Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
File:                     sUiB-j51o4Uc9wQZE1q91SnS9oI.mft (raw, json)
Hash identifier:          rW0ksx6eZYZZ8ruAUDQC2cdgRmx/hGdTigphEyB7AZg=
Subject key identifier:   3B:80:93:1B:10:62:C3:BC:D1:9B:EA:8A:10:72:AF:3C:A5:F0:65:6A
Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
Certificate issuer:       /CN=b14881fa3e75a3851cf70419135abdd529d2f682
Certificate serial:       019922C30221904AD1F30BA6A2C94FF87A1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
Manifest number:          1675
Signing time:             Sun 07 Sep 2025 06:00:29 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:29 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:29 +0000
Files and hashes:         1: VTdOF6vt4DJ2gAE9-rspP9YAtwY.roa (hash: 1siesNie5rYzgdzSW4S1a0o9vqGP6HXUGewmb9Xhzlk=)
                          2: sUiB-j51o4Uc9wQZE1q91SnS9oI.crl (hash: DCLfQcjtl6jy8E8TfCXk+EwWaZiHzMIMWSNHa1htmKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:02:21:90:4a:d1:f3:0b:a6:a2:c9:4f:f8:7a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682
        Validity
            Not Before: Sep  7 06:00:29 2025 GMT
            Not After : Sep  8 06:00:29 2025 GMT
        Subject: CN=3b80931b1062c3bcd19bea8a1072af3ca5f0656a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:86:ab:6d:0b:e0:52:7a:ee:12:4c:5f:1f:
                    f3:62:51:ff:88:e9:1e:da:91:e7:30:46:d9:a5:46:
                    68:7a:66:da:3a:d8:ae:2c:14:c9:07:a0:41:c2:ee:
                    db:33:10:76:94:b1:6c:d0:50:cf:d0:69:9e:5a:dd:
                    4b:87:db:05:2e:11:12:07:b7:f8:80:f8:fc:80:7c:
                    b5:30:f6:ba:c3:5e:1f:3e:5d:4b:1f:07:37:c8:4c:
                    f0:9d:d8:f7:fe:2d:02:d9:9c:0d:31:7f:25:6f:ad:
                    20:cb:23:de:c1:83:5a:d0:40:ff:ce:ce:0a:80:bf:
                    d3:bf:3b:97:d1:cd:71:00:09:85:10:63:13:80:0b:
                    b9:8a:22:64:9e:96:7a:19:db:8b:7e:12:3a:49:1a:
                    e8:cb:e0:72:41:77:43:22:5c:bb:2d:2b:ab:8b:b8:
                    db:a1:e2:78:a7:f3:ff:b1:04:27:2d:f5:bd:af:1c:
                    5e:17:45:db:6b:7c:a8:9e:83:9f:be:21:82:f2:eb:
                    a8:c3:d2:51:e5:c3:56:c8:dd:bb:a2:86:a6:e1:33:
                    92:81:d4:06:bb:d1:95:31:42:a8:c3:e1:bd:0b:b5:
                    93:20:e7:d1:da:88:22:56:c1:b3:30:55:67:cd:b0:
                    ec:6d:af:b5:54:62:0a:00:24:26:43:ef:77:0d:24:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:80:93:1B:10:62:C3:BC:D1:9B:EA:8A:10:72:AF:3C:A5:F0:65:6A
            X509v3 Authority Key Identifier:
                keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ee:9e:b8:bb:fe:89:22:5c:5e:a2:4c:68:53:c5:e4:de:08:
         dd:f6:82:35:23:66:1d:25:2c:ab:5a:06:65:2e:65:11:76:54:
         1a:93:4c:cf:9b:13:51:b3:75:9c:bb:bf:e1:8c:4a:99:e9:f9:
         af:b0:b0:0f:d4:3a:b8:56:52:0f:7a:02:bc:88:74:79:d8:29:
         17:32:34:c7:bc:c5:e8:96:71:d6:f2:27:42:30:ed:d2:e1:cd:
         98:ca:30:df:fc:76:c7:10:55:f7:0d:98:f1:0e:95:10:b4:ea:
         b8:03:5a:2f:69:49:68:19:1d:35:18:10:4f:f9:b5:53:e9:a8:
         d4:0e:70:7b:f7:72:ac:31:36:68:04:32:14:42:45:4b:a9:d8:
         7b:7d:10:51:bf:0b:1d:a7:dc:dc:b0:95:88:30:21:bb:cf:66:
         cf:8b:b7:c6:4f:ba:1b:e2:7b:7e:2d:49:f4:16:f9:b4:66:f6:
         4e:10:dd:f2:55:2b:2c:6c:27:21:a2:9a:67:c9:d2:74:d4:57:
         ce:6a:60:d3:0a:d5:f6:ee:0a:1c:96:5e:04:b6:91:04:2b:5e:
         8b:eb:99:28:19:b9:62:d8:bd:0d:31:0d:76:b1:1a:ab:13:39:
         7f:11:14:a5:da:f9:ef:f0:ed:a3:e7:d2:44:01:9c:0c:ed:82:
         30:1e:d0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:13 2025 by rpki-client