Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft
File:                     SVx0J6902pRU8eKHwW-aXzp3gx8.mft (raw, json)
Hash identifier:          t8CSu7xSvdok/3n96ciGR0B+EfK8alWMrxlbXdK5OBY=
Subject key identifier:   3F:7C:23:C5:19:A8:83:98:AC:E7:75:EF:B3:9B:49:BB:44:5A:63:E2
Authority key identifier: 49:5C:74:27:AF:74:DA:94:54:F1:E2:87:C1:6F:9A:5F:3A:77:83:1F
Certificate issuer:       /CN=495c7427af74da9454f1e287c16f9a5f3a77831f
Certificate serial:       019921B246390438832F81D2852F7125EED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft
Manifest number:          1479
Signing time:             Sun 07 Sep 2025 01:02:35 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:35 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:35 +0000
Files and hashes:         1: SVx0J6902pRU8eKHwW-aXzp3gx8.crl (hash: UqsNc+SQqLJi22WIV3QEY+6YP9eVuUupAm8fDOdAdKs=)
                          2: yGC5sIb3srVUEq8Qa2rFq7sGg3Y.roa (hash: C8hFdKgoa42ll+QkfetAIjLLM5z2fVcdANN2iM3elfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:46:39:04:38:83:2f:81:d2:85:2f:71:25:ee:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=495c7427af74da9454f1e287c16f9a5f3a77831f
        Validity
            Not Before: Sep  7 01:02:35 2025 GMT
            Not After : Sep  8 01:02:35 2025 GMT
        Subject: CN=3f7c23c519a88398ace775efb39b49bb445a63e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:b7:39:71:01:dd:b4:2a:22:e0:34:9b:a1:
                    32:af:56:c5:e9:2f:02:b6:e9:4e:61:23:87:3f:2b:
                    c2:db:0e:aa:ad:09:c4:f2:4a:4d:a5:35:66:c6:6c:
                    d5:db:66:c6:25:99:be:76:60:cb:c3:3d:c0:ef:12:
                    8b:e1:64:56:81:4b:6f:eb:5a:a0:84:f4:13:da:68:
                    c8:8f:c0:f3:32:e0:fc:50:cf:20:6c:5d:2b:cf:50:
                    9e:81:a3:46:fe:a4:16:ac:bc:27:c3:78:b1:68:ca:
                    61:01:2a:32:c6:1f:02:23:42:d6:c6:11:0c:36:d4:
                    64:14:8e:5d:f0:d4:29:ad:3e:61:f7:be:36:ae:a2:
                    f5:81:f8:ec:e1:7f:f1:87:03:c7:3d:bc:92:00:d8:
                    6d:b9:cf:d0:96:39:35:90:43:7f:2e:7d:9f:22:f8:
                    df:12:46:9b:a9:81:64:7f:40:08:19:23:5f:b5:57:
                    8f:f0:3b:81:fd:7f:1a:65:dd:2e:74:b7:4f:8a:e5:
                    05:1a:51:98:6f:fb:b6:af:e5:cf:75:32:9e:d3:77:
                    05:08:f2:23:01:d4:0e:f4:b4:f1:18:81:f1:6c:8b:
                    4c:4e:d1:ce:5b:89:e2:c9:73:28:68:0b:5d:dc:da:
                    71:93:b5:d1:62:dd:cc:00:16:2c:da:d2:c7:b6:3e:
                    e5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7C:23:C5:19:A8:83:98:AC:E7:75:EF:B3:9B:49:BB:44:5A:63:E2
            X509v3 Authority Key Identifier:
                keyid:49:5C:74:27:AF:74:DA:94:54:F1:E2:87:C1:6F:9A:5F:3A:77:83:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2e:27:3c:be:29:9f:5f:bf:c1:0d:83:21:ab:c5:aa:1d:ce:
         dc:9f:e6:a0:bc:09:31:00:63:d0:53:9e:c1:88:77:fb:6c:a0:
         33:fe:21:5f:ff:92:17:85:c2:26:47:8b:c9:7c:2b:cf:01:0a:
         97:5d:35:16:e1:ed:e2:f8:2c:d9:70:82:d2:8a:3a:5f:74:0c:
         6d:f0:4f:34:bb:a3:31:0d:dd:a8:57:9d:04:15:4f:d4:28:2a:
         9c:9f:b3:34:2c:30:ee:cf:c7:c2:e9:69:68:da:0b:dd:90:e6:
         09:4b:80:49:50:39:99:9c:b2:b2:5d:f0:00:8d:81:6c:ca:d6:
         65:8f:37:03:bb:45:47:88:48:98:fb:2d:87:3c:29:17:8e:43:
         41:08:e6:1b:31:06:b6:7c:e9:db:e7:ac:17:24:01:e7:4c:86:
         e5:85:a2:6d:d7:e7:5b:47:cf:0b:20:e0:71:b5:27:9f:83:df:
         1c:e6:18:77:9a:2f:0b:3a:d9:a3:cf:39:f8:45:4a:df:07:91:
         ca:9e:3e:62:3d:b2:18:e1:89:0a:85:10:72:62:26:cb:a9:fa:
         3f:dc:f1:09:3b:9e:44:05:e8:dd:a7:a8:2d:39:af:d8:0a:91:
         eb:31:50:28:c9:02:b7:ac:77:1f:f1:08:16:e4:cd:77:90:68:
         f6:74:9d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:04 2025 by rpki-client