:62:c7:4a:76:d1:e0:d3:93:3b:e9:33:a1:59:
                    d1:c3:66:4d:c2:40:35:6e:bd:3c:9f:36:19:69:12:
                    17:ac:44:3b:a3:5d:52:f5:46:0a:c5:9b:be:6e:eb:
                    2d:b2:c9:e9:6c:0f:0b:10:14:c7:81:56:58:f8:c4:
                    f3:8e:19:4f:f3:53:69:a4:e6:56:37:82:0b:77:e0:
                    5c:ba:6f:66:42:bb:b0:bb:ad:ea:f1:74:36:00:a5:
                    cf:b4:66:84:d8:24:35:db:a9:4f:d4:0d:f9:3c:81:
                    61:df:7f:66:75:33:0f:19:db:29:aa:0c:c9:aa:10:
                    84:33:25:31:34:ca:e2:1e:51:cb:9e:0c:fd:9d:26:
                    e6:7a:40:75:88:a4:7d:6d:ec:f6:fa:3f:00:88:d7:
                    ff:49:4f:19:cc:1a:92:9e:14:61:a2:5f:58:39:e1:
                    dc:90:34:f9:92:e0:29:e4:60:f3:7f:d7:44:5e:8e:
                    14:7c:f9:80:3f:09:64:16:57:ea:43:8f:b1:b9:fe:
                    ed:2d:e3:ac:24:8a:c9:e3:65:70:33:90:72:2b:c5:
                    35:96:1c:92:9b:44:3a:0a:db:e6:e9:6c:d1:6b:60:
                    3b:eb:cf:57:1f:3d:b6:cb:38:7b:c1:7f:1d:cc:39:
                    a3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E2:79:93:E6:AE:EC:E0:E5:78:88:B6:B8:39:0D:FD:D5:4C:D1:8A
            X509v3 Authority Key Identifier:
                keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:43:12:9e:75:b7:08:da:9d:62:4a:37:eb:01:94:c7:e0:c3:
         a1:28:f4:1a:46:ba:78:be:55:a4:5a:6a:94:ae:55:bf:26:02:
         8c:1f:64:ef:43:1b:ff:c1:81:a8:88:62:0d:07:d8:ba:c3:e8:
         8e:3b:fc:5f:5f:f6:0c:0a:a4:a2:07:99:1b:84:d4:ef:c8:aa:
         b5:bd:3a:fa:76:ce:00:6c:7a:c1:29:3f:52:a4:0d:b7:50:4c:
         28:e6:f1:15:40:2c:56:d4:4e:2d:5e:16:b6:bf:e7:25:6b:9b:
         ba:1e:60:3b:e2:f1:0c:ae:86:88:c7:b2:fe:7a:29:20:30:39:
         d9:e2:e6:10:68:61:37:f2:89:0b:23:b2:29:e4:2d:c7:77:7b:
         ab:22:9f:61:97:4e:17:e1:b9:8b:ff:95:24:3d:94:dc:8e:81:
         45:92:7f:50:4e:f4:93:66:32:8d:f3:0e:41:30:8d:6a:22:67:
         e4:9f:1e:bd:52:13:6e:cb:4a:59:25:89:8a:a0:cb:e8:aa:89:
         91:38:31:21:b4:d5:d4:b8:6c:6b:67:2e:9a:59:e9:a4:53:10:
         ee:17:a4:27:26:e8:14:d3:8b:1b:77:7e:c8:c8:f5:8f:b1:7d:
         4b:81:7a:de:fe:cb:60:55:8b:25:a7:bb:0d:9b:4d:99:aa:40:
         0b:72:06:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:24 2025 by rpki-client