Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File:                     sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier:          XP4BoezFuJqJS32MVyeNDNNq3/Ckdwcog9qJLFlKH0g=
Subject key identifier:   EE:07:ED:F7:9E:32:9C:AB:B3:FB:C8:CA:25:C2:0E:78:CF:C0:57:88
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer:       /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial:       0198560EEB8D9D8EBD9D319CE90ABC5D12BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number:          0927
Signing time:             Tue 29 Jul 2025 12:01:14 +0000
Manifest this update:     Tue 29 Jul 2025 12:01:14 +0000
Manifest next update:     Wed 30 Jul 2025 12:01:14 +0000
Files and hashes:         1: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: jcJd+ws1oCgfHHNOJbDqrYJyZN2pWX0uILx7Qnb+FWA=)
                          2: zGycLxq7YqbVlBvuNEd47CRzT-U.roa (hash: o72/nsIKF1YG4XUjUYVm0HFMSGLne+bRa8vjHOf30pI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:56:0e:eb:8d:9d:8e:bd:9d:31:9c:e9:0a:bc:5d:12:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
        Validity
            Not Before: Jul 29 12:01:14 2025 GMT
            Not After : Jul 30 12:01:14 2025 GMT
        Subject: CN=ee07edf79e329cabb3fbc8ca25c20e78cfc05788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:cd:79:44:ed:72:64:a4:d8:39:a9:cf:8c:
                    5c:aa:c3:ab:7a:1a:fe:5b:f6:a1:fa:a9:4b:88:3c:
                    3f:f1:73:d1:bc:38:40:95:06:6b:c8:04:f1:38:c9:
                    b3:3c:51:34:71:ab:b5:fc:13:43:8d:ac:d0:05:be:
                    49:83:8c:5f:13:ab:56:c8:c5:63:dc:9e:79:f2:02:
                    eb:40:35:94:96:40:c7:e0:b0:68:e3:57:89:c2:8b:
                    cf:05:a5:37:27:61:f2:66:f6:69:d3:00:71:1f:c8:
                    84:a8:91:1e:9e:8d:8a:f1:65:aa:1c:a6:a5:1f:c2:
                    5c:f7:e4:0a:91:43:99:e1:56:9f:8c:2f:77:9b:bc:
                    96:06:db:10:d1:25:d0:4b:37:ef:e8:b1:9f:08:97:
                    7a:2d:f8:7e:11:08:a9:98:f0:c0:b6:8e:df:18:82:
                    9a:be:85:00:b3:84:bf:b9:4e:17:70:c1:69:bf:bb:
                    76:3f:c6:37:24:f2:9f:ae:e6:d3:3e:ce:64:1e:1c:
                    ec:0e:37:5d:d1:ed:40:4c:38:40:b8:a0:f0:46:5c:
                    85:7d:ac:4b:53:77:10:b9:20:f7:66:6b:a8:24:37:
                    78:0e:de:83:54:37:21:3b:e3:e2:47:9d:cd:66:c3:
                    a5:bd:d8:51:f8:02:d8:18:0e:92:38:26:e6:5c:bf:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:07:ED:F7:9E:32:9C:AB:B3:FB:C8:CA:25:C2:0E:78:CF:C0:57:88
            X509v3 Authority Key Identifier:
                keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:71:31:cb:93:49:a1:da:65:70:5d:fe:8d:a8:d6:77:06:5a:
         aa:fa:0f:7f:90:c6:26:86:48:0d:04:4c:82:0e:7b:de:13:a0:
         c2:53:c2:f9:3a:2a:39:6a:67:a6:b2:88:fd:49:ea:00:aa:bb:
         e8:de:48:79:2b:3e:7d:97:5d:d2:1e:5c:8d:16:30:53:6a:36:
         de:22:e1:35:87:33:c3:68:30:3b:6f:d0:d5:0a:fb:7e:8c:f7:
         99:98:7c:d7:ea:c6:6e:93:bf:1e:c0:c0:7c:24:e3:e8:96:89:
         9a:d0:24:b1:d2:86:ec:80:c6:fa:b7:17:0e:a6:d6:28:11:4e:
         a4:6b:b0:3f:34:30:40:d0:6a:5b:87:de:84:6a:80:38:c3:6c:
         b3:74:d9:79:ec:28:1f:f0:a0:a9:92:a6:ce:6f:bc:8a:45:6e:
         8b:07:c4:da:67:c7:bf:d9:5f:6d:ac:aa:a0:d4:74:ba:77:5b:
         38:b8:1f:e7:21:97:1f:eb:8f:f3:f8:58:2e:d2:f8:ea:c4:a6:
         b7:b1:74:8c:12:3e:2b:4a:08:3d:e7:78:c0:06:9c:b9:43:69:
         aa:19:60:4e:a2:de:83:46:76:93:0f:85:fe:34:6b:69:25:45:
         82:34:b9:8e:0b:c2:2c:d3:7b:ac:fe:e4:e4:5f:7b:58:16:80:
         1c:0a:a5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:36 2025 by rpki-client