Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
File:                     SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft (raw, json)
Hash identifier:          NrswxQfjbQKBB7GcTE8P/41ZrNghKEo21zZxOTR+so8=
Subject key identifier:   0F:79:AF:C4:7E:80:5C:42:4B:07:97:3B:00:B1:23:D5:8C:BE:30:07
Authority key identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
Certificate issuer:       /CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Certificate serial:       0198D73B9846774D7E27DC6E49DA59BD2831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
Manifest number:          045A
Signing time:             Sat 23 Aug 2025 14:01:03 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:03 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:03 +0000
Files and hashes:         1: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl (hash: qxJZwfeRYKJVO5XKEvXcaBvX0tPhb0vyiElBRqvsvp4=)
                          2: ie5Rxl_8lGCYh_KgPEkCnbuQsRk.roa (hash: GBFEJYPtX3jgZYzHGm9uh7GT7ECNm8iOg9HQZDPhsqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:98:46:77:4d:7e:27:dc:6e:49:da:59:bd:28:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
        Validity
            Not Before: Aug 23 14:01:03 2025 GMT
            Not After : Aug 24 14:01:03 2025 GMT
        Subject: CN=0f79afc47e805c424b07973b00b123d58cbe3007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:56:d7:bf:ca:62:e9:09:c3:6c:e4:79:15:
                    d0:5a:58:54:35:76:a0:7f:b9:87:80:d5:f0:68:27:
                    02:7a:4b:1d:f0:07:f0:6b:9f:34:fd:8b:57:dd:d4:
                    60:f9:89:fd:af:b0:9b:03:ee:7e:8a:c0:5b:ee:6d:
                    07:33:41:9a:50:64:c8:93:f9:d3:75:9f:da:99:e5:
                    02:17:d9:59:43:ad:2a:24:37:80:48:58:f7:05:a1:
                    8d:91:d7:3a:53:b8:61:7c:db:06:cc:b2:53:3e:e5:
                    66:46:ad:52:0f:a4:8f:ee:48:d5:ff:89:fc:3a:a0:
                    1d:10:39:55:15:7e:a8:87:d2:3a:ba:1a:a5:45:c9:
                    f8:34:2c:04:1b:20:52:d2:c8:a5:57:68:bc:0d:d2:
                    2c:45:bf:44:86:30:eb:05:02:1a:14:ab:40:38:91:
                    11:4c:09:62:32:e3:b2:40:cc:6f:de:1a:df:a8:b6:
                    bd:63:82:68:54:1c:73:8a:08:82:c1:f6:90:49:93:
                    6e:c1:7f:83:7f:f1:98:a0:c8:ad:9d:fe:49:f3:7b:
                    9a:15:7a:49:d9:9f:ef:f5:7a:2c:ac:dd:01:d4:85:
                    c4:68:4c:c0:ea:68:70:02:e5:bd:40:f4:05:6e:07:
                    84:37:84:3f:98:e8:b2:e4:10:41:1f:ec:5c:ad:fe:
                    8a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:79:AF:C4:7E:80:5C:42:4B:07:97:3B:00:B1:23:D5:8C:BE:30:07
            X509v3 Authority Key Identifier:
                keyid:49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a3:79:68:25:ba:b1:cf:bf:c8:9e:e8:97:2a:0d:8b:a3:4d:
         df:42:3f:e9:90:cf:ae:13:6f:b4:72:22:28:8f:b5:53:85:e1:
         98:71:c6:6e:b3:44:17:a1:b3:8d:f8:77:e7:4a:48:60:47:f1:
         12:e8:8b:21:0f:fd:0f:bf:09:56:8e:f0:ae:88:1c:e6:9d:12:
         5e:78:43:9c:6e:86:ea:ef:ff:77:cb:05:d8:03:16:20:e9:13:
         7d:cb:ac:46:91:9d:17:df:79:99:50:3e:17:eb:1e:21:aa:3f:
         4b:02:50:18:8f:14:75:cd:71:1d:80:9a:2c:6b:5d:b3:e6:1c:
         4a:4b:08:6b:50:cd:8b:7c:de:b6:5f:15:79:6f:4e:ac:ef:0b:
         4d:ab:cb:ae:75:eb:cf:63:6c:88:98:5e:58:64:05:73:1b:d1:
         f0:34:e9:ac:2d:54:f3:95:95:ac:a8:e8:aa:6c:bd:f0:1c:83:
         f1:0d:aa:e5:32:e5:f8:31:f3:a3:9f:2f:a5:79:7d:cc:07:cf:
         b7:49:19:a0:df:7f:e3:ac:e5:8d:ca:49:bb:7d:97:d1:f2:0a:
         a1:24:3c:ab:e2:20:1d:28:0d:d1:8d:b0:ef:90:fa:62:a8:91:
         c8:b0:10:7d:5c:a7:e1:af:38:68:7a:3a:0c:fd:7c:d6:40:f0:
         ac:ba:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:26 2025 by rpki-client