Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
File:                     SCc0v_AaPOqzULy4SyX3O-gp328.mft (raw, json)
Hash identifier:          rFycsGzGN5IFg9Fk6Ug7nq2JvMhcGLT3JQ7dVZ3FOHI=
Subject key identifier:   92:07:B2:2A:1C:67:FE:F9:01:DB:58:67:44:E0:E3:57:53:10:91:FB
Authority key identifier: 48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F
Certificate issuer:       /CN=482734bff01a3ceab350bcb84b25f73be829df6f
Certificate serial:       019922C392B7F4FBC83C7C1E7D749867E2B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
Manifest number:          B9
Signing time:             Sun 07 Sep 2025 06:01:06 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:06 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:06 +0000
Files and hashes:         1: FsbQ_xqqVCKA7JO_7TNtMcs5uDc.roa (hash: 8oLtr32VZblrtItn64+IZffUBFTx5wRyhUTx6ephSaw=)
                          2: SCc0v_AaPOqzULy4SyX3O-gp328.crl (hash: s3IibkUGEDJV39inUWpq5HC91RVUBIY4MKpvZAQxf0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:92:b7:f4:fb:c8:3c:7c:1e:7d:74:98:67:e2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482734bff01a3ceab350bcb84b25f73be829df6f
        Validity
            Not Before: Sep  7 06:01:06 2025 GMT
            Not After : Sep  8 06:01:06 2025 GMT
        Subject: CN=9207b22a1c67fef901db586744e0e357531091fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:45:8e:00:8c:3c:49:aa:8b:66:f1:e1:47:c6:
                    ce:bb:de:a1:f5:63:d0:5a:8c:f5:e7:93:1d:4a:c5:
                    a8:05:c8:6c:7d:ae:6b:00:66:d0:ea:cf:17:26:34:
                    06:13:b9:4e:b8:43:0d:4c:e3:d4:92:8b:e3:cf:2d:
                    8a:98:d4:06:72:15:9c:a0:8e:d7:78:93:4a:d1:b9:
                    79:91:ea:7f:e7:bf:aa:2e:4e:c3:59:2b:40:88:f1:
                    8f:9c:41:f3:4b:51:c8:28:72:4b:35:81:d3:4b:e6:
                    54:68:8b:20:71:ff:8a:9d:f1:9c:f6:8b:b7:ee:17:
                    1b:f2:84:b1:e5:7b:b3:1a:fc:d0:5e:aa:53:94:18:
                    2a:7c:17:74:59:78:70:4e:d2:72:3a:cc:1e:f7:a8:
                    fe:a2:8b:a7:3e:a8:67:e0:ab:8c:d4:70:9c:4b:3d:
                    c2:12:58:46:4d:06:47:99:88:9b:b1:6c:5b:f2:65:
                    c5:19:47:56:43:be:c7:3c:a7:cd:96:06:7c:f1:ca:
                    71:27:21:81:a2:4f:33:bd:40:c0:0b:d1:f8:4d:9b:
                    a5:d8:10:e6:0a:c1:13:12:77:04:46:0c:71:0c:67:
                    70:39:52:88:4c:dc:ff:cc:78:20:81:b9:91:84:54:
                    6d:49:c2:ee:e1:93:13:9b:01:24:2a:fd:48:c4:6d:
                    b9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:07:B2:2A:1C:67:FE:F9:01:DB:58:67:44:E0:E3:57:53:10:91:FB
            X509v3 Authority Key Identifier:
