Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
File:                     sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json)
Hash identifier:          vcuAZckENnMTn1t+D/YDP0riQU5xOCDzuDQwRtTSqLg=
Subject key identifier:   BB:59:CC:79:BF:1E:E7:C6:A7:E5:84:E0:86:8E:6D:8C:6F:EE:A2:C9
Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
Certificate issuer:       /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Certificate serial:       0198D5BBDE08FF21B315D1E892C8913E79DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
Manifest number:          107C
Signing time:             Sat 23 Aug 2025 07:01:55 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:55 +0000
Files and hashes:         1: snSOZMPfK49AItHHPweedqu08i4.roa (hash: pOp6DYxwdd50QS7EO4q/xTqIWe4F0C/r3RXRy+6+GXo=)
                          2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: g2BXGtufRX1gY1HznBHdDb/S1PIqHE/l8HmTgrsGwKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:de:08:ff:21:b3:15:d1:e8:92:c8:91:3e:79:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
        Validity
            Not Before: Aug 23 07:01:55 2025 GMT
            Not After : Aug 24 07:01:55 2025 GMT
        Subject: CN=bb59cc79bf1ee7c6a7e584e0868e6d8c6feea2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:30:e9:7d:97:31:97:bc:15:72:72:3c:fa:72:
                    a8:5d:c3:7d:a5:c1:ad:94:82:d7:84:ef:af:29:17:
                    e2:be:66:84:84:9a:f4:28:17:5a:7e:e2:46:d2:16:
                    aa:3c:b7:bf:1d:c9:ae:3e:0a:4c:2f:f8:70:06:d6:
                    2b:d7:fa:07:40:a7:d8:0d:04:f3:b7:61:17:7d:eb:
                    a8:39:10:6d:b0:7e:d5:28:da:ea:9c:50:16:15:05:
                    f7:8d:58:de:fa:f4:9f:9d:13:57:63:9a:5e:57:19:
                    d4:63:38:73:cb:4f:7b:f2:ee:96:0e:5d:32:fb:1b:
                    f0:ab:8d:89:91:c2:39:7a:83:48:1d:7c:73:17:65:
                    3b:4a:35:21:27:83:20:b8:ba:07:c5:0f:51:1c:80:
                    d1:7a:c1:a6:5a:49:72:f2:20:f1:fd:50:85:a3:7e:
                    e5:f7:90:41:78:c7:19:61:09:bd:6a:08:c5:c4:0a:
                    c7:fe:f8:c1:3f:4b:f0:72:fb:28:6e:95:0b:80:d3:
                    38:9f:56:b5:5a:ec:43:8c:15:4c:15:8c:2e:d6:d2:
                    d7:f7:c5:79:14:a8:db:8a:69:1d:cd:c2:de:7c:79:
                    73:cc:76:cc:79:43:0d:09:6d:f6:03:b4:b4:ea:40:
                    5f:e4:e8:a1:22:28:9a:62:92:c7:92:9d:1d:62:b4:
                    76:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:59:CC:79:BF:1E:E7:C6:A7:E5:84:E0:86:8E:6D:8C:6F:EE:A2:C9
            X509v3 Authority Key Identifier:
                keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:7e:9e:10:bc:91:b7:f4:62:7d:4c:63:0c:c9:4e:8f:f1:ae:
         62:6d:fe:63:04:22:92:17:56:25:aa:9b:d5:fd:87:7b:98:13:
         e5:7f:dd:3b:f3:db:fe:11:de:4f:7f:12:88:8f:94:52:df:dc:
         5c:be:e6:61:9d:3e:f7:9d:72:12:8e:53:b0:4d:b7:10:f2:52:
         c3:06:60:aa:56:f4:74:81:17:e8:62:2e:4b:30:91:3f:b5:17:
         2e:9e:56:f8:ae:a5:29:99:24:63:93:19:5a:60:b3:24:9a:8d:
         9a:c9:e9:13:d6:74:4e:4b:77:82:05:53:8f:a6:c9:be:36:c5:
         e0:58:82:11:26:aa:ce:cb:1c:ec:b8:da:50:14:25:aa:4d:ee:
         70:8d:ef:37:33:d2:f0:e6:7f:8b:9b:4c:36:95:06:17:88:66:
         db:e0:77:6b:3e:c8:b8:0a:eb:88:af:55:d2:d4:d7:d4:36:2c:
         69:a0:0b:88:ee:79:6a:7c:04:dd:f5:35:4e:3d:a4:9a:f6:e4:
         d3:b4:81:46:02:36:f7:99:45:c4:e6:18:17:fa:08:d7:50:b8:
         b6:46:ea:bf:da:1d:64:19:82:ff:12:d4:db:2a:01:b8:a6:b6:
         3f:2c:8e:e9:30:9a:00:14:6c:4b:cf:0c:10:8f:fa:ee:d6:e0:
         ae:d3:1a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:04 2025 by rpki-client