Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
File:                     SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft (raw, json)
Hash identifier:          FqJ/0/emCs0lYVvYVm0XBGLfYj7Ebf5W9ytGJTjC9l4=
Subject key identifier:   D8:B4:D4:D8:F2:3B:D5:13:F9:91:8B:56:CE:39:29:4B:D9:27:BD:2B
Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
Certificate issuer:       /CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Certificate serial:       0199221EAAAA2036860B628E723612674613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
Manifest number:          13C9
Signing time:             Sun 07 Sep 2025 03:00:58 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:58 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:58 +0000
Files and hashes:         1: SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl (hash: w+xk9LM8HttQ75uVHkD4Y1iMDlRFGVh/2auXK5BBv3E=)
                          2: YcBJMOZnarbYkNxw905RMeZes7Q.roa (hash: FciS9wueWxFbzT7TwtYBQ+UslPbKowgQrJac0SFsxR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:aa:aa:20:36:86:0b:62:8e:72:36:12:67:46:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee
        Validity
            Not Before: Sep  7 03:00:58 2025 GMT
            Not After : Sep  8 03:00:58 2025 GMT
        Subject: CN=d8b4d4d8f23bd513f9918b56ce39294bd927bd2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:fd:cd:7b:0c:ca:40:34:f4:58:14:75:f2:
                    f3:c3:df:f4:6a:d6:b5:fe:37:18:ef:a5:fa:83:51:
                    3b:b4:7b:a4:ce:b0:6a:ea:87:b9:f6:43:d0:55:2e:
                    fc:aa:86:f4:c9:71:e2:fa:90:ea:14:1a:e5:03:cf:
                    4e:e9:d8:47:db:16:be:61:ff:6a:11:96:92:e6:63:
                    16:f8:ca:c7:54:7e:ce:17:2e:92:d1:eb:67:a8:44:
                    ce:f0:a3:27:88:5b:ff:44:3f:fd:9e:c2:47:ad:1d:
                    c9:d1:27:bc:46:91:9f:e6:4f:eb:da:0a:82:fc:49:
                    7e:56:47:76:bf:c4:b8:72:a1:f0:de:f3:41:8e:27:
                    1e:cd:d7:ec:47:a4:19:de:83:a4:5e:33:79:b1:0f:
                    02:4c:18:c5:13:a4:33:55:85:27:aa:e7:b4:a8:f0:
                    f4:b4:e7:43:6b:00:35:bf:78:05:39:36:04:10:bf:
                    78:b7:06:4b:01:b4:24:10:0c:12:13:fa:46:8d:d0:
                    22:c2:ef:e3:fc:bd:6d:51:bd:fc:7c:dc:15:57:81:
                    99:aa:13:48:08:a7:75:cf:fa:a7:f3:92:a2:cf:e2:
                    04:a4:c4:67:1a:89:41:9e:3a:a7:2c:6c:cc:69:f8:
                    e0:ff:70:7c:a3:61:f2:d5:60:26:11:a6:8f:34:cc:
                    40:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B4:D4:D8:F2:3B:D5:13:F9:91:8B:56:CE:39:29:4B:D9:27:BD:2B
            X509v3 Authority Key Identifier:
                keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:1a:55:46:68:6a:a0:5a:1d:f0:be:ae:39:6e:bc:b2:02:c9:
         b9:63:07:de:21:c1:e3:7f:e8:04:4d:40:6a:a6:e3:c0:a0:60:
         2a:34:9f:24:19:42:63:e7:15:b5:85:a9:9a:90:e7:86:01:78:
         3d:07:79:df:6d:f2:17:81:a0:3e:42:c9:9b:1e:2c:98:aa:69:
         45:8a:41:5e:8b:ba:b8:e9:a9:e0:6d:f5:b9:00:6c:24:5c:ac:
         f5:15:08:8a:76:b8:28:09:85:20:df:76:d3:61:c1:5b:4d:08:
         01:a5:e6:87:7f:8f:3e:f8:f1:bb:7b:1b:ed:e3:84:75:aa:07:
         c2:81:99:86:10:c4:f3:61:4d:03:2c:73:a8:e1:0a:a1:7f:d8:
         c0:94:4e:dd:89:0b:65:da:c6:af:5e:f4:90:42:4c:75:7d:29:
         4e:38:2a:a3:ef:ba:6b:9a:a7:65:19:95:95:14:fd:d8:99:21:
         04:d4:07:af:7f:12:c0:3c:f0:e3:65:7f:0b:06:3b:d6:24:51:
         ca:d2:7b:40:39:f2:ec:91:aa:41:3b:d5:70:45:a2:de:10:cf:
         c6:f9:76:be:c4:8f:ef:5b:01:01:94:c7:32:d8:3a:fd:69:c5:
         ee:90:5a:cc:38:50:c8:0d:2a:3b:cc:ee:24:78:37:2c:70:4b:
         81:a2:52:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:55 2025 by rpki-client