Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
File:                     _SYdRTGeg3UYdDbaRL9bmtsESn8.mft (raw, json)
Hash identifier:          r1f+lYHtYu8/MurOFKYWqe3VJ107HXBlYALp/dJk6Eg=
Subject key identifier:   30:4B:77:CA:11:B7:B4:2A:CD:61:E5:13:E1:87:FF:3E:DD:64:27:4C
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       019935A4F926741A2083F4206F3261E81676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
Manifest number:          1681
Signing time:             Wed 10 Sep 2025 22:00:27 +0000
Manifest this update:     Wed 10 Sep 2025 22:00:27 +0000
Manifest next update:     Thu 11 Sep 2025 22:00:27 +0000
Files and hashes:         1: 32tWRXd7sO9k5rDBN5-KceN_jmg.roa (hash: yWKy4xisA4DT9Zfa2KiXtKt3hApiSXHoCFqZyGn6vOg=)
                          2: ElC-6BWKIscUitjfAAuE6V-GosE.roa (hash: puexHHhEWAY8GemHhcMwArliXKfDZpEmPaNZcjyIMY4=)
                          3: GBGBlAFSzLuNFgNx2x_0D_5DQmg.roa (hash: NZPhbRaB5eM/voPBrZEMV3C9aUgwFS3iIgWGfN4cNI0=)
                          4: IUfsA9WUIh_drsK7CEvgRpo35z0.roa (hash: +jKjtuQptzEAVzSdULkJ5A8HWf8sGmcVbiqzXEqShbg=)
                          5: _SYdRTGeg3UYdDbaRL9bmtsESn8.crl (hash: xDpuNA39WxY9IL2rEqr2HD6F3l7Ul9+ur5DpeiS6xbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:a4:f9:26:74:1a:20:83:f4:20:6f:32:61:e8:16:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Sep 10 22:00:27 2025 GMT
            Not After : Sep 11 22:00:27 2025 GMT
        Subject: CN=304b77ca11b7b42acd61e513e187ff3edd64274c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:f3:ce:20:c3:53:f8:0c:39:64:e2:00:45:
                    be:96:10:46:d6:5b:39:1e:9c:8f:18:50:99:a1:78:
                    56:24:32:7c:cd:9a:42:da:b7:e8:dd:1e:44:6e:22:
                    49:6b:fc:ff:31:7e:e4:6b:97:fd:8a:fb:20:59:d2:
                    77:81:77:ea:44:79:3b:7d:82:96:3d:50:7f:ce:fe:
                    ad:76:a4:2a:37:5f:33:32:76:0d:d0:9f:4a:d5:c1:
                    c2:a2:27:d5:9a:24:7e:3f:dd:57:49:10:a1:a7:c8:
                    87:e8:6c:6b:5d:19:43:20:67:50:54:35:fa:97:6f:
                    f9:d1:96:00:88:4e:ae:67:20:d4:09:4c:8b:9b:d0:
                    f1:bf:32:14:2c:96:4b:99:fe:9c:10:2a:e1:fa:ba:
                    f3:03:03:7d:ab:f3:53:9c:90:9b:34:44:93:19:75:
                    39:3e:65:0d:6b:3d:6d:b0:aa:c6:f0:4d:30:3b:5f:
                    5a:62:d8:34:8a:1a:e1:49:de:cb:4a:e5:c7:bb:24:
                    49:01:f5:1e:3c:86:d6:5e:d0:f1:43:45:e3:8d:01:
                    5d:95:27:78:69:e7:05:ba:14:20:45:ab:90:aa:5d:
                    de:8d:22:11:7c:1b:62:90:9d:ef:27:00:f6:dc:7c:
                    88:47:6c:9b:d6:f7:ea:bf:da:dc:3d:06:40:59:c8:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4B:77:CA:11:B7:B4:2A:CD:61:E5:13:E1:87:FF:3E:DD:64:27:4C
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:0d:f0:7d:40:a5:cc:06:04:c6:3c:e2:6e:ca:56:2c:bc:56:
         11:11:83:e2:b4:af:1d:ed:97:d9:70:e6:08:a3:5c:52:7d:b2:
         2f:7a:da:60:48:99:ea:1b:25:9b:27:84:63:b5:85:36:b9:49:
         c5:8c:3e:12:7e:00:f0:a1:be:2a:e9:f3:36:14:46:15:dd:64:
         9c:dd:8c:56:9f:01:3e:40:cb:55:0f:0c:74:81:c3:0c:29:47:
         70:ff:0a:ac:31:7f:9c:f6:e8:7b:a3:05:b1:fd:29:b3:08:ab:
         ba:49:fc:d4:05:38:68:9c:88:3f:c2:3f:f2:07:79:5b:33:b9:
         ca:09:5e:59:fe:f2:a4:13:42:89:6c:2a:fd:8a:8c:b5:43:3b:
         ca:0c:de:ab:04:ae:a9:67:b8:54:74:b0:b3:67:f1:b1:90:10:
         d3:1d:f4:e6:52:0c:ce:63:0e:e6:6d:4b:4f:ce:5c:e3:07:3b:
         90:f8:da:a7:7e:c5:c7:0b:52:4c:02:99:14:91:0b:cd:b5:c3:
         d0:59:51:3f:e0:bd:01:2e:12:5b:cc:c5:f3:fd:f2:09:bf:ac:
         37:3e:e6:85:5d:60:fd:98:5e:1c:38:23:e0:a1:fd:5f:70:c4:
         2f:43:3f:5b:10:c0:06:15:03:72:96:4d:5a:c4:f5:2e:f8:e9:
         e9:f8:9d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:18:21 2025 by rpki-client