Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File:                     SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier:          unnTmbfnxD1PYek6wa54eStw36zJnD/WnoYnhSlI1fI=
Subject key identifier:   8E:1F:71:98:D0:AD:42:48:57:78:4D:11:1E:88:DE:ED:63:A3:D9:D9
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer:       /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial:       01984889BCA045439B9233528C16CD3D20C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number:          15E9
Signing time:             Sat 26 Jul 2025 21:00:42 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:42 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:42 +0000
Files and hashes:         1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: sil+oPSsSxyLr5zEjeTMfdwOllPrDXr+XBwDdEZu7fw=)
                          2: qamXgGdELqVwuCRXcGaE5fyjphY.roa (hash: XwiZQCHwX+Vwexgrkkuz5eMSgh62jyoQLxKiqhe1Bqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:bc:a0:45:43:9b:92:33:52:8c:16:cd:3d:20:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
        Validity
            Not Before: Jul 26 21:00:42 2025 GMT
            Not After : Jul 27 21:00:42 2025 GMT
        Subject: CN=8e1f7198d0ad424857784d111e88deed63a3d9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:81:05:16:0c:e1:c6:9f:d4:5b:cd:45:b0:38:
                    e9:6a:ad:7c:d7:73:b3:5e:00:e5:9d:d7:79:cc:93:
                    f6:b1:c5:3e:0b:a5:41:c7:50:0b:ee:5e:1d:4f:db:
                    77:47:4b:13:05:f8:d2:2d:90:a8:53:ef:5f:e7:b4:
                    84:56:4f:18:62:ce:35:8b:d4:99:48:05:d3:56:2b:
                    75:8e:1c:36:98:25:05:68:42:4d:88:3f:1c:cf:c4:
                    f1:b7:7d:a6:3b:a1:f2:89:75:f1:68:bb:63:29:9a:
                    dc:bb:92:ca:f1:d9:97:47:9e:96:a4:71:8c:eb:03:
                    22:0b:a0:44:7e:15:29:d1:d6:83:74:0a:46:f1:33:
                    f2:cb:9c:0c:3a:2f:6a:b7:6b:21:a5:ae:6a:3a:86:
                    ba:c6:4a:73:37:77:e1:ef:b2:d6:27:c6:6f:5a:84:
                    03:31:c3:19:d8:27:e1:72:5d:38:c2:3e:f5:cc:0a:
                    c0:df:44:52:63:b3:3c:12:f1:11:0a:15:5c:90:23:
                    69:73:42:b1:33:1f:cf:bb:fc:c1:49:0a:77:51:74:
                    54:95:14:6f:bf:e7:e2:96:c6:23:59:f5:3b:e3:40:
                    0d:31:b1:bc:50:32:44:e0:99:fc:6d:08:b0:6a:48:
                    f0:8a:73:55:a9:c5:89:4a:7a:c5:64:4a:05:2a:a9:
                    54:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1F:71:98:D0:AD:42:48:57:78:4D:11:1E:88:DE:ED:63:A3:D9:D9
            X509v3 Authority Key Identifier:
                keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:12:dc:28:52:63:b0:10:b6:d5:40:7a:a9:24:c7:3c:43:97:
         41:4a:b5:cb:52:3c:20:a5:05:b6:e0:4b:5c:14:b8:6b:14:4b:
         8d:91:3a:9d:95:6e:63:66:6b:6d:0a:82:c7:3d:cf:2f:93:1a:
         57:ad:6e:24:4c:23:45:ad:d2:c0:d0:b4:b1:ec:5c:fe:40:bb:
         63:15:5a:38:48:3f:5e:72:e1:4f:d5:00:55:20:72:83:43:66:
         3a:2a:1a:23:0f:5d:71:25:d4:a8:2e:cb:57:c7:b8:69:af:a5:
         a5:fa:10:83:40:3e:af:6f:69:62:4e:b9:cc:bd:88:37:7f:78:
         16:74:23:93:ab:e0:56:32:dc:33:ae:48:1a:9a:39:29:72:a4:
         dd:65:01:34:48:26:14:cf:f4:d6:00:5a:ec:fc:18:74:3c:04:
         46:e4:77:aa:3f:01:f3:8f:88:5b:7f:a5:63:6e:50:aa:e6:9d:
         1a:83:5d:15:8a:fd:8a:d1:de:37:d1:df:d9:82:0d:ed:87:4f:
         9b:a8:f5:96:b8:26:c3:d7:e0:65:a5:12:0e:fe:b9:75:41:ee:
         f6:3c:de:86:97:9d:1c:b2:6b:44:37:d6:c0:08:76:f0:00:50:
         17:37:bf:59:39:96:65:de:b3:6d:f3:c8:7f:70:93:46:1f:26:
         f5:87:df:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:35:50 2025 by rpki-client