Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File:                     SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier:          UVVIgIifB1t/zRfTYRaYnuU8Kk+/N9GO6Lm0JflKYmY=
Subject key identifier:   DB:C6:76:42:5C:EC:FF:2E:DE:BE:72:57:35:83:C7:3F:F2:A2:74:73
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer:       /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial:       01983616503F596F48C9D11A5B3DB2E58C66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number:          15FB
Signing time:             Wed 23 Jul 2025 07:01:28 +0000
Manifest this update:     Wed 23 Jul 2025 07:01:28 +0000
Manifest next update:     Thu 24 Jul 2025 07:01:28 +0000
Files and hashes:         1: NApugC31V5WK63Ny4-racw1twJY.roa (hash: bVtlfHYisvNWIzitGovNgNsC2+/TaBl7fpGIvEq6gaQ=)
                          2: OI4m2d90B9xfmwLaDwu0RLIhyHI.roa (hash: 1tPpSMdOXEc4uC4QEVA58ahEFZcfSMXztb+GTkRhAk8=)
                          3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: LgYYN6sS9nwtRO1XdsMPLmvpDNU06jRY1oOr96MXpOM=)
                          4: i4v6AZ8AjCY-DaijxXBLxpCWr-o.roa (hash: IzqUiUJUiq+h6Lhm9373nMFr5yy8oOrsxUoRI4smlK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:16:50:3f:59:6f:48:c9:d1:1a:5b:3d:b2:e5:8c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
        Validity
            Not Before: Jul 23 07:01:28 2025 GMT
            Not After : Jul 24 07:01:28 2025 GMT
        Subject: CN=dbc676425cecff2edebe72573583c73ff2a27473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:28:87:3b:94:51:60:32:36:31:32:a7:90:
                    b9:c3:d9:61:6b:9e:49:40:66:e3:e9:3d:e0:83:62:
                    6b:56:fd:00:0d:cb:b1:be:49:f3:09:d7:70:97:78:
                    35:52:04:cd:fc:ba:15:9d:c8:4e:db:17:7a:9e:81:
                    b9:3c:ce:7b:e7:4b:f3:76:19:10:df:5d:a2:2e:00:
                    95:c6:26:c1:45:e7:22:b4:71:2e:bf:6b:29:34:71:
                    08:5b:4d:ba:d3:4f:da:f1:ac:8a:b1:fe:a4:16:75:
                    ac:f1:bd:d5:4a:e2:e8:71:43:0c:75:8d:20:f0:bc:
                    9f:59:e1:eb:cd:14:76:72:76:5b:c9:a1:0c:7d:f4:
                    9d:ee:72:08:c0:93:c1:c7:65:44:16:f2:50:e6:25:
                    c7:c5:05:fa:ad:10:21:ae:c7:a4:b8:2b:83:17:91:
                    b9:32:ea:3e:b8:9d:58:12:52:d6:6f:01:f1:00:ec:
                    62:80:b4:e4:25:67:43:cb:84:b5:59:b8:1d:39:c2:
                    a5:f9:a8:85:a9:9d:21:c5:d8:a6:ec:f8:b7:e2:d4:
                    9b:45:8d:98:0b:fd:50:59:a1:48:17:cf:a1:bd:91:
                    f3:d6:4f:6c:f8:b0:2e:2f:92:82:1e:f9:d9:34:2f:
                    92:95:4b:3f:86:0b:c7:30:8b:81:ca:58:fa:5e:a7:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C6:76:42:5C:EC:FF:2E:DE:BE:72:57:35:83:C7:3F:F2:A2:74:73
            X509v3 Authority Key Identifier:
                keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:85:7f:97:e4:ba:2b:9b:a4:fc:c0:c5:57:f4:fb:ed:bd:77:
         80:16:70:0b:d1:a6:08:8e:7d:94:fe:74:d2:d3:9f:08:65:ff:
         db:c6:91:35:70:e6:55:31:74:fe:6c:7a:81:90:bf:0d:f1:b9:
         59:0b:5b:76:f4:94:09:62:71:5f:fb:dc:4d:ff:ed:a7:30:29:
         e7:10:b4:30:6f:75:1e:d3:2d:bc:bb:41:7f:f4:b1:28:15:e2:
         b7:07:cf:73:a3:80:7f:33:96:6b:5b:34:5a:ad:a6:21:7b:40:
         5c:ec:d1:4c:6f:1b:8d:ac:d5:fa:b9:fd:f7:23:2a:47:a6:82:
         ad:d5:3b:68:c7:23:97:02:46:d0:54:17:c2:8a:b4:06:bf:2c:
         e7:ca:9a:51:36:7c:c7:69:84:96:3a:0b:a4:81:0a:93:1f:92:
         bf:25:5f:04:fc:c8:a3:ab:00:12:02:82:1c:58:e5:90:d7:cf:
         64:b9:3e:31:36:aa:f8:b8:e2:74:e6:3c:5e:67:05:bb:40:4b:
         97:5a:dc:3c:a0:59:46:b9:0d:d6:10:4c:41:67:44:4c:27:b3:
         32:bc:6e:23:98:73:3d:c3:c0:e5:90:9c:91:e4:e4:af:1d:af:
         c7:37:38:6f:b1:76:18:58:39:50:5a:da:68:98:57:a5:47:0d:
         1f:2a:5c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:17:29 2025 by rpki-client