Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
File:                     sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft (raw, json)
Hash identifier:          GgH640abmcQgU/Ny51yKlGCzd5Qaryngn2aeKY3wmmw=
Subject key identifier:   41:BE:BB:EA:99:0B:82:DC:19:32:5D:23:CE:1E:0B:B6:20:52:0F:6A
Authority key identifier: B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
Certificate issuer:       /CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Certificate serial:       019849D2C64E250CB8D8E1DEDB79F0C6F629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
Manifest number:          087C
Signing time:             Sun 27 Jul 2025 03:00:06 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:06 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:06 +0000
Files and hashes:         1: hyhfndoa_Z24zyoZ7ygYaeGIqPw.roa (hash: 08nYzAa42CtGg2k7nkGWsd8V/SDqafxamCeCjRVW6Yw=)
                          2: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl (hash: ondL+s3ZYVd2i6SdcajLZnnC7NHN74VhZGgPV/jOejQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d2:c6:4e:25:0c:b8:d8:e1:de:db:79:f0:c6:f6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
        Validity
            Not Before: Jul 27 03:00:06 2025 GMT
            Not After : Jul 28 03:00:06 2025 GMT
        Subject: CN=41bebbea990b82dc19325d23ce1e0bb620520f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:6d:cb:a0:36:1f:24:a4:b5:b5:5d:34:c2:
                    21:cc:f1:d6:24:93:20:ee:84:b8:2b:04:67:9b:a4:
                    e8:d1:e3:dd:38:25:02:87:e8:af:d5:58:3e:dd:25:
                    41:8a:cd:ef:82:34:30:e2:c4:17:36:8e:cb:58:24:
                    de:85:3c:83:90:67:a2:27:60:f7:db:b4:4d:07:c4:
                    d1:60:ed:2f:13:ad:05:62:fb:3f:49:4c:60:b8:fb:
                    8b:fa:c3:67:a6:31:a8:d6:4e:4c:e2:2d:26:56:8d:
                    b5:d6:05:d7:ac:0f:ca:78:46:2f:4a:c3:f3:ca:ba:
                    dd:29:c7:63:98:35:f0:5e:88:77:d3:0a:64:a1:7e:
                    49:e1:f4:54:c6:2f:29:f4:7d:2d:ca:ec:09:a6:18:
                    97:da:bb:57:59:4c:4e:03:96:6e:e9:4f:6a:e1:94:
                    68:dc:71:da:02:2a:9c:1e:06:a0:f7:67:5d:36:76:
                    cc:15:c7:1d:51:d6:b5:70:9d:b7:98:1a:c1:f5:d5:
                    26:7d:bc:cd:c5:84:c4:1f:a5:6c:e3:11:dd:91:1c:
                    00:a0:54:40:7d:e7:eb:b7:78:d0:6f:95:f5:22:c7:
                    fd:7c:0f:24:7f:58:15:8c:59:5c:b7:e9:f6:12:75:
                    ef:de:78:60:68:9e:cd:0a:ad:20:06:2d:e7:8e:66:
                    a3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BE:BB:EA:99:0B:82:DC:19:32:5D:23:CE:1E:0B:B6:20:52:0F:6A
            X509v3 Authority Key Identifier:
                keyid:B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e8:6d:50:75:12:b6:0e:72:8b:85:38:c1:cb:0e:b0:97:ce:
         d7:b3:ab:c7:5c:38:81:36:23:30:8d:82:db:1c:e8:c7:20:ca:
         9a:a7:98:45:76:f7:4b:48:e0:d4:c1:0d:fe:55:b1:5e:56:c0:
         9a:b5:04:d5:2c:6e:02:30:ce:90:7a:72:92:a9:06:62:f1:de:
         d2:9d:54:fc:79:87:15:18:99:40:4d:f4:52:6b:be:bb:15:1e:
         12:85:12:41:75:4e:37:41:d5:64:e6:56:e2:85:8a:60:0b:39:
         9b:01:ab:c8:18:44:36:bb:b1:1d:73:5d:08:9a:65:2b:18:0b:
         4c:f2:70:41:5b:5d:91:97:9f:1d:8d:49:a2:54:75:ec:bc:48:
         d5:b6:00:6b:8c:52:2a:31:64:4d:26:ad:6d:89:d2:15:c6:0a:
         15:c7:b9:0f:61:68:40:77:56:08:2b:69:16:2b:93:cc:41:23:
         8a:61:9d:cb:a1:e7:51:dd:be:88:b9:6b:1f:f1:08:30:31:89:
         c7:8c:75:f5:ca:d4:78:5f:d5:23:5a:51:fa:a0:b2:c6:71:cc:
         7c:25:c3:46:87:84:ea:d9:1f:70:69:34:f8:51:52:31:f8:24:
         07:23:66:cc:27:a2:f8:e7:e9:6f:7b:e3:95:a0:ef:a5:b9:62:
         14:ea:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:17 2025 by rpki-client