Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
File:                     SjQVWNugttuUxVzgbjBv9lGdbvE.mft (raw, json)
Hash identifier:          qF8KcxMfgvstK3ydLHWFD52mwjUUC8ZwANHN8wy7V8Q=
Subject key identifier:   D0:5A:39:3A:19:A3:82:35:06:9E:64:95:34:2E:C4:D6:A2:72:16:EC
Authority key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
Certificate issuer:       /CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Certificate serial:       0198D515A80DD2067008BDD123CC27D14344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
Manifest number:          0881
Signing time:             Sat 23 Aug 2025 04:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:22 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:22 +0000
Files and hashes:         1: SjQVWNugttuUxVzgbjBv9lGdbvE.crl (hash: 2Z5XeL3jzVECn9Kcl2xkWokqxpf3n7PdQDJwVtKnIBQ=)
                          2: yPI4iRYmm1fwcu2gPm48e2JKRd8.roa (hash: BDXqRGsDwDyhjpTf6VKbLY0k53gndOvrvWCUreaVIQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:a8:0d:d2:06:70:08:bd:d1:23:cc:27:d1:43:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
        Validity
            Not Before: Aug 23 04:00:22 2025 GMT
            Not After : Aug 24 04:00:22 2025 GMT
        Subject: CN=d05a393a19a38235069e6495342ec4d6a27216ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:9c:19:7f:f7:1d:ca:99:c5:fc:d3:a3:58:
                    b5:98:8b:dd:96:ea:c1:28:18:45:86:f4:e3:33:36:
                    35:e1:ff:54:2d:bd:8b:fc:b2:9f:48:6b:22:d3:0a:
                    0f:16:9c:ed:de:8e:4d:b8:af:ad:d9:57:e5:cc:3e:
                    bf:58:50:1a:76:3b:c1:e9:92:02:41:52:c0:d2:47:
                    07:f5:c9:ae:fe:76:8f:34:79:a3:6d:a7:7b:5f:6d:
                    ca:27:3d:8d:85:74:5e:5a:a5:15:ca:f2:06:55:59:
                    ee:da:60:20:ca:ad:f3:d2:1b:3e:b5:63:58:fd:50:
                    e9:c3:df:d4:17:fa:29:ef:f8:2e:d3:c3:b8:49:3a:
                    a1:f3:b3:1a:31:8f:9b:1a:37:2f:8d:9d:08:ec:5f:
                    ad:02:b4:4a:f2:13:4d:10:1c:b3:b0:0f:11:87:72:
                    01:37:c8:0e:f5:22:26:7c:59:60:25:2e:8e:1f:1e:
                    6e:07:c1:55:ce:36:14:28:41:03:23:ba:7d:64:41:
                    f8:de:20:4b:94:11:be:5f:43:a8:1b:35:be:6e:d9:
                    7b:00:87:1c:dc:db:ad:ad:c0:48:99:6e:68:41:c2:
                    ac:d4:54:25:07:71:3f:90:28:b5:e3:ac:4d:c8:3d:
                    da:b6:0d:5a:56:3d:f2:d4:03:15:71:4e:d2:96:3c:
                    3b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5A:39:3A:19:A3:82:35:06:9E:64:95:34:2E:C4:D6:A2:72:16:EC
            X509v3 Authority Key Identifier:
                keyid:4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:15:28:29:cc:0b:cc:1b:23:c9:e2:9d:56:24:e8:fd:c4:4f:
         6a:bd:ae:f3:40:d6:8d:f1:08:13:74:86:00:86:4d:95:df:73:
         ab:9a:e5:cd:a4:90:1c:7b:03:bf:a8:b6:c5:eb:3a:f6:e9:20:
         f0:8b:5d:4c:9b:1c:b1:2b:ea:aa:9a:5d:ac:0f:55:d0:4f:af:
         29:b3:3b:7d:4d:49:d9:f5:54:78:be:73:a0:1a:66:cb:06:d6:
         af:e6:29:bc:ae:54:58:3e:94:87:2c:44:6b:97:00:42:b1:25:
         94:11:5c:73:59:d2:a7:73:4f:9f:17:28:56:47:48:e7:cb:18:
         d2:c0:2d:12:33:18:5c:ee:a4:e0:03:73:ed:89:40:8e:9e:68:
         df:2a:15:bd:9d:88:70:0c:9e:03:67:ca:12:72:9f:c9:0f:65:
         6b:43:d8:1b:f7:fd:0d:43:54:f2:85:51:1f:29:29:51:7d:e8:
         27:c4:ea:97:3d:d7:82:df:ea:69:3e:05:ff:a5:67:a5:c7:fd:
         fc:1e:fc:88:9e:60:bd:05:04:4d:1f:50:c9:e2:79:08:d0:5e:
         7f:3d:ac:ee:29:6a:78:94:f3:35:57:e1:70:49:b5:4c:a0:0e:
         ea:a0:30:28:ad:88:37:f8:0d:d6:dc:d6:42:55:93:ab:29:07:
         44:de:70:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:23 2025 by rpki-client