Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File:                     ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier:          s0IPn3PsNGGDZrgmjawDdtCvk+38VHDD0+EKy3nzPLw=
Subject key identifier:   58:23:A8:99:0D:28:93:80:1A:09:9B:6D:24:62:20:58:AB:6E:B6:59
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer:       /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial:       0198443EFF3586676802748F4EE7A9782014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number:          1603
Signing time:             Sat 26 Jul 2025 01:00:35 +0000
Manifest this update:     Sat 26 Jul 2025 01:00:35 +0000
Manifest next update:     Sun 27 Jul 2025 01:00:35 +0000
Files and hashes:         1: 6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa (hash: vR97+OeUXCCOXRpSdGW1/Y4Sp/FefDWwnMJQ9Jni4rk=)
                          2: BGdD8LDEAedO7LkZulNO0on6BtA.roa (hash: 5JKMac3WduBMBCnJzqk90kK6WJ4PSh8kMPbmsKHD+wc=)
                          3: Bs46C8G9Xvlaiic-U_vabhAJhco.roa (hash: 3sJguMlQk0GQr3vKdqIN2WvzrXMmi6x68HlsMnn5UuM=)
                          4: D5iZPHtIHYKSLlUoRqhHam3z4fw.roa (hash: iQxb5JVe2tNY+bNton8d20CXKpbqyN/eHLh+5EoqEaI=)
                          5: Rl9152Qvb_u7j8K6moXvloqlxuw.roa (hash: 7VxgCsm28hyqe3FM8bfzznGaU0K/XnvaJIfEnQlGvZI=)
                          6: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: cajOp8Djtws9c4PzUkiWH3tZHRc/Wd7D5zYpNlqfZpc=)
                          7: bkbeFY-foKd3saHxL2Ms4IvaWZI.roa (hash: Pb5Tubkcy9LxO6t4tf4Rf3p3iIfsYoVtUzwvSZ29zs0=)
                          8: h13V4d_ekYYA6uv0-jBvE7ljXgg.roa (hash: 64VEKJzZ2W6+uSgCoWExxMNGZCghiQUddh02slxkwlI=)
                          9: y4ffehEhJcuHU2W4RqSmsYxzQlg.roa (hash: stMeXk1cas0IbSmXY2+Qqlw++LVpL1MZDKLPTnxrrwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:3e:ff:35:86:67:68:02:74:8f:4e:e7:a9:78:20:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
        Validity
            Not Before: Jul 26 01:00:35 2025 GMT
            Not After : Jul 27 01:00:35 2025 GMT
        Subject: CN=5823a8990d2893801a099b6d24622058ab6eb659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:38:7a:77:bf:c5:01:55:ed:dd:f5:e9:8b:
                    b7:6d:95:30:f3:3d:19:b0:43:d8:00:f8:ac:03:55:
                    c5:0e:ea:aa:3e:ab:16:0a:85:41:60:9f:e0:9e:a1:
                    7d:49:ec:cf:20:93:10:a8:e7:bd:45:17:73:02:c3:
                    56:9d:2a:35:4f:33:2b:d9:e8:db:aa:c0:93:ba:eb:
                    8c:1a:c6:c7:e1:d0:c8:58:7f:8f:21:12:0b:15:6a:
                    1f:33:b0:6b:7b:a9:ff:98:c8:0d:e9:c1:43:41:61:
                    75:8a:89:4b:52:fd:6b:c4:35:ad:c8:c3:b1:bf:54:
                    4a:58:ba:e2:53:3e:31:b1:ea:68:22:08:11:cf:f4:
                    e0:3b:53:40:ed:6d:74:c7:38:3c:82:c7:a1:dc:4b:
                    6c:2d:82:67:3b:f1:a6:9b:4e:3a:b6:b3:2d:ff:27:
                    a9:91:92:96:bb:ab:35:b5:3e:cd:0b:ed:ff:63:54:
                    b2:51:00:ed:2a:2a:f3:20:2d:e9:34:a3:70:df:55:
                    68:b3:06:44:e3:49:ab:5c:d9:bb:ac:a5:31:3c:37:
                    47:af:cf:e1:43:24:a5:83:9d:8d:97:60:12:70:41:
                    17:4b:6a:86:85:31:d0:89:44:03:28:b0:4d:c6:3a:
                    86:f4:0c:e9:6d:16:01:f3:db:e4:6c:47:9d:17:1d:
                    8f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:23:A8:99:0D:28:93:80:1A:09:9B:6D:24:62:20:58:AB:6E:B6:59
            X509v3 Authority Key Identifier:
                keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ad:fb:f0:79:ff:82:9d:b5:0f:f3:8e:a3:ef:12:0f:8e:5a:
         7f:c2:a9:42:2e:7a:77:09:37:dd:7f:7c:e5:0b:e0:94:01:22:
         59:b1:ee:c4:f8:63:c3:5a:55:a6:7f:dd:56:12:ad:9f:62:a6:
         0a:e2:c0:5a:ee:3e:47:37:c0:25:19:a3:90:3a:15:21:7b:e3:
         98:94:82:88:72:72:52:f5:ac:11:2f:60:2b:3a:e6:e2:26:81:
         e1:b4:dd:d7:c6:85:ee:30:26:89:ec:f1:e3:2c:41:42:53:f1:
         57:aa:ce:56:f7:72:e0:10:f9:46:54:40:50:d6:c3:f3:6c:43:
         46:a3:d7:bd:50:c7:92:c4:ed:68:cf:04:bf:ea:ab:cb:0c:95:
         98:c7:e9:6d:f5:bf:89:c4:12:b5:ae:37:41:7f:c3:bd:ae:43:
         d9:e6:dd:11:69:9c:33:79:bf:22:d2:f4:95:67:45:4a:0a:b2:
         1a:f2:96:7f:45:91:03:10:85:19:d9:b8:58:e2:c4:b4:15:a1:
         e6:6d:f6:f8:57:0e:3e:e3:6d:4e:ae:63:a8:69:0e:ba:0a:ff:
         94:84:ef:b4:c5:d9:cc:b8:27:f1:bc:73:a7:03:fd:a9:dd:ac:
         b0:81:46:69:e7:8a:2f:24:44:17:38:e5:ab:a5:2d:e8:08:37:
         98:b5:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:10:07 2025 by rpki-client