Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File:                     S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier:          B/5pFqcZDMi1QRTVYdKgpwXrMVGmb82UCRdrfjOoNlc=
Subject key identifier:   78:19:AA:66:E7:17:09:75:E6:2D:90:4E:4B:BE:15:F4:A9:0A:01:59
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer:       /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial:       0198D7A9A219CA3C9A06243430B917C0194F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number:          15DA
Signing time:             Sat 23 Aug 2025 16:01:14 +0000
Manifest this update:     Sat 23 Aug 2025 16:01:14 +0000
Manifest next update:     Sun 24 Aug 2025 16:01:14 +0000
Files and hashes:         1: M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa (hash: x3vhRRKg/BRlfpWUDclKnemjloDpJmmJOqeSSdSoUa4=)
                          2: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: u35VXRwNm9chnUS8zrdtlC1vy7I8gusyZhdwTfKzBbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 16:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:a2:19:ca:3c:9a:06:24:34:30:b9:17:c0:19:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
        Validity
            Not Before: Aug 23 16:01:14 2025 GMT
            Not After : Aug 24 16:01:14 2025 GMT
        Subject: CN=7819aa66e7170975e62d904e4bbe15f4a90a0159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:74:db:35:c7:8d:16:fc:fb:1c:f5:24:11:bf:
                    8a:2c:07:11:a9:5a:d5:bd:33:dd:e5:96:87:8e:4b:
                    e5:74:58:9e:53:06:1d:08:2a:dd:da:d9:15:6f:d0:
                    4c:1f:5d:77:7b:00:8d:37:ba:36:e0:23:35:c2:9d:
                    4c:7e:89:b0:13:95:8f:2d:95:06:96:cf:c3:ef:72:
                    84:e5:20:bb:78:cc:45:1a:ac:53:21:c5:66:ea:36:
                    5c:0e:d2:e0:09:2b:45:0c:f2:80:14:da:02:56:53:
                    e1:5d:09:dd:f4:a8:1e:df:b1:24:c7:10:76:70:26:
                    e6:08:d4:dc:f3:41:d9:6a:c1:aa:50:b3:9f:82:dd:
                    72:e6:7e:df:55:8d:b8:96:5d:c9:2c:70:6d:ab:06:
                    25:84:5e:23:fe:80:70:68:6d:ef:21:b8:aa:68:d3:
                    14:28:34:ce:e1:f9:7f:01:50:c9:7d:63:c2:0d:6b:
                    b6:3e:6e:b3:a5:b4:56:f2:49:f1:19:eb:f7:31:2f:
                    be:f5:57:1f:bf:d5:cd:ee:2c:2a:bb:2f:95:84:07:
                    ac:3d:49:a7:92:f7:77:2d:03:d9:1c:f7:5f:cf:b3:
                    2f:d4:e0:46:50:73:93:85:af:05:a9:31:e4:32:00:
                    e1:47:d8:97:7e:a0:e1:d8:d0:dd:cc:de:62:6b:34:
                    1f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:19:AA:66:E7:17:09:75:E6:2D:90:4E:4B:BE:15:F4:A9:0A:01:59
            X509v3 Authority Key Identifier:
                keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:7f:ae:57:2c:9b:65:5f:a9:8a:2d:0e:c9:31:c9:3f:11:9b:
         5d:8b:ba:94:67:b6:c8:96:f2:f7:a4:37:f7:93:98:c4:98:46:
         be:d7:fa:de:c4:68:3f:54:19:02:9d:5e:e6:40:ea:cc:37:c0:
         4d:90:35:3f:8b:5c:1e:da:0f:8c:ad:b2:19:2b:5b:d8:70:bf:
         c2:90:c7:46:40:63:d9:5b:0c:26:7a:97:4a:c9:1e:3f:46:c4:
         a5:ce:13:c7:a0:c0:07:64:0e:85:cd:6d:51:76:76:ce:1f:cc:
         ee:74:7d:14:4e:36:1b:44:2f:ba:18:e9:19:0f:2a:6c:4e:5a:
         e3:bb:21:7b:4f:bc:71:c1:2b:e4:7f:9d:c3:40:c5:27:7f:68:
         df:8d:1c:e9:e0:8b:c9:14:7e:57:24:a4:02:0f:24:d2:fe:e9:
         55:a3:72:aa:8a:39:97:b0:98:2e:f9:46:20:79:08:ee:fb:da:
         a6:9d:02:4c:92:a6:b8:c9:67:a8:e2:91:85:d0:b3:15:6d:5c:
         6d:57:1f:bf:73:c1:39:a2:30:3e:45:5d:63:bf:61:2b:ed:33:
         d9:48:d3:57:1b:b5:30:e4:06:13:e2:09:48:ae:31:cf:36:2c:
         48:f5:9a:28:c7:c4:3e:ec:e0:11:38:ee:8e:f2:1a:d3:1b:0d:
         15:6d:0d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:33:32 2025 by rpki-client