Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
File:                     SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json)
Hash identifier:          t2htNuW55xt5cpcermddWJrgir2Yl646wWIDnPVlYRQ=
Subject key identifier:   97:DB:7C:12:50:0F:3F:AD:C6:86:54:7D:F3:CE:16:25:1F:00:A4:94
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Certificate issuer:       /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial:       019A25F82418340CDEEE4FEFFFBFCA874982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
Manifest number:          1607
Signing time:             Mon 27 Oct 2025 14:00:10 +0000
Manifest this update:     Mon 27 Oct 2025 14:00:10 +0000
Manifest next update:     Tue 28 Oct 2025 14:00:10 +0000
Files and hashes:         1: 2p_ZO09LakS0A7u5Qz0wGibD5fU.roa (hash: dieDhkHaU+F1D9ZZPlcY6giEpQMREkK77VG8/1P3jjc=)
                          2: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: yv9Alg30jdVkzfFBRUu7YMVAk8D6vQPfzaLAbi9lSMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:25:f8:24:18:34:0c:de:ee:4f:ef:ff:bf:ca:87:49:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
        Validity
            Not Before: Oct 27 14:00:10 2025 GMT
            Not After : Oct 28 14:00:10 2025 GMT
        Subject: CN=97db7c12500f3fadc686547df3ce16251f00a494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:bd:d4:2d:ff:6d:19:74:32:24:be:0c:83:
                    1e:9f:23:3e:e1:df:64:86:02:33:71:f5:a6:35:2a:
                    5a:34:4f:82:d9:71:dd:f7:b2:fd:75:8d:6b:47:d8:
                    26:ef:af:85:13:b8:32:b1:54:dc:65:29:fa:0c:26:
                    af:02:4d:c9:82:42:b3:ff:34:d0:8a:cf:d8:a7:d2:
                    ea:a8:fe:5a:a0:2f:45:b8:11:fe:1d:6c:18:af:46:
                    09:1c:25:23:0f:db:0c:37:6b:00:61:e4:17:19:a2:
                    4e:8c:44:9a:23:f4:f7:58:3c:d7:be:27:4b:63:0f:
                    4e:58:1f:0c:d5:19:57:9b:80:85:b0:0f:3e:94:e1:
                    68:28:86:13:b9:d2:36:d0:36:6d:eb:a5:bf:13:5f:
                    49:2a:f4:1f:35:55:19:d6:b1:e4:41:4c:77:8d:01:
                    7b:e9:49:e2:8c:70:0b:2f:da:56:33:5d:26:00:1c:
                    07:78:ba:28:23:ae:68:57:ed:ea:9a:c8:7b:98:cb:
                    2b:2f:8d:72:1a:d2:a5:af:88:7c:47:bb:e2:3c:ca:
                    08:35:12:c0:bd:41:f0:93:df:84:00:2c:bd:c3:35:
                    a4:54:a2:fa:5f:2c:81:1d:47:02:44:6c:01:8e:01:
                    f6:c4:70:d4:e9:33:78:83:40:33:1d:0d:9a:22:cf:
                    66:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DB:7C:12:50:0F:3F:AD:C6:86:54:7D:F3:CE:16:25:1F:00:A4:94
            X509v3 Authority Key Identifier:
                keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d0:29:07:30:ed:70:4e:c2:17:11:17:af:49:12:54:98:3b:
         ff:03:30:24:67:bc:65:28:a3:53:15:b5:b8:e2:c1:42:5f:fc:
         99:dc:3e:70:8a:b1:02:59:00:8e:ed:65:0e:89:39:26:c3:79:
         e5:12:83:8b:f5:ee:18:30:89:b7:c5:ce:b5:99:b0:6a:af:ec:
         a2:82:f7:09:4f:cd:d3:29:6d:6b:4b:61:09:b5:e9:4f:22:1b:
         43:25:43:4e:82:30:2f:6c:1e:1a:4e:c9:35:64:f2:26:77:b8:
         61:0e:95:be:62:0b:23:18:c2:39:0f:68:62:5d:90:b4:62:52:
         d1:7e:a4:b6:74:53:f5:70:a3:00:87:15:ae:29:ab:64:8e:62:
         69:8a:b1:02:b1:85:8a:80:51:5c:38:56:67:82:b6:d8:e4:8d:
         91:cc:f3:4e:49:b3:53:8f:59:6e:a9:8c:13:db:f6:c8:7e:61:
         c4:24:c5:6c:b0:9f:53:bf:82:1b:95:3e:14:5c:73:b2:c9:14:
         d0:3d:de:6e:8b:17:03:3f:86:99:da:4c:cc:a3:7c:64:a4:cf:
         94:cd:7a:af:80:54:d4:5c:8f:c8:81:ba:33:9a:81:f4:41:eb:
         3b:82:b6:d4:0c:a1:83:21:45:41:8f:cf:66:ed:37:08:42:b9:
         6b:12:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:05:02 2025 by rpki-client