Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft
File:                     SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft (raw, json)
Hash identifier:          MriyWC78hy2GeFHogjyqyOa5wSwUEYgQ8Y13xTDB//w=
Subject key identifier:   7D:5C:4A:E2:65:E3:50:CE:4E:AA:B7:C5:03:CD:1D:93:09:AC:64:45
Authority key identifier: 48:F4:95:E2:EC:9D:07:FD:59:5D:22:B6:28:D3:75:6E:9D:8F:A7:63
Certificate issuer:       /CN=48f495e2ec9d07fd595d22b628d3756e9d8fa763
Certificate serial:       01991763CC7588C44FC3749C43DB3E321326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft
Manifest number:          DC
Signing time:             Fri 05 Sep 2025 01:00:40 +0000
Manifest this update:     Fri 05 Sep 2025 01:00:40 +0000
Manifest next update:     Sat 06 Sep 2025 01:00:40 +0000
Files and hashes:         1: SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl (hash: e1W9rbgWiaPB/VAoaG4FJ38jspStk38mMD+LoCjboi4=)
                          2: qZWsXw0hoWQJjbaPgRbw4RgNUcs.roa (hash: ZO3W12AHJk04EL5GeY7ebFH6eGQvrnx8GB8nEx/wAoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:63:cc:75:88:c4:4f:c3:74:9c:43:db:3e:32:13:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f495e2ec9d07fd595d22b628d3756e9d8fa763
        Validity
            Not Before: Sep  5 01:00:40 2025 GMT
            Not After : Sep  6 01:00:40 2025 GMT
        Subject: CN=7d5c4ae265e350ce4eaab7c503cd1d9309ac6445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:02:91:78:50:be:33:f9:a5:a9:f1:20:95:
                    a4:90:28:34:b9:a4:9f:8e:40:d0:c1:fc:79:94:8a:
                    2c:e5:3b:8e:81:31:42:a4:07:1c:7d:31:ff:ed:bf:
                    8e:d3:6c:62:55:29:f3:02:b8:cc:da:04:98:47:8f:
                    b8:32:33:b5:3b:4e:4f:b6:fe:69:28:ca:fc:71:50:
                    a1:5c:de:ea:19:6c:51:20:9d:87:a5:69:52:61:98:
                    f8:f9:c8:62:37:71:eb:06:7d:9e:32:66:b9:3e:ff:
                    02:78:c9:2e:30:b5:f5:5f:c8:f0:b4:22:59:64:9e:
                    4e:f4:c4:e8:ab:48:e2:66:14:8a:8e:3e:30:b0:17:
                    88:c9:29:81:0e:f7:98:11:59:02:e0:e6:58:e4:60:
                    74:1d:9c:a0:37:1f:0e:98:77:c5:12:27:b4:d2:4c:
                    a1:43:e0:79:ed:8a:08:19:c5:6f:4b:68:90:c6:fc:
                    bb:93:ac:8c:a3:87:39:34:2b:38:fa:cc:3e:39:65:
                    28:e3:ce:07:f8:a8:be:31:0a:db:c1:f4:a3:8d:35:
                    1e:2a:e8:d1:2e:57:d0:6b:a1:9b:ce:21:1e:65:44:
                    d0:b3:b0:f0:b6:25:86:98:bf:d1:ff:67:34:75:2a:
                    3e:3a:e9:a2:a5:a6:d2:41:45:e1:9d:c1:1f:2c:a1:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5C:4A:E2:65:E3:50:CE:4E:AA:B7:C5:03:CD:1D:93:09:AC:64:45
            X509v3 Authority Key Identifier:
