Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
File:                     SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json)
Hash identifier:          SlnzJF+Y9RpeRxoOqU/6thY0kQBMDbh1ccq6fArhwQw=
Subject key identifier:   B2:F9:1E:8D:BA:66:7F:C3:81:8C:2E:C9:01:91:22:03:69:A8:30:B2
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Certificate issuer:       /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial:       0199FC8F76D70547D9C7795B5E2A251C4609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
Manifest number:          0367
Signing time:             Sun 19 Oct 2025 13:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:24 +0000
Files and hashes:         1: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: W28EMpHS35x3t/bAoSUuoJDRZaL0WdJtokGpMyQuX4U=)
                          2: sh9Rh_XHxgs73xUgLaXpfEWoL2M.roa (hash: u3ZNcYvwXVoq0LzAan53+HMQH1md2pw7AMcoma6/Peg=)
                          3: uFwm3LO6GthW3CaP1u11g2Pmnbs.roa (hash: P/XCOSSZFXhzFRU3N+DJNZYyvprMkXA10JImXpYTCCI=)
                          4: xJcR0deGB_PhVW4Ub0AqpBDixL0.roa (hash: SawuCs7fQfxnKHxl7dEG/czDPI5njJw6MgIPphiYv6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:76:d7:05:47:d9:c7:79:5b:5e:2a:25:1c:46:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
        Validity
            Not Before: Oct 19 13:01:24 2025 GMT
            Not After : Oct 20 13:01:24 2025 GMT
        Subject: CN=b2f91e8dba667fc3818c2ec90191220369a830b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:c9:04:32:e2:a8:ab:20:1f:7e:4b:a3:4f:
                    0f:04:d6:3c:4d:41:1b:ca:98:50:2f:9e:17:83:c6:
                    db:2f:1e:a4:f2:50:8e:66:3c:1c:ba:7d:14:8d:2e:
                    3e:56:ef:ea:77:2d:b0:65:1c:0e:95:1e:e4:c4:5c:
                    0c:0c:71:23:89:32:01:57:c1:f2:3a:6b:24:9f:3d:
                    72:ca:47:84:02:98:68:0b:c2:33:95:9d:3b:52:ec:
                    c1:7e:86:74:3f:91:ae:7e:bf:96:00:33:cc:10:ae:
                    5e:0c:d5:9c:6c:01:75:1d:2c:fc:10:2d:cf:71:01:
                    2e:f4:d1:90:ac:b7:7c:7e:37:f0:fe:06:79:89:8a:
                    c1:48:4a:b9:d4:ea:59:ed:e2:d4:98:2e:8a:d5:61:
                    49:85:ad:9c:3d:27:ee:96:d9:67:9b:2f:85:29:80:
                    b1:15:6e:87:10:29:8b:2b:9e:3e:72:48:12:d3:e5:
                    bd:ae:5f:44:2c:ab:5f:fd:0d:96:29:a8:a5:9d:69:
                    5e:0a:de:1e:b3:13:3d:a7:7d:9b:16:14:ec:d0:ec:
                    09:ac:75:fc:4d:8c:d2:43:cf:b6:d4:1b:1c:b1:4e:
                    c6:4a:09:8f:36:f3:95:7a:84:f5:03:97:d8:23:19:
                    b4:24:74:f7:eb:17:f1:46:ac:c3:0f:86:f4:21:82:
                    2e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F9:1E:8D:BA:66:7F:C3:81:8C:2E:C9:01:91:22:03:69:A8:30:B2
            X509v3 Authority Key Identifier:
                keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:45:4b:08:b8:94:b8:86:69:5a:28:fb:fa:05:17:ee:d4:ed:
         6a:5a:70:22:21:d1:3f:e3:41:e0:bd:cd:1c:90:2d:4b:f1:e8:
         ba:98:41:d6:39:30:f5:f0:6f:fb:5f:1d:d1:c3:02:23:63:66:
         15:10:a4:b6:d8:db:ed:11:41:b1:68:3e:ae:f0:36:75:85:e5:
         4f:4e:0a:b6:2d:a3:a5:9a:b8:3d:44:4e:47:73:11:46:ea:8c:
         d7:f8:35:73:9b:fe:d4:d4:73:38:bb:24:b4:ee:6b:80:c3:84:
         2e:eb:90:2f:97:ff:dd:43:98:83:be:8e:6f:16:fe:37:d5:c6:
         7a:d8:1a:bd:a9:f7:27:b1:71:ed:7c:c3:f1:f0:83:9b:b4:5d:
         fb:57:0e:da:46:ca:d0:be:ed:0e:37:44:d8:76:ec:8a:1c:e8:
         08:49:8e:8f:d6:8b:c2:27:a2:30:49:cc:1a:4e:d1:b0:d8:d8:
         af:4f:f6:9a:f7:a2:b7:dc:fa:df:63:f8:e8:f3:72:d7:7a:ae:
         0c:53:23:b6:7a:f9:37:2f:45:da:09:58:36:21:06:e7:4f:f0:
         b6:69:50:0f:56:1b:05:2f:e2:78:57:e1:a8:95:c0:b7:5c:03:
         54:a5:8e:84:05:10:dc:1d:17:21:95:25:90:36:53:b7:6a:44:
         68:4d:f1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:06 2025 by rpki-client