Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File:                     sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier:          qJA0paMLIoaOl6g7msis+4Sk9Z72/R/ttcpZ2Xljt/Q=
Subject key identifier:   60:CB:26:B5:37:ED:2A:54:00:E9:EC:F3:B1:65:4E:86:C1:2B:16:DE
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer:       /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial:       0198D5835F0FB16CB1F012D21404786A6447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number:          0525
Signing time:             Sat 23 Aug 2025 06:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:13 +0000
Files and hashes:         1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=)
                          2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: knxVOJeOHCn7UnMN5EN9Ou45X75K/n9I30MNfQ5CO0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:5f:0f:b1:6c:b1:f0:12:d2:14:04:78:6a:64:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b085804db153eb724c58557c79359c4408205550
        Validity
            Not Before: Aug 23 06:00:13 2025 GMT
            Not After : Aug 24 06:00:13 2025 GMT
        Subject: CN=60cb26b537ed2a5400e9ecf3b1654e86c12b16de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:09:b2:2a:96:fb:01:60:48:b9:0e:bb:13:c4:
                    78:7e:a2:69:bd:45:bc:4c:ae:71:45:87:de:c2:c5:
                    ac:98:49:05:e6:04:4f:97:fb:9b:b2:7d:15:13:9f:
                    28:2d:a7:da:a8:f2:b0:84:b9:86:43:16:aa:a8:08:
                    1f:bb:97:4e:2d:9d:a0:5d:00:d0:ab:87:53:1f:93:
                    29:c6:07:09:03:fd:d2:09:21:a6:cd:ef:1b:7e:a9:
                    d4:51:c9:7c:cb:c6:26:51:f2:ae:9e:ef:97:7f:e3:
                    13:e1:69:22:a5:ed:e7:6c:6a:41:92:98:04:e4:42:
                    6f:0a:c4:f6:4f:b0:49:9a:96:7b:66:35:47:38:a6:
                    7e:6e:d4:3d:c6:5a:f0:d7:68:ae:c1:20:8f:bd:60:
                    aa:73:a7:1a:83:99:e4:52:da:00:6c:05:5a:1b:f6:
                    da:d1:5d:35:98:d0:b7:31:92:b9:19:00:bb:ff:da:
                    18:0d:a0:a8:c0:17:db:47:d0:b5:72:d0:40:8a:8e:
                    3c:3b:6d:81:53:be:e7:f3:a1:38:30:d2:aa:0d:80:
                    b1:dc:ce:5d:95:24:55:c3:b0:cf:54:e9:b5:c4:42:
                    f2:62:c3:52:17:91:91:db:b4:af:4b:a4:34:7b:96:
                    9e:33:77:af:ab:ba:39:32:e5:d4:62:46:f9:dc:ea:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CB:26:B5:37:ED:2A:54:00:E9:EC:F3:B1:65:4E:86:C1:2B:16:DE
            X509v3 Authority Key Identifier:
                keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1e:03:54:2e:26:f7:98:5e:98:40:9c:ed:4c:3d:75:d5:e1:
         44:d0:d5:86:e6:9e:12:07:18:c4:60:5e:38:3e:32:5e:c2:f0:
         1e:84:4f:61:1b:24:fb:8d:a1:26:02:08:67:09:f5:39:5f:0a:
         d6:60:45:fc:73:dd:49:44:bd:3d:9d:e4:23:75:93:ab:f4:98:
         44:09:44:5a:55:d9:dd:fe:c6:e4:ac:23:e4:3a:b9:e8:b0:c2:
         94:70:16:83:d0:63:3b:31:29:40:1b:da:8e:cb:ce:1a:f2:d1:
         f3:0d:43:4c:91:76:d5:85:83:c3:13:03:2a:1c:ac:ef:e7:34:
         d7:2c:43:d1:98:10:fe:6e:32:a8:05:03:8b:01:e5:60:a7:22:
         57:f4:5c:8b:4f:1e:ba:31:bd:aa:21:8e:53:b7:a8:da:e2:a8:
         14:bc:69:8d:91:17:0a:71:5f:9f:68:ef:5f:89:24:75:17:22:
         63:3e:1e:c5:cd:65:25:6c:f6:3f:2f:cb:19:24:47:57:02:0c:
         2e:40:d3:cf:fd:b6:f9:51:bf:6e:23:29:1d:d7:3a:c7:d1:16:
         f8:e8:01:69:e2:9d:f8:10:29:a8:e6:9b:06:09:59:59:f5:ea:
         87:1d:49:f0:21:f2:d2:37:19:ac:47:dc:80:3c:28:ba:48:da:
         34:05:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:50 2025 by rpki-client