Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File:                     SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier:          j7uH+SnvdAZ/tVwaGDiUQZzU2aTzycHJ3sTVo31fUbk=
Subject key identifier:   47:AA:A9:ED:E8:94:99:F0:1F:A2:D7:A0:96:E8:68:EF:F8:D7:2C:93
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer:       /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial:       019848C089CB22246906AF3EC7BE611A7FA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number:          0EB3
Signing time:             Sat 26 Jul 2025 22:00:34 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:34 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:34 +0000
Files and hashes:         1: RZvG8tfD1IhES3sTSq4PUTIau5M.roa (hash: 156XMiSx9vA1oBj0STlN0OZ/clFU7kVwEnhKeXGoaaM=)
                          2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: M/2tOh+lBSVLp0fwgfJm2s0lcydC5u1DhiD1FdY0k30=)
                          3: n34nAFTJk7pyD4Fldmcf5TLggoo.roa (hash: a/rNjgL4eu7nYmXqkssaZat+cUqAsRT2cGSOePDkoao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:89:cb:22:24:69:06:af:3e:c7:be:61:1a:7f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a409555105040578cb296070074f45107252eeb
        Validity
            Not Before: Jul 26 22:00:34 2025 GMT
            Not After : Jul 27 22:00:34 2025 GMT
        Subject: CN=47aaa9ede89499f01fa2d7a096e868eff8d72c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:aa:f4:a4:38:4f:94:4c:58:6a:b0:2f:93:5e:
                    81:e9:9b:4f:77:45:d4:ac:84:74:25:ba:f7:cf:8a:
                    be:e1:80:33:0f:1e:05:d7:e3:df:0c:b6:50:36:9c:
                    af:12:31:51:ca:8e:ab:96:63:9e:8d:e1:17:e6:b6:
                    36:c9:30:53:7c:58:33:dc:df:73:0e:33:67:fe:48:
                    89:43:c3:36:a8:3b:8b:f7:aa:61:6f:9a:66:79:87:
                    9a:6d:1d:da:c3:fa:39:e7:07:46:16:13:3d:a2:f3:
                    9c:07:29:63:3d:18:c0:09:2d:14:be:5e:38:9c:9e:
                    0a:ce:82:ff:b3:ac:20:8e:d0:f8:ae:09:08:5b:c2:
                    b4:da:d6:24:df:90:3f:58:5b:e2:a8:5c:db:1d:09:
                    15:8c:10:48:ff:e8:1a:ea:a0:0c:27:9e:da:67:e5:
                    c5:52:89:d7:38:c1:a3:9c:c2:48:ee:da:dd:6f:b0:
                    c5:5c:1f:7e:8d:ec:05:23:bd:0b:1c:18:95:97:a0:
                    c6:cc:56:2d:87:20:38:e6:22:65:2f:dd:7a:7e:73:
                    07:fc:06:af:cb:28:b3:00:06:84:b6:df:79:d0:cd:
                    0b:cd:49:d8:e0:b5:13:5d:5e:7a:c6:da:4b:2f:30:
                    a1:4c:88:e8:af:36:78:fc:4f:05:21:4e:7a:e1:b7:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AA:A9:ED:E8:94:99:F0:1F:A2:D7:A0:96:E8:68:EF:F8:D7:2C:93
            X509v3 Authority Key Identifier:
                keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:39:cc:a9:6b:4b:a4:e4:ea:9b:ed:b1:ff:b3:aa:3f:11:ea:
         98:38:96:cf:6b:b8:ad:2a:00:ef:4e:b0:9c:d8:0c:98:9f:61:
         09:85:49:7a:22:52:f8:71:e5:ae:b8:a9:8a:e7:69:0d:85:8f:
         1e:aa:32:9c:8f:f6:da:cf:76:b4:4b:35:61:20:72:65:f4:ee:
         da:c1:fb:c1:f5:06:2c:b2:00:47:f9:05:19:49:44:5d:a2:ec:
         5a:3f:fb:46:9e:80:c1:4d:c6:23:16:ec:15:fa:76:e2:3d:c2:
         f9:b7:01:e2:00:57:72:19:9c:4c:f2:4f:9c:2d:3b:14:18:80:
         0c:3b:13:65:8a:2c:2a:e9:44:f4:6f:0c:88:7b:15:1c:99:67:
         b8:e1:77:68:c4:13:54:f9:67:aa:57:df:cf:76:11:6d:ed:0f:
         56:5d:81:eb:9c:6d:d1:06:65:e1:3d:33:7b:8f:01:29:11:be:
         23:d7:1b:7b:08:4c:f6:91:0c:dc:bc:d6:05:40:f5:19:90:2e:
         ba:0e:5d:7c:70:7d:24:62:14:58:7d:4b:c7:21:6c:73:61:9e:
         98:d5:e9:a7:56:61:da:23:31:fe:11:b0:cf:33:ed:79:2b:a5:
         c7:57:d1:49:3f:54:d0:c4:c5:53:70:80:1f:21:d1:fb:7b:b1:
         d1:31:c0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:04 2025 by rpki-client