Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
File:                     sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft (raw, json)
Hash identifier:          8Wruzk/gfTuJF5+R6FRY+l5tUnYy/uglmXxE7w99RGI=
Subject key identifier:   86:08:72:90:01:F5:46:E4:84:DA:33:2C:33:3E:DC:90:2B:4A:14:EF
Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
Certificate issuer:       /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Certificate serial:       01992330E5915BEFC8DBBEAC7FC1D8FBE7ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
Manifest number:          1670
Signing time:             Sun 07 Sep 2025 08:00:30 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:30 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:30 +0000
Files and hashes:         1: bjFNuvRZLnVPhxbqDpaNVvasSyc.roa (hash: Or9p+aN5TKflixXpvac1BP39grelci5lle0PuJ0UsF8=)
                          2: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl (hash: rHHhtyOcCFYYBFJMhY1/ArNZ7Qiz4BuRaid8F1Xbna4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:30:e5:91:5b:ef:c8:db:be:ac:7f:c1:d8:fb:e7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
        Validity
            Not Before: Sep  7 08:00:30 2025 GMT
            Not After : Sep  8 08:00:30 2025 GMT
        Subject: CN=8608729001f546e484da332c333edc902b4a14ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cf:52:bb:8f:54:06:df:22:ee:b2:e6:9d:32:
                    b0:e2:2e:fe:20:cb:17:91:36:d2:83:0f:d6:a3:68:
                    94:f1:e8:dd:57:35:fe:b5:7e:47:80:09:35:db:02:
                    68:62:21:6b:f4:51:ca:b6:84:42:88:37:4c:4a:f0:
                    0e:72:6f:90:a5:97:d8:a2:c8:84:63:22:12:a7:bd:
                    f4:74:5c:ad:c8:d7:e5:ab:33:c5:52:6b:42:85:ea:
                    51:6e:29:8f:9c:17:27:cf:b6:0b:4a:7d:ba:e5:df:
                    4a:da:d6:f6:df:56:8b:e7:81:67:e4:9b:67:1b:32:
                    40:5c:99:fb:78:1f:7d:f5:17:fa:1b:c4:50:34:81:
                    04:31:84:d6:a9:8d:e8:3e:13:85:78:85:8d:07:40:
                    c1:3a:10:f0:ea:4d:8d:7c:21:88:d5:ab:a7:23:3e:
                    a1:08:bd:cc:4a:2f:bb:b7:70:54:57:c7:46:55:6c:
                    d1:b2:7b:21:33:7b:32:70:64:bf:ef:06:2c:2b:87:
                    94:37:ce:ef:e1:43:ae:85:77:e4:d8:14:27:48:db:
                    eb:c0:14:b9:46:15:c4:e3:86:38:8d:ae:91:6b:80:
                    e9:40:b7:aa:e0:b6:c0:a8:4f:43:84:d8:13:44:45:
                    d1:e6:59:a5:24:b6:71:b2:2c:31:09:a1:08:53:c2:
                    c5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:08:72:90:01:F5:46:E4:84:DA:33:2C:33:3E:DC:90:2B:4A:14:EF
            X509v3 Authority Key Identifier:
                keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:bb:b6:04:6a:bd:72:dc:9a:4a:4a:3b:1e:21:55:87:8e:f1:
         c7:6c:5e:c3:71:3c:e5:15:71:eb:20:5d:7a:6a:d8:c0:eb:ca:
         84:89:6c:ca:41:3c:a2:60:32:e8:54:7a:9c:f4:19:79:60:cb:
         d8:0d:85:b7:43:dc:4b:15:c4:cc:8a:45:6b:2c:7a:59:b4:bc:
         31:1d:3c:7c:3d:d8:67:52:73:9f:65:6b:2d:db:e4:98:14:cc:
         8f:35:c6:f2:ad:66:51:43:76:d8:02:c9:a2:23:7d:5b:a7:16:
         49:5f:bf:2f:ea:b8:cf:9a:32:c9:c8:15:2c:e0:5c:c4:b5:85:
         71:fb:c5:97:00:02:a7:b5:a5:f3:e3:ac:1b:2f:b7:4c:08:3d:
         04:b0:ba:17:0a:ce:2d:ca:92:54:b9:05:bc:af:56:aa:ae:63:
         18:a4:28:05:12:24:e1:ab:fe:21:c9:7e:56:20:48:b8:57:22:
         12:3b:23:53:09:ca:50:1d:5c:dd:fb:37:93:47:4e:57:15:26:
         5b:c1:34:d0:2b:d6:2a:55:66:ae:47:9e:4b:99:0e:9a:9b:f0:
         64:7a:4d:a7:f6:45:eb:d2:35:dc:11:a8:a1:10:eb:0f:ec:0b:
         60:b0:83:9c:df:b4:eb:86:37:06:66:3a:1e:a4:62:b9:76:5d:
         3d:b5:8b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:19 2025 by rpki-client