Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
File:                     sL0oE0WvbNVBVNTP908ZWjiP_8E.mft (raw, json)
Hash identifier:          IQKBuxpa24DnbxjLMAjFlAn22Jf8FdMFKfIC8kcyqso=
Subject key identifier:   EA:DD:1F:73:F0:9D:FA:33:94:57:60:15:8B:5A:8D:87:68:AF:85:27
Authority key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
Certificate issuer:       /CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Certificate serial:       019922557B840F2A381E6B1EF99B722A2D7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
Manifest number:          1673
Signing time:             Sun 07 Sep 2025 04:00:51 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:51 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:51 +0000
Files and hashes:         1: WQbKsA3j9plFxqexMQZCCTZtrbU.roa (hash: NWTJ5dr27/rFdV1pDzF/Ey/hAby6fAYx1MwHmB4Vn1s=)
                          2: sL0oE0WvbNVBVNTP908ZWjiP_8E.crl (hash: YSt7jRiD7iDyxG9v3n/kQSNrHxpY7uVFb3yJN+BLILA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:7b:84:0f:2a:38:1e:6b:1e:f9:9b:72:2a:2d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bd281345af6cd54154d4cff74f195a388fffc1
        Validity
            Not Before: Sep  7 04:00:51 2025 GMT
            Not After : Sep  8 04:00:51 2025 GMT
        Subject: CN=eadd1f73f09dfa33945760158b5a8d8768af8527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:74:e6:2c:69:62:58:44:67:fa:9b:c0:d9:
                    58:11:9a:09:65:67:61:4e:af:d3:aa:97:75:23:ff:
                    77:18:56:66:b5:b7:75:07:d8:49:25:70:a2:86:b9:
                    9d:5d:fc:90:86:81:8b:78:0c:fa:57:f7:4b:d1:ca:
                    18:fd:b0:83:13:55:ca:59:d7:2b:2a:c2:35:67:ef:
                    2f:1f:f4:dc:7a:8c:bd:41:3f:41:1f:a5:f1:1e:de:
                    99:6f:ac:9d:f4:73:02:4b:ba:7f:58:da:2c:51:58:
                    18:d6:5e:65:27:7d:cb:f0:76:fb:df:9a:ce:a3:1c:
                    8d:3a:32:4e:7b:31:17:04:f5:c1:6c:bd:a1:97:dd:
                    26:bd:45:b2:b7:e5:bb:e7:d6:8f:85:35:88:dd:64:
                    32:c1:eb:4f:6f:7f:5f:01:05:97:17:48:18:19:74:
                    49:74:4a:82:c9:df:8e:0d:07:af:74:57:de:5b:95:
                    b3:a3:ca:b2:24:d2:a0:ee:3c:fb:58:c5:7b:68:86:
                    3a:57:c5:64:7c:37:99:ba:c7:dc:85:bb:14:64:fb:
                    5d:c9:de:72:3e:d1:f0:d1:09:37:8d:eb:cb:43:31:
                    29:d3:c4:14:d0:bc:c3:d9:ce:6d:58:07:4c:9a:93:
                    50:a5:9f:bc:b5:77:a9:af:76:d1:08:b1:f8:9c:23:
                    62:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DD:1F:73:F0:9D:FA:33:94:57:60:15:8B:5A:8D:87:68:AF:85:27
            X509v3 Authority Key Identifier:
                keyid:B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:45:c7:29:be:59:ef:1a:45:2a:b2:58:55:4f:e5:9f:1b:31:
         c3:ae:11:4b:75:e2:96:74:1c:6a:bc:cf:d1:98:63:e2:f1:36:
         60:d5:99:44:c8:db:fb:8f:e1:c1:3b:5f:78:9a:30:49:d2:97:
         75:8c:ac:55:40:7d:2f:00:0b:73:28:f8:c7:5f:99:dd:fd:f0:
         06:72:65:36:1b:d3:bf:99:37:3c:f4:64:64:db:25:e8:94:bc:
         41:db:39:4f:c2:60:1b:55:39:f9:70:22:4b:7e:c9:da:8e:f3:
         2f:8a:a0:6c:b1:35:b3:a1:0b:8c:d6:b7:28:83:21:35:9b:c0:
         33:9d:28:ef:2f:8a:4e:5d:88:f4:92:93:3c:35:85:af:05:93:
         6e:35:a0:39:23:db:e4:d1:02:50:58:b1:74:7c:33:20:80:f9:
         87:1d:da:5c:93:ad:e3:93:57:cb:2c:fc:16:33:61:d6:ad:7d:
         f1:b3:3c:b7:76:c3:61:50:d8:90:87:cc:45:e9:e0:de:02:ac:
         f9:8b:b0:6c:6d:c9:a3:9a:e8:18:35:8f:e6:a2:62:79:d2:0a:
         f9:3e:33:1e:d1:74:ac:3c:7a:29:97:59:ca:95:94:65:51:44:
         66:20:f8:6e:4d:2b:56:dd:9f:1c:63:e7:98:a7:af:33:cf:6d:
         b2:f4:3e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:35 2025 by rpki-client