Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File:                     S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier:          oCZmCICKx2/oFKrJr0sDgXxz6zqnUwsHTuOS5fcHPoc=
Subject key identifier:   F3:72:8F:14:B9:6C:08:55:77:B0:1A:48:44:A9:9D:F4:23:32:12:56
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer:       /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial:       01994B88115CC7E69C2BDC1595294D423D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number:          16A0
Signing time:             Mon 15 Sep 2025 04:00:32 +0000
Manifest this update:     Mon 15 Sep 2025 04:00:32 +0000
Manifest next update:     Tue 16 Sep 2025 04:00:32 +0000
Files and hashes:         1: 1rcq_o200rsmi-REU7sJaiqQFHA.roa (hash: bYmvDflVlbyI3MswkBtNAMjVL4ovj4FMhccHYAbAe2c=)
                          2: IX3hpyLIN4WhHMana79sWPUI4X0.roa (hash: rCe6IZNZSjHSC1lZ+kxokCfhrF01W07U8ihTWZLrEJU=)
                          3: IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa (hash: HjUM6VN/VoF4kqrbPTW3NPTllgIWYUt/BGC2HsAIgNk=)
                          4: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: H0kPZy7peWKIBog7fWCatT5E9hzySy1Wa0Nq11ciA+Y=)
                          5: eiTWJKHAu5xriuE2QvW7x5YIzOU.roa (hash: s87ilBuA43+J3H8PQ6AAVQPStmwyHIxSZQ+1oBAYKOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4b:88:11:5c:c7:e6:9c:2b:dc:15:95:29:4d:42:3d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
        Validity
            Not Before: Sep 15 04:00:32 2025 GMT
            Not After : Sep 16 04:00:32 2025 GMT
        Subject: CN=f3728f14b96c085577b01a4844a99df423321256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:6c:31:1e:37:ad:d7:d6:9a:30:05:47:9d:
                    8d:74:8f:db:76:56:69:57:de:63:67:2b:b6:b3:68:
                    44:ae:fa:40:48:09:4d:a9:9b:1a:76:c5:12:9d:33:
                    f5:78:b6:a5:09:a9:01:40:f7:8c:6a:72:07:d9:57:
                    93:5a:ef:f8:20:5c:6c:03:a5:b1:1f:00:c6:43:b1:
                    a9:36:dd:a8:48:d0:40:be:ec:f3:31:7c:a4:8a:17:
                    3b:87:1f:31:a0:36:04:ed:90:b3:29:3e:02:4e:c4:
                    24:7d:65:5e:49:48:33:82:e0:26:4c:f3:4a:c0:ef:
                    06:61:a7:11:06:7d:bd:f1:ac:52:14:48:c7:b6:0f:
                    64:9f:64:59:76:70:75:5f:5c:28:ed:d9:fc:be:d1:
                    63:a6:81:2c:33:6b:b7:f5:6e:72:4c:c8:d0:a8:a2:
                    c6:f4:05:9d:ef:05:5e:ae:af:01:03:28:55:4f:01:
                    a1:92:5f:67:c2:99:ec:13:b7:bd:ea:2c:f6:e6:2b:
                    4c:bd:2d:98:60:3a:26:15:6b:3f:ba:2b:6e:d1:eb:
                    4e:4e:1e:ba:eb:e8:2a:7a:16:f1:cd:5f:d0:83:00:
                    83:0c:fc:da:ec:7b:40:d3:4b:a9:6b:3c:f1:03:18:
                    9c:30:a3:1d:ca:46:0f:e5:03:34:58:48:79:bd:0a:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:72:8F:14:B9:6C:08:55:77:B0:1A:48:44:A9:9D:F4:23:32:12:56
            X509v3 Authority Key Identifier:
                keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e6:80:24:a1:a9:51:68:f6:b9:e2:f8:30:e0:ca:f7:08:97:
         2b:08:94:c4:06:d5:42:23:7c:b8:ca:39:86:5d:3c:6b:c5:d7:
         44:07:02:36:4e:19:b5:cd:bb:91:85:3e:16:6f:d9:74:91:59:
         9a:96:e5:3d:2d:75:0c:9c:9c:0a:8a:42:d1:46:f3:11:72:a3:
         10:d6:72:c0:14:1f:e9:c0:2a:5b:f1:f2:b3:44:54:26:ac:97:
         55:5a:2d:ee:2b:cd:d8:3f:14:64:ae:a4:25:39:89:ca:d2:e0:
         40:de:bf:f3:e8:07:42:1c:00:9a:f2:ba:d7:01:3f:d8:55:20:
         2b:32:0b:a8:19:71:21:b7:d0:f8:57:5f:51:27:96:aa:db:28:
         b1:48:a7:5b:ae:c7:1b:be:56:12:79:2f:ad:75:27:b5:c4:81:
         39:e0:85:b3:ae:68:d2:d9:8b:55:cb:0d:1d:4b:bf:ee:fe:a8:
         2d:6b:eb:d8:a8:b8:64:c1:fc:2f:c4:c4:bb:f8:79:93:49:6e:
         f4:34:09:dc:cb:2e:c3:bf:17:d1:89:ad:69:51:41:0c:39:4a:
         11:06:cb:37:94:78:07:64:df:18:f8:3d:f5:bf:cb:02:a2:c0:
         a6:2c:08:3a:3c:61:62:b8:61:f9:e9:a7:e5:53:85:2e:ef:65:
         00:c0:81:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 11:26:09 2025 by rpki-client