Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
File:                     snjtj5eA8p2voi-f3wM3TaSYDpQ.mft (raw, json)
Hash identifier:          81O1HRZ4qtoy87fgQtK94Hi7sJxzaC5hpnCUDV5fLjM=
Subject key identifier:   63:40:C1:06:D1:99:81:16:72:97:EA:47:C7:A6:09:DD:71:9D:98:5C
Authority key identifier: B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
Certificate issuer:       /CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Certificate serial:       0198D4743D1D4838D2AE9AE2A4D98736B333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
Manifest number:          10A1
Signing time:             Sat 23 Aug 2025 01:04:04 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:04 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:04 +0000
Files and hashes:         1: Q2ddpl6C3V4vYBl0I3228luG5oU.roa (hash: gKtH3NhXGtSIchcMlB2GM3eSMYDb2zE1qytNooqyMO0=)
                          2: snjtj5eA8p2voi-f3wM3TaSYDpQ.crl (hash: 14iWkafSV6Amls8QD8rZ+8ApknDXd6jBZ58pnW1nnHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:3d:1d:48:38:d2:ae:9a:e2:a4:d9:87:36:b3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
        Validity
            Not Before: Aug 23 01:04:04 2025 GMT
            Not After : Aug 24 01:04:04 2025 GMT
        Subject: CN=6340c106d19981167297ea47c7a609dd719d985c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fa:85:b7:49:c5:7a:13:13:16:48:d2:19:fd:
                    2b:25:9d:a4:e8:a6:2a:66:88:5d:5c:dc:ec:e5:ae:
                    dd:9d:e6:e0:71:ac:8c:1e:ec:84:2a:2f:2a:67:b6:
                    be:60:d7:00:8b:2c:0e:16:98:ef:1e:e6:89:fe:5e:
                    b5:df:8e:e8:33:95:4a:88:7c:11:5e:88:52:a8:b5:
                    86:38:6d:a8:51:0b:0c:9e:3c:a1:38:53:8d:eb:50:
                    7c:9f:c2:c2:49:c5:5c:e3:44:fe:1d:77:49:a4:86:
                    54:53:2e:b3:54:02:01:30:d7:4c:d8:bc:9d:21:96:
                    4b:68:30:0b:81:aa:de:4e:f3:7e:75:b8:61:5f:73:
                    2e:58:0c:c6:bb:6e:18:61:cd:66:77:af:eb:d3:25:
                    fe:35:72:1b:28:36:4a:6e:f3:a9:57:15:aa:96:eb:
                    97:5e:6a:20:8c:2a:75:34:4e:e2:72:e8:86:d9:0d:
                    63:4b:b3:c6:13:1a:ff:2f:b3:28:a0:c1:ff:f5:f7:
                    a9:a4:b0:3b:5f:8c:aa:e9:d7:10:5f:9b:c2:7a:c9:
                    eb:3f:36:81:aa:df:d7:24:0c:d0:ef:2c:2f:53:6c:
                    f4:37:61:bc:c6:d8:b0:33:7f:e1:95:fc:b6:8c:0f:
                    6f:a8:72:41:83:1a:c3:b0:43:f2:2c:b9:dc:d5:f5:
                    97:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:40:C1:06:D1:99:81:16:72:97:EA:47:C7:A6:09:DD:71:9D:98:5C
            X509v3 Authority Key Identifier:
                keyid:B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:19:85:9f:fc:fd:b0:90:57:d5:ec:c7:ae:5a:6d:79:e2:00:
         19:6e:ea:b6:e5:27:65:0a:0f:96:05:3b:c2:05:93:1a:2e:f5:
         1b:38:79:06:36:4f:8e:76:3f:3f:9c:d2:69:19:ca:95:dd:36:
         d1:9d:fb:ce:26:0b:7d:5c:3c:30:09:37:c0:1f:7a:18:66:2d:
         d0:ee:29:16:b8:50:77:cf:d8:34:f1:c0:9d:b4:2a:57:0a:29:
         47:a1:c7:5c:21:09:ba:a8:c0:c0:d7:01:2a:61:05:d2:67:4c:
         2b:71:46:9b:d9:fa:a4:f2:6c:17:2b:30:6d:d7:98:b0:6d:72:
         6a:79:39:c1:0c:30:b7:d6:bf:2e:e6:c9:ad:15:f2:ae:18:ce:
         6c:07:a3:5f:0b:dc:31:4b:37:49:62:4f:dd:f4:ed:38:3f:0e:
         aa:9f:92:d2:f1:6a:49:4d:61:ca:64:a9:af:c1:66:27:a1:85:
         c8:af:c4:67:31:c4:84:c0:19:1e:3d:58:20:a0:dd:2b:0c:31:
         0d:c0:74:c5:c7:55:fc:6c:5f:b4:ad:c2:6d:84:f9:76:79:72:
         09:64:81:b8:5f:1d:80:25:ad:b7:ef:43:b1:33:cd:aa:c0:3f:
         85:2e:46:47:48:d2:2f:1a:a0:3e:75:9d:b5:3a:8d:44:1a:54:
         16:a0:30:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:19 2025 by rpki-client