Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
File:                     s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft (raw, json)
Hash identifier:          M9mBjyIQKc3OH1n/lttCK5hzfbauaWrJb6sp/OjRcj8=
Subject key identifier:   3F:A8:AA:45:20:93:EE:E3:D8:4B:D5:77:70:B7:31:A7:A2:3C:8D:32
Authority key identifier: B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
Certificate issuer:       /CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Certificate serial:       0198481BA4CDAF74B200427D0B8D7B70DF83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
Manifest number:          0C1E
Signing time:             Sat 26 Jul 2025 19:00:27 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:27 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:27 +0000
Files and hashes:         1: s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl (hash: fYtQuff8GfRQNJIBFZCKouN5aR32Iau4BKOMS4/lZkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:a4:cd:af:74:b2:00:42:7d:0b:8d:7b:70:df:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
        Validity
            Not Before: Jul 26 19:00:27 2025 GMT
            Not After : Jul 27 19:00:27 2025 GMT
        Subject: CN=3fa8aa452093eee3d84bd57770b731a7a23c8d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:13:a8:22:e8:f6:6e:02:59:a9:a1:67:92:
                    0f:e1:73:07:30:e4:35:b6:d6:91:59:80:96:d1:e8:
                    62:7f:79:e5:33:98:19:99:ba:f4:b8:8d:6e:b1:d3:
                    d9:49:7b:40:9a:60:fa:cc:eb:a2:f3:49:35:7e:ef:
                    6e:e4:6d:31:94:40:27:b1:39:90:c6:8d:08:18:76:
                    50:14:6a:b8:81:72:52:f5:ef:b3:73:d5:1f:c8:74:
                    f5:a7:ad:d3:dc:46:8a:26:60:36:a8:d7:d5:38:26:
                    9b:93:1b:07:39:bc:d4:0f:51:d9:17:81:24:22:aa:
                    7d:9b:3a:16:88:41:ab:92:c0:59:93:af:30:fe:27:
                    84:26:67:42:b6:08:5f:45:7e:c7:ce:0f:0d:53:94:
                    93:30:e5:00:37:e8:a1:33:d1:08:a3:a4:cb:24:d2:
                    b5:a5:8f:bf:96:23:9b:58:7f:3b:48:43:b0:a6:4a:
                    84:b9:0b:33:1c:9e:74:12:ac:f1:93:40:0b:ca:2e:
                    a8:a6:25:8b:9f:3a:26:8b:02:ff:fa:f0:14:ba:2c:
                    6f:cb:60:1e:41:83:2d:b0:43:12:88:35:58:26:04:
                    86:c5:f1:26:3c:3d:b0:dd:ae:ba:01:32:27:6f:ca:
                    4b:4e:62:d9:4c:0c:87:8a:1b:ee:23:8e:c7:04:d3:
                    4a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A8:AA:45:20:93:EE:E3:D8:4B:D5:77:70:B7:31:A7:A2:3C:8D:32
            X509v3 Authority Key Identifier:
                keyid:B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:53:93:59:3d:e4:16:3a:47:4a:d0:2c:97:65:57:4b:be:71:
         c3:a8:f9:12:b1:b9:8c:02:c9:3d:51:fc:68:ba:78:b0:e4:b4:
         7e:e4:98:f5:ce:ec:4d:3d:40:e1:da:08:ee:19:a5:cb:07:28:
         71:f4:ff:a3:30:1e:d1:07:d1:24:6d:7f:74:8b:68:d2:42:db:
         52:9e:e2:aa:01:0d:b0:bf:0b:9d:9a:90:ad:bd:fe:08:70:c4:
         10:00:3f:37:69:2c:9b:38:d9:4a:77:62:d3:d5:e8:6f:c3:87:
         23:67:d9:d0:be:4e:bc:d0:b6:31:c8:59:78:2d:6c:b6:26:7f:
         5c:d3:98:6d:f8:43:dc:47:50:95:f6:22:12:4f:ca:6d:b2:61:
         d4:9f:77:de:c4:f4:8f:61:d6:4c:03:8a:c5:65:be:3a:9c:3f:
         67:1c:2f:46:e3:88:03:9e:0b:b7:cc:d5:ac:ba:78:88:2f:88:
         f2:30:49:c0:71:4f:a6:d2:45:5f:6c:77:18:fc:7f:73:32:44:
         bf:5b:7b:45:20:f2:57:e6:5a:a6:1c:68:29:fc:03:24:b2:97:
         46:37:97:bc:0e:8b:4b:e0:75:00:1c:bd:b8:4d:92:3c:09:c0:
         aa:43:da:94:95:1e:4c:e1:b1:8c:83:22:b7:f1:c5:37:70:fe:
         de:3a:83:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:42:00 2025 by rpki-client