Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
File:                     sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft (raw, json)
Hash identifier:          Thfmg34gQtW9npziM3bA3MCCJOU32BZRL9o4exlCJeQ=
Subject key identifier:   7C:36:B5:B4:20:F2:F3:92:D0:1D:66:6D:0F:4F:45:3A:69:20:51:36
Authority key identifier: B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60
Certificate issuer:       /CN=b0b5ae0cf27526243b2376fed90c160dd7382160
Certificate serial:       01992255E078508F9400ABB7E9F7FF8735D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
Manifest number:          0470
Signing time:             Sun 07 Sep 2025 04:01:17 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:17 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:17 +0000
Files and hashes:         1: sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl (hash: nyY2YLZx8Fu4M94oD5ARrEUTwgRZNIxqebK8S0XTmZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:e0:78:50:8f:94:00:ab:b7:e9:f7:ff:87:35:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b5ae0cf27526243b2376fed90c160dd7382160
        Validity
            Not Before: Sep  7 04:01:17 2025 GMT
            Not After : Sep  8 04:01:17 2025 GMT
        Subject: CN=7c36b5b420f2f392d01d666d0f4f453a69205136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:4a:9b:c2:b1:2b:db:c3:57:e3:3a:b5:b7:
                    04:cc:80:00:cb:01:de:70:be:84:f1:0d:0c:51:ca:
                    a7:c4:78:95:b9:46:c2:b6:61:5b:5c:ff:ac:61:a8:
                    2d:bc:46:8a:7f:1a:16:b6:5a:e0:4d:a8:dc:9b:31:
                    c7:c9:b1:54:21:76:ee:f1:43:f0:2d:51:d0:44:13:
                    15:4f:de:bc:32:25:89:ed:70:52:23:89:33:64:5d:
                    97:b6:5c:f5:ce:a2:70:9d:c5:d3:d0:53:58:8b:d3:
                    5d:fc:23:db:ad:5e:c5:32:b8:87:71:01:de:80:27:
                    f2:f4:a8:57:a5:eb:ad:c3:d4:2b:e4:1f:1a:c6:06:
                    3a:68:5d:e5:de:79:25:25:e7:45:25:f3:6f:ef:92:
                    84:a1:f3:cc:4a:25:d1:d2:38:e0:f7:77:02:61:2e:
                    de:08:87:88:71:63:d0:15:90:7e:06:36:ff:23:57:
                    c0:d8:14:f8:3d:c5:16:8e:8e:80:34:7c:0f:42:e8:
                    f1:e3:14:c6:50:2e:03:00:c1:c5:e7:aa:b8:52:89:
                    c7:ea:5c:ca:1d:de:90:96:e5:40:1d:dc:76:d6:f1:
                    b4:82:86:3b:4f:25:7e:83:de:50:f9:b0:fc:09:47:
                    82:3f:ee:18:b5:d6:3f:a6:5a:22:86:5f:78:e9:05:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:36:B5:B4:20:F2:F3:92:D0:1D:66:6D:0F:4F:45:3A:69:20:51:36
            X509v3 Authority Key Identifier:
                keyid:B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:de:00:4a:d0:24:ff:44:78:61:05:63:ff:c8:b6:bd:d4:c9:
         fb:63:1a:00:4e:9a:cc:35:07:4e:87:68:ae:6a:a1:65:89:2f:
         a4:55:98:bd:4c:d1:9a:2f:a3:dd:cc:10:8d:74:a5:29:fe:24:
         87:ad:6d:b4:e2:82:52:b5:dc:9e:5a:f0:9f:18:8a:64:29:b2:
         56:d0:3d:9c:22:c8:b2:ff:57:e2:ab:80:f5:a4:db:01:84:83:
         82:f8:c9:6d:eb:bf:70:7b:6e:33:7e:b3:11:c8:2b:ea:84:12:
         93:a3:f9:e1:06:e8:0e:3c:19:2b:1b:2e:72:b7:a6:2b:a5:eb:
         a4:d2:83:49:c4:85:88:9b:b6:74:84:e2:6e:f5:ff:65:09:ba:
         3b:bb:98:dc:d1:c4:80:d8:c9:68:8a:db:5c:24:3c:c2:59:bc:
         ca:60:b5:58:1a:d0:2b:d8:e6:16:13:10:a0:5d:d5:f3:ca:24:
         fd:5a:67:29:bf:84:f0:95:3f:4b:35:d8:b6:f9:21:59:08:c7:
         8a:0d:26:9e:f0:c2:11:ba:97:20:b6:fd:bc:fa:0a:fe:00:ad:
         83:31:84:23:f9:39:3e:38:7d:6e:46:64:48:0e:46:e7:6f:d1:
         76:ba:c6:e9:7b:fe:da:7f:c0:33:c5:f3:05:85:0d:0c:23:6d:
         4f:50:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:26 2025 by rpki-client