Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
File:                     B__SkDh900rAeQxrnX7pn-23gUk.mft (raw, json)
Hash identifier:          iiVEN3Ack0F9l4OmMMf4wGjAhpy9fkWh/jSbfMM/9eU=
Subject key identifier:   AB:6E:57:4D:45:F3:C4:C1:3A:FE:C6:25:52:4F:1A:4F:14:B3:73:4E
Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
Certificate issuer:       /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Certificate serial:       019922C3ABBF71306D14857BACEADB5CDD64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
Manifest number:          04CD
Signing time:             Sun 07 Sep 2025 06:01:12 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:12 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:12 +0000
Files and hashes:         1: B__SkDh900rAeQxrnX7pn-23gUk.crl (hash: ruqZAWqYNrxDtg4F2mVa+UsTiBYx9eUboFMI3RvPYXM=)
                          2: jvHRud-0bfVZE35uo3ytxWpEsiQ.roa (hash: /JbTDkFvtTl5SlOmgYIpMzTAuGjpF4dmP37OC1pKU5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:ab:bf:71:30:6d:14:85:7b:ac:ea:db:5c:dd:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
        Validity
            Not Before: Sep  7 06:01:12 2025 GMT
            Not After : Sep  8 06:01:12 2025 GMT
        Subject: CN=ab6e574d45f3c4c13afec625524f1a4f14b3734e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:80:e6:c8:0b:f1:34:b1:fd:73:bb:17:1f:
                    64:77:4c:27:2e:95:f0:77:5b:57:f4:72:ce:25:75:
                    90:d3:eb:7e:9e:94:52:f7:9d:48:01:01:08:e3:a4:
                    29:0f:14:21:9a:19:ed:04:a2:c7:a6:d2:8a:98:53:
                    54:a0:94:be:93:7f:22:1f:73:c7:e6:5e:49:6f:69:
                    db:7d:61:df:d3:90:e8:a0:03:da:56:7f:02:9a:31:
                    14:c2:af:b2:4a:29:15:c4:24:a5:2e:96:cf:b5:85:
                    f9:62:e1:e2:84:72:84:1b:d6:57:df:fd:74:7d:98:
                    28:46:48:05:ee:41:43:a5:99:90:8d:e1:28:20:fc:
                    67:7a:f2:72:b2:82:c9:58:e8:ff:92:fe:9b:55:1c:
                    77:14:fd:9a:02:ae:32:80:93:80:5d:b0:4e:33:91:
                    e7:88:14:e1:1f:c8:c2:97:f7:97:fb:e6:ea:f4:53:
                    14:df:03:58:18:ab:40:76:fc:8a:22:7b:ea:1c:c1:
                    9e:2e:16:37:a6:68:ac:5f:a6:82:82:4a:77:95:c8:
                    36:bb:05:84:e6:a4:7f:1f:5d:de:4c:02:0e:25:e9:
                    60:dc:fe:35:ef:c3:4d:db:09:ac:86:63:6b:87:bd:
                    ca:2d:13:ac:ef:fe:75:01:68:a6:ba:6d:f4:fb:eb:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6E:57:4D:45:F3:C4:C1:3A:FE:C6:25:52:4F:1A:4F:14:B3:73:4E
            X509v3 Authority Key Identifier:
                keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5c:0f:da:33:6b:80:f2:4d:ab:6f:cf:fd:8c:f0:0b:37:8c:
         3c:62:36:4a:d7:95:fe:91:e7:8e:12:db:49:1a:8b:e1:17:86:
         92:c1:68:f4:ce:ac:45:97:de:3a:c2:42:55:9b:43:01:e5:57:
         24:f7:53:65:cb:71:e5:5f:5d:4e:2b:c7:27:c2:38:ab:84:ab:
         7f:4c:cd:c7:8c:53:2d:b1:f9:46:96:63:92:9c:39:d1:88:b1:
         b2:b6:00:26:3a:f3:13:ac:5d:0b:23:46:83:9b:4e:72:23:aa:
         14:c1:a3:01:56:29:a5:7b:77:fd:eb:c6:af:ee:0f:f8:fd:89:
         63:90:da:26:68:93:a8:1a:1a:1d:e3:30:03:c1:60:bc:5b:81:
         b1:d6:58:60:f3:d0:69:41:5d:4a:29:d9:c7:86:f8:7e:e7:75:
         c8:4e:fb:0e:3a:ba:47:36:39:d8:3c:63:8e:69:3e:e9:3b:31:
         49:fe:ec:24:ae:66:8e:66:57:ab:bb:56:d7:7c:63:5e:ab:51:
         26:82:a6:cf:8e:93:13:ff:74:b7:02:82:a2:92:77:e2:ca:69:
         88:1e:6b:e6:3d:b6:9a:43:2f:74:dc:6d:b0:39:ce:e1:6e:0e:
         4e:76:f8:ed:00:76:c6:19:eb:d1:44:44:ea:4a:90:ab:bb:96:
         5a:33:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:24 2025 by rpki-client