Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          NrquUhOQuXJUzQkPr6UjlBfo8NFAgfTBNx4qg9gnXAc=
Subject key identifier:   3A:60:82:8F:A9:D3:A4:8A:00:92:4E:C9:2F:B6:8A:C5:CA:65:0B:6A
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       019829A36CAB3E9F5413E28BABD9D8EF63A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          155F
Signing time:             Sun 20 Jul 2025 21:00:32 +0000
Manifest this update:     Sun 20 Jul 2025 21:00:32 +0000
Manifest next update:     Mon 21 Jul 2025 21:00:32 +0000
Files and hashes:         1: CSELLzCfw6oI74q-WWe9dtPSQE4.roa (hash: gStbgJoQDV2DxWz+eMD0JCL1YRpJSnO1lPVyl9mxRzw=)
                          2: HVVJONofo563h9QMYaZ4QxaodCA.roa (hash: yg/TA6SdsD3Id5UMI0b19L1T62Icbt5ojBDi7qobzgc=)
                          3: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: GNxrkS/aTr+3owpJpRYGcqhs4e9BMGqO4Axrrl6PHbI=)
                          4: eUHjJwuDj8xNwMB_4iM9TrMswPo.roa (hash: ClkYaKsyUxfoPn59P3GqQQlCdtnOCewBPFKLRNlTbXE=)
                          5: hTXyI46q8ybU3Dz0eS3ayB3HFbg.roa (hash: XI37ysO8Yf94g3nRE6Kdilk8PRdJybt6ja3RqZ8LGfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:29:a3:6c:ab:3e:9f:54:13:e2:8b:ab:d9:d8:ef:63:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Jul 20 21:00:32 2025 GMT
            Not After : Jul 21 21:00:32 2025 GMT
        Subject: CN=3a60828fa9d3a48a00924ec92fb68ac5ca650b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:0b:f3:15:08:2a:2c:d3:92:a7:ce:12:0c:
                    60:62:e2:f0:e1:50:3f:02:49:c1:d0:ef:1d:56:e4:
                    65:8d:0f:7c:df:ea:d0:47:a9:c0:f7:6e:f6:f2:ea:
                    83:66:32:23:25:f6:8c:b8:cd:d6:7d:fe:0b:22:b8:
                    b3:12:93:82:af:0e:6c:a4:49:28:45:fb:87:6b:aa:
                    44:13:4c:da:cd:74:93:27:26:a2:a3:c4:e5:3f:ef:
                    dd:55:d3:34:25:a0:28:16:d0:0e:a1:74:bc:a4:4e:
                    aa:7e:20:05:bf:04:c9:40:48:be:a0:56:99:eb:78:
                    8d:b5:d5:a1:c9:a5:d4:52:3d:c6:01:52:8b:95:ee:
                    68:9c:05:d9:66:64:70:a7:64:9c:35:07:5b:56:80:
                    1b:1c:3d:6e:65:09:d5:d2:5a:d4:2f:57:10:5c:6b:
                    b0:70:25:5e:33:35:55:61:c8:30:0c:70:30:c5:8f:
                    18:cf:b6:7a:99:7b:a4:ff:61:18:db:75:83:12:1c:
                    e0:9d:0c:c2:db:7f:57:a4:06:80:08:90:22:e7:80:
                    e7:07:3a:19:99:9f:a5:f6:ed:c8:72:26:46:32:92:
                    8b:a4:0e:d5:11:c4:78:56:6b:03:76:37:11:d6:29:
                    f0:2a:1a:15:fd:ef:7a:f6:8f:47:c2:e6:74:5a:42:
                    87:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:60:82:8F:A9:D3:A4:8A:00:92:4E:C9:2F:B6:8A:C5:CA:65:0B:6A
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:09:b3:fc:fc:67:db:56:59:63:f9:91:cd:f8:32:79:08:54:
         07:6e:34:39:b0:6a:6c:95:d1:e1:ab:2b:2e:fd:53:78:24:cb:
         31:c5:ba:ab:f4:c9:34:7c:94:0f:0e:9e:a7:ed:81:d0:b5:76:
         38:38:c8:e0:9e:be:72:ba:66:ad:d4:ff:3f:39:f5:ed:a9:26:
         52:a5:1c:4d:30:05:b1:b8:00:e6:10:4d:ee:40:6d:7c:f4:da:
         f6:a8:07:54:0f:c5:d5:38:c3:89:06:47:41:bd:fd:e9:4a:1c:
         f2:e2:dc:cf:69:4b:16:ac:26:b7:39:4f:d7:45:f7:c5:d6:b8:
         a7:3e:c6:fc:ac:ae:1b:45:e1:df:d9:47:06:a0:90:a1:5c:84:
         f9:10:5b:e9:40:5a:a1:e2:30:38:77:0f:60:c6:e0:6a:1c:99:
         45:a8:42:d4:c4:b6:fa:00:56:57:ac:3e:67:c3:56:67:30:62:
         f4:de:c4:65:f2:bb:90:2d:ac:89:1d:16:f3:c4:7c:64:25:f0:
         89:c2:ca:eb:85:2e:72:55:55:da:1e:6e:14:71:8e:1d:e0:11:
         c7:5d:72:ae:64:f7:62:3c:fa:ff:3f:68:90:53:01:9f:1f:af:
         d9:f9:88:bd:2d:76:25:cf:8f:5e:2a:80:41:cc:b6:1a:f6:e5:
         ec:f0:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:25:09 2025 by rpki-client