                keyid:48:F4:95:E2:EC:9D:07:FD:59:5D:22:B6:28:D3:75:6E:9D:8F:A7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:20:b9:fe:e1:ac:f2:78:9e:1b:a5:b2:80:c8:e0:d0:95:c8:
         98:44:74:c9:1e:ac:cd:5a:b1:a5:b9:5b:72:04:ea:ff:fe:06:
         79:fa:ee:53:af:f0:e1:31:20:a8:58:81:63:2e:93:9b:61:18:
         14:f6:40:15:f4:2c:60:d6:75:73:26:cf:25:72:66:3b:20:5f:
         92:68:f5:a8:4b:7e:04:69:30:83:77:ed:16:e9:14:2a:79:37:
         db:cd:d1:a7:82:4c:39:e4:e4:e9:fb:4d:12:1f:c9:da:ba:3e:
         37:49:74:bd:66:d3:4e:04:bc:3e:58:88:9b:81:c0:58:dc:63:
         73:7d:93:27:fd:3a:54:c8:8f:63:e9:35:9d:bc:9d:04:54:21:
         7e:09:c8:e0:7c:d3:bc:5e:e1:76:81:ad:4a:70:9d:00:6e:f7:
         78:37:dc:d3:38:a2:0f:0e:ff:cc:9e:5b:ca:93:f8:d0:db:0e:
         1f:bf:49:aa:c7:e7:c5:94:9f:9d:16:3e:4f:89:25:d4:0b:f1:
         dd:47:b1:1f:5f:22:a2:59:80:15:ad:62:65:6b:14:a8:b6:67:
         7e:f7:77:b2:93:28:01:88:5f:a2:c2:c1:18:c9:a5:bc:78:65:
         80:e0:66:c2:ad:cd:a4:a5:e2:04:cb:7f:fe:60:8a:b7:8c:68:
         cf:07:84:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXY8x1iMRPw3ScQ9s+MhMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZjQ5NWUyZWM5ZDA3ZmQ1OTVkMjJiNjI4ZDM3NTZlOWQ4
ZmE3NjMwHhcNMjUwOTA1MDEwMDQwWhcNMjUwOTA2MDEwMDQwWjAzMTEwLwYDVQQD
Eyg3ZDVjNGFlMjY1ZTM1MGNlNGVhYWI3YzUwM2NkMWQ5MzA5YWM2NDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbQCkXhQvjP5panxIJWkkCg0uaSf
jkDQwfx5lIos5TuOgTFCpAccfTH/7b+O02xiVSnzArjM2gSYR4+4MjO1O05Ptv5p
KMr8cVChXN7qGWxRIJ2HpWlSYZj4+chiN3HrBn2eMma5Pv8CeMkuMLX1X8jwtCJZ
ZJ5O9MToq0jiZhSKjj4wsBeIySmBDveYEVkC4OZY5GB0HZygNx8OmHfFEie00kyh
Q+B57YoIGcVvS2iQxvy7k6yMo4c5NCs4+sw+OWUo484H+Ki+MQrbwfSjjTUeKujR
LlfQa6GbziEeZUTQs7DwtiWGmL/R/2c0dSo+OumipabSQUXhncEfLKHILQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1cSuJl41DOTqq3xQPNHZMJrGRFMB8GA1UdIwQY
MBaAFEj0leLsnQf9WV0itijTdW6dj6djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1BTVjR1eWRCXzFaWFNLMktOTjFicDJQcDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84ZDhkNGItMTYzYy00YmM2LWFlY2Et
N2RjYWJjMTZlYmFlLzEvU1BTVjR1eWRCXzFaWFNLMktOTjFicDJQcDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84ZDhkNGItMTYzYy00YmM2LWFlY2EtN2RjYWJjMTZlYmFl
LzEvU1BTVjR1eWRCXzFaWFNLMktOTjFicDJQcDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciC5/uGs
8nieG6WygMjg0JXImER0yR6szVqxpblbcgTq//4GefruU6/w4TEgqFiBYy6Tm2EY
FPZAFfQsYNZ1cybPJXJmOyBfkmj1qEt+BGkwg3ftFukUKnk3283Rp4JMOeTk6ftN
Eh/J2ro+N0l0vWbTTgS8PliIm4HAWNxjc32TJ/06VMiPY+k1nbydBFQhfgnI4HzT
vF7hdoGtSnCdAG73eDfc0ziiDw7/zJ5bypP40NsOH79JqsfnxZSfnRY+T4kl1Avx
3UexH18iolmAFa1iZWsUqLZnfvd3spMoAYhfosLBGMmlvHhlgOBmwq3NpKXiBMt/
/mCKt4xozweEnA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:29 2025 by rpki-client