Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
File:                     sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json)
Hash identifier:          oM1pHBoVdulagPnkx5JGONGLp0L88ssPxn7C41UzlBo=
Subject key identifier:   2A:E5:99:D3:26:6B:AF:C2:30:31:4E:78:3E:04:62:A7:38:A4:17:FD
Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Certificate issuer:       /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Certificate serial:       019846D26395E8E899551E0CB1C585002B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
Manifest number:          0B19
Signing time:             Sat 26 Jul 2025 13:00:49 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:49 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:49 +0000
Files and hashes:         1: AXjvsvQT0QHgjGJCOykWGFNYr-c.roa (hash: 7RT23qfYCEUyYP4ewoJmIzu1W/Zc3geSmO8k80S5/ts=)
                          2: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: tIxPg5FLoB0i0aAB6kISkTbA9nzeab3w8SiEoPf6c9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d2:63:95:e8:e8:99:55:1e:0c:b1:c5:85:00:2b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
        Validity
            Not Before: Jul 26 13:00:49 2025 GMT
            Not After : Jul 27 13:00:49 2025 GMT
        Subject: CN=2ae599d3266bafc230314e783e0462a738a417fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2a:05:92:8e:49:cf:02:62:1c:77:7b:66:46:
                    4a:7f:d8:c5:7b:29:59:61:c2:49:11:14:14:7d:a7:
                    e8:f1:5d:aa:02:70:ba:af:70:64:ad:d5:b3:1b:35:
                    da:7b:37:52:6b:21:af:b4:87:e7:6b:89:e7:22:e9:
                    7d:a2:70:73:39:cd:43:37:9b:9b:1e:69:fd:2b:51:
                    12:19:e6:38:4f:ea:23:2d:a4:9c:68:78:33:ff:39:
                    f5:ff:ae:96:ec:d8:2e:b2:97:7e:18:f7:7d:e4:6a:
                    56:af:08:80:a3:78:5d:46:0f:47:a3:2a:ec:61:f6:
                    bb:81:a2:d7:e2:de:6e:4f:6b:58:a7:97:4f:35:2d:
                    2f:27:46:f7:1c:ef:62:71:04:ff:3c:c8:52:d1:b2:
                    46:f9:1f:d5:e0:53:b0:d0:51:b4:69:e1:17:c7:41:
                    4e:93:4d:a6:d6:bc:4f:1d:34:a6:c4:44:a7:26:8e:
                    5f:c5:1d:e5:dc:55:5e:d2:44:be:15:73:c7:78:dc:
                    a6:e1:e1:c4:23:13:c5:1d:ee:79:72:a8:45:1c:72:
                    56:45:bb:81:a6:48:53:dc:3c:6e:b9:8e:99:f0:e0:
                    f8:d9:c6:23:d0:f0:11:d3:f1:27:c9:b3:71:4b:6c:
                    f3:41:d5:01:40:9b:8c:44:7d:88:1b:26:91:a1:75:
                    b9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E5:99:D3:26:6B:AF:C2:30:31:4E:78:3E:04:62:A7:38:A4:17:FD
            X509v3 Authority Key Identifier:
                keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:37:ad:59:1c:cd:f9:f5:51:88:e2:46:61:47:95:4e:5d:8a:
         6e:7a:bf:3d:8b:28:87:72:c3:b6:bc:e1:c2:90:a1:f0:52:fe:
         94:af:44:2e:87:ce:b1:fd:53:7f:9d:bc:5e:47:c3:7f:c9:91:
         b0:a8:95:d9:61:aa:d0:ab:11:8b:12:d9:91:bd:87:72:c1:89:
         f1:5b:9d:2c:40:af:54:49:b6:e4:0c:15:76:86:bf:f2:60:b2:
         89:10:f9:2c:da:e0:ed:49:84:be:a7:b2:a5:98:27:2a:80:2e:
         1b:8d:91:53:17:0d:a3:f2:93:1b:16:7d:16:87:82:14:2e:5a:
         f2:62:0d:99:4f:ba:ae:3b:43:d9:b7:19:3d:6d:c6:91:20:98:
         46:69:f9:20:50:f7:47:9e:56:4d:c2:e8:b1:be:f6:01:c8:2b:
         7b:85:60:a9:d6:88:f6:ef:df:ba:00:28:23:36:f8:0b:ef:7a:
         21:a9:fc:b7:ee:a2:0e:d1:f0:5e:24:74:ee:97:53:09:b9:db:
         5e:0a:81:23:e5:50:b1:48:e7:f2:80:c8:cd:10:34:bd:b9:b6:
         fd:5d:37:3f:ec:95:52:75:06:9f:a9:69:1e:49:a1:00:bb:f6:
         5c:8c:b0:13:98:75:fe:d6:e4:19:fb:66:25:1e:83:35:47:b2:
         4d:2b:59:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:14:26 2025 by rpki-client