Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
File:                     SKvyn974VwUC9LUb5f_AXE2bNGU.mft (raw, json)
Hash identifier:          s7UPU+dA3Le11MnT1LWh9anyIgCKBvlvpE9WLeAz2iI=
Subject key identifier:   C6:5D:A7:A4:D8:3C:89:4B:4F:12:2A:8F:B5:99:29:7B:77:38:74:2D
Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
Certificate issuer:       /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Certificate serial:       019843D0FFDD0413B2CC41CEE15B3930C3D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
Manifest number:          0F47
Signing time:             Fri 25 Jul 2025 23:00:27 +0000
Manifest this update:     Fri 25 Jul 2025 23:00:27 +0000
Manifest next update:     Sat 26 Jul 2025 23:00:27 +0000
Files and hashes:         1: 1ohlvL5PZw_3hcwGQ_J581-Kfkw.roa (hash: okrFXmsJ6KTYYIjnZcAOYjjx16+oQFPNv0K3PQHdWEg=)
                          2: GM87yoid4HvMFU0831meRD7aTrw.roa (hash: pAqrn8lneMfUM7XREKFFDTTB8aq7tLTz2G9UF3aA0BU=)
                          3: SKvyn974VwUC9LUb5f_AXE2bNGU.crl (hash: kdw1oAhQtbwwSuAUU08Of8tK8cujKz57z94yeK8ljEY=)
                          4: YmWNecN7XYdIQOw5isqM5uZJr6o.roa (hash: qgjgkbZfX+RrYxvoH+GzWI4Ldi/tsJF4AVz6jSadRjw=)
                          5: d5fKf4HMjFTPvFv1g-extK9TjY0.roa (hash: jvG0QqsqMCFOCxZ5OCB/lB/g5oXzEXu+iNot1r/2b24=)
                          6: yenk1FulFKKzRy_UkUqeujhCFDE.roa (hash: 88ixtFP90mmpbbschipnIT/GNXMn5zvObfjytzgQofg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:d0:ff:dd:04:13:b2:cc:41:ce:e1:5b:39:30:c3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
        Validity
            Not Before: Jul 25 23:00:27 2025 GMT
            Not After : Jul 26 23:00:27 2025 GMT
        Subject: CN=c65da7a4d83c894b4f122a8fb599297b7738742d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:be:2b:77:5a:be:e8:20:4b:cc:21:65:d4:
                    b8:d8:fc:3c:8f:9b:57:c4:95:62:64:af:dc:1c:1e:
                    7d:94:84:33:ae:28:69:e7:0b:de:e8:af:3c:00:27:
                    23:3e:7d:af:c2:5e:c9:ae:48:57:e7:a1:c9:34:5f:
                    26:79:42:ce:3f:0d:eb:c3:c2:23:ea:44:8b:6f:1a:
                    9b:cc:27:79:d0:50:30:e0:7a:73:f1:aa:61:a3:27:
                    02:0c:34:83:ec:0c:a9:38:ec:2a:4f:30:88:38:a2:
                    25:e5:9f:c9:ce:5b:26:1c:9b:63:50:38:8e:24:c2:
                    4d:d4:83:72:7e:69:69:5a:25:3c:f8:4e:04:c2:fb:
                    f6:02:cb:ca:f0:a1:c0:a9:6b:98:11:65:64:80:cc:
                    c5:0a:ce:c0:90:7e:cb:5d:c5:85:b6:a1:82:a8:87:
                    a3:de:8f:de:fe:1c:95:47:f5:68:54:05:a9:12:ff:
                    ed:72:2f:15:0d:d9:78:2c:84:c2:18:50:21:1b:86:
                    a6:3e:a7:ad:99:9f:da:53:43:1d:4a:23:8f:71:73:
                    f1:e1:72:12:09:de:d8:ba:70:f8:10:fb:b9:9d:96:
                    fe:c7:96:5e:b6:25:9d:1f:52:42:32:c0:ba:b8:aa:
                    41:11:e5:6c:93:5d:f8:1a:86:84:c5:f1:ec:9d:e3:
                    32:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5D:A7:A4:D8:3C:89:4B:4F:12:2A:8F:B5:99:29:7B:77:38:74:2D
            X509v3 Authority Key Identifier:
                keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ca:ce:1e:45:46:e3:0a:13:f4:44:9a:28:7a:87:3f:80:bd:
         f7:00:1b:38:a3:94:8b:1f:18:1b:f6:ab:d7:b8:95:48:dc:bd:
         05:45:a0:0e:7f:b2:ee:56:8e:2b:c4:51:e7:00:01:0f:79:4a:
         70:65:25:12:c5:5e:a1:a7:a7:f1:dd:72:87:a6:19:f7:75:cf:
         19:72:0e:2c:ca:8b:8b:03:95:91:5f:5a:f0:b3:eb:e4:ce:c8:
         f2:dd:c4:4d:c5:ba:7c:1a:d4:1c:10:ea:df:1f:5d:e9:23:af:
         4a:fd:ab:d9:39:af:b8:aa:d1:5e:56:90:8f:d0:a0:e1:67:f9:
         d3:17:3c:eb:38:cf:62:b9:11:fd:16:44:12:dd:2a:2d:9e:6c:
         87:c4:06:bb:a1:49:41:84:52:cc:83:19:38:fd:50:42:62:5b:
         a8:0e:e4:63:49:0e:69:63:bf:33:7e:d9:12:b8:00:3d:89:08:
         78:39:22:2e:9f:a9:ec:a7:aa:96:eb:91:00:63:4c:7f:92:b6:
         54:94:8c:ee:b1:07:53:55:20:eb:b9:b2:db:cf:15:b3:70:1e:
         58:77:f2:3c:57:b2:25:14:c3:f3:13:5b:8b:54:2a:4f:a1:44:
         79:98:39:cb:a2:d6:1b:d3:28:a2:d8:6b:90:d3:24:f4:82:5f:
         27:05:92:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:43:38 2025 by rpki-client