                keyid:48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:83:03:22:7b:c8:93:67:ac:5a:f9:d9:c2:f1:cd:7e:de:b6:
         e2:7f:5f:63:1e:db:9e:0e:97:d3:b0:02:c2:78:c2:df:51:11:
         e9:a9:30:97:d4:0a:4c:ec:91:a9:4e:cb:99:6e:31:aa:08:6c:
         79:f4:98:02:39:45:9d:a8:38:42:2d:d2:45:5e:47:87:a7:9f:
         53:e8:12:d7:06:a3:ec:7c:6e:78:cb:22:da:b4:24:32:f0:a1:
         e8:aa:22:fe:5c:13:7b:59:7b:f6:b2:d4:40:e6:65:63:63:d7:
         14:e6:f6:dd:e5:9a:9c:ba:38:47:74:f5:4c:73:24:80:01:83:
         23:a4:3e:e9:6d:2d:e2:cb:07:39:f5:a0:4a:71:db:fb:95:44:
         d0:47:a3:2f:dd:76:16:e2:6e:87:99:54:f3:aa:b4:48:6e:1e:
         c4:11:82:6b:e4:5d:c0:b2:50:ee:c1:54:aa:4a:2d:62:cb:08:
         3f:e0:86:3f:68:b9:37:dc:08:4f:97:b6:00:37:85:ed:3a:48:
         69:a4:58:66:3b:db:98:ed:19:fb:cd:33:f4:10:5a:01:7d:07:
         5b:09:3d:41:3a:07:2d:94:e7:63:83:ca:10:41:17:29:5e:4f:
         af:f5:72:b6:ef:8a:f1:ea:ee:16:c5:bb:b1:a7:aa:6e:27:c7:
         66:78:a8:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw5K39PvIPHwefXSYZ+K3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MjczNGJmZjAxYTNjZWFiMzUwYmNiODRiMjVmNzNiZTgy
OWRmNmYwHhcNMjUwOTA3MDYwMTA2WhcNMjUwOTA4MDYwMTA2WjAzMTEwLwYDVQQD
Eyg5MjA3YjIyYTFjNjdmZWY5MDFkYjU4Njc0NGUwZTM1NzUzMTA5MWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10WOAIw8SaqLZvHhR8bOu96h9WPQ
Woz155MdSsWoBchsfa5rAGbQ6s8XJjQGE7lOuEMNTOPUkovjzy2KmNQGchWcoI7X
eJNK0bl5kep/57+qLk7DWStAiPGPnEHzS1HIKHJLNYHTS+ZUaIsgcf+KnfGc9ou3
7hcb8oSx5XuzGvzQXqpTlBgqfBd0WXhwTtJyOswe96j+oounPqhn4KuM1HCcSz3C
ElhGTQZHmYibsWxb8mXFGUdWQ77HPKfNlgZ88cpxJyGBok8zvUDAC9H4TZul2BDm
CsETEncERgxxDGdwOVKITNz/zHgggbmRhFRtScLu4ZMTmwEkKv1IxG25TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIHsiocZ/75AdtYZ0Tg41dTEJH7MB8GA1UdIwQY
MBaAFEgnNL/wGjzqs1C8uEsl9zvoKd9vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0NjMHZfQWFQT3F6VUx5NFN5WDNPLWdwMzI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81Mjk0YjYtNmE4YS00Njk1LWIyOTEt
NTgyYTk3MjA1NGZjLzEvU0NjMHZfQWFQT3F6VUx5NFN5WDNPLWdwMzI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81Mjk0YjYtNmE4YS00Njk1LWIyOTEtNTgyYTk3MjA1NGZj
LzEvU0NjMHZfQWFQT3F6VUx5NFN5WDNPLWdwMzI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIMDInvI
k2esWvnZwvHNft624n9fYx7bng6X07ACwnjC31ER6akwl9QKTOyRqU7LmW4xqghs
efSYAjlFnag4Qi3SRV5Hh6efU+gS1waj7HxueMsi2rQkMvCh6Koi/lwTe1l79rLU
QOZlY2PXFOb23eWanLo4R3T1THMkgAGDI6Q+6W0t4ssHOfWgSnHb+5VE0EejL912
FuJuh5lU86q0SG4exBGCa+RdwLJQ7sFUqkotYssIP+CGP2i5N9wIT5e2ADeF7TpI
aaRYZjvbmO0Z+80z9BBaAX0HWwk9QToHLZTnY4PKEEEXKV5Pr/Vytu+K8eruFsW7
saeqbifHZnio3A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:05 2025 by rpki-client