Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File:                     SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier:          ypyqSfwuVeXAPC5DE4NEAwz+INVh0Qv1yr0zJxzsfYg=
Subject key identifier:   89:7A:E8:B0:8C:0E:7B:6F:C2:E8:C2:94:58:03:F9:0A:BE:78:5D:F4
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer:       /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial:       0197D1A9FAA5EAAAABA193DEEF987B023D9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number:          0EBC
Signing time:             Thu 03 Jul 2025 19:01:07 +0000
Manifest this update:     Thu 03 Jul 2025 19:01:07 +0000
Manifest next update:     Fri 04 Jul 2025 19:01:07 +0000
Files and hashes:         1: KSNAER4Mydp8HyU9sU8i1lEowuM.roa (hash: k7Cs9APUIR/QxVIdcXpLwc8DXRZq1n3B8dEj7Z0wTKs=)
                          2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: pc1SrpUHrRcRwiDRGzEUFmGmgS1xufFkuAHw+vz7/Cg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d1:a9:fa:a5:ea:aa:ab:a1:93:de:ef:98:7b:02:3d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
        Validity
            Not Before: Jul  3 19:01:07 2025 GMT
            Not After : Jul  4 19:01:07 2025 GMT
        Subject: CN=897ae8b08c0e7b6fc2e8c2945803f90abe785df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:02:b5:97:73:98:16:72:f7:1d:30:bb:35:69:
                    fc:a9:ee:a7:8a:55:5a:85:f2:c8:9e:f7:f2:9b:f3:
                    f0:f0:43:4d:3a:21:39:b9:33:01:8d:2f:dc:a9:fd:
                    02:5c:1c:11:42:e3:9b:ac:fd:33:9f:81:96:ab:3f:
                    a7:d1:ad:e7:31:67:a9:9e:d3:7f:7f:88:56:93:a4:
                    23:54:a2:4a:ba:c2:f5:c6:76:a1:07:7d:b5:6c:fe:
                    e8:75:e6:7c:c9:15:f2:8e:22:cf:c3:f7:69:9f:c0:
                    be:eb:68:6c:7c:9c:97:4f:50:12:25:27:43:c3:39:
                    03:db:2f:6c:78:db:6a:49:0e:c3:e4:ac:d1:63:c9:
                    48:3b:41:ee:ed:ee:60:c5:ee:d4:17:2e:20:97:de:
                    85:28:e8:1d:3e:9f:dc:a4:d6:8e:f6:9d:1a:ae:56:
                    b6:4c:d8:74:8a:e2:c3:76:79:d3:27:e0:ac:0a:ac:
                    05:ad:a5:71:88:19:e3:06:27:28:65:b8:56:4b:8e:
                    50:94:d1:63:21:15:9f:22:8e:a5:58:c8:dd:51:79:
                    da:ff:6c:67:25:4b:e8:d3:b0:a4:2e:9d:af:f6:3e:
                    a3:3e:da:91:14:55:4d:0a:c8:6a:cd:1f:15:c1:65:
                    5f:83:7d:d7:95:4f:94:c1:04:51:96:d2:e8:75:3f:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7A:E8:B0:8C:0E:7B:6F:C2:E8:C2:94:58:03:F9:0A:BE:78:5D:F4
            X509v3 Authority Key Identifier:
                keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a5:65:5f:8d:76:d0:d1:fd:70:7c:b4:b0:df:9d:3a:eb:5a:
         8d:a8:07:de:d7:66:8b:d1:ed:37:3a:44:89:22:b9:bf:2d:6f:
         84:4e:e9:bf:fa:42:39:7e:e0:de:73:aa:b3:40:2c:64:53:56:
         2f:66:95:f4:a4:67:29:fc:63:1a:84:35:71:10:07:c8:e7:46:
         af:4e:5d:82:ad:fa:d0:8c:f2:72:c2:ef:4f:76:9c:17:3c:c1:
         2e:13:8b:1e:6c:57:1a:12:57:ec:a1:51:d2:76:31:6f:36:20:
         ac:f6:7a:ed:9e:50:20:ab:56:74:61:2d:c4:b7:28:82:c1:27:
         6d:ab:69:0e:ab:69:2e:17:90:2b:21:94:ca:63:ef:83:34:a1:
         80:73:3f:b5:5e:77:ea:75:be:43:ec:d1:b6:49:f8:81:48:ca:
         34:32:32:ab:41:e4:b7:ca:1b:e3:85:6f:28:a8:2d:3d:d5:c0:
         17:97:f9:ba:55:30:7a:24:ec:a6:4e:4f:4e:56:ff:81:1c:00:
         44:2b:b7:f1:d9:f6:69:84:2f:bc:12:72:38:53:84:0a:7f:37:
         06:5f:12:00:13:b0:43:75:ce:11:b4:b3:1e:52:5f:63:43:d5:
         95:96:0e:b8:dd:74:3b:b6:e2:b3:60:bc:71:15:40:e8:9d:53:
         69:ce:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:00:03 2025 by rpki-client