Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
File:                     SeMF15ys2--_HoMrNNfAa7tfYno.mft (raw, json)
Hash identifier:          tMQVuY/XDeuVQmOYzGUv+f8y4ItUba7seV/v8zbJeeg=
Subject key identifier:   48:E3:3F:CC:9D:BA:1B:38:6A:F4:96:3F:93:2D:B4:37:76:D1:8C:54
Authority key identifier: 49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
Certificate issuer:       /CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Certificate serial:       0199239EA8B4228AF3479C06AE75E63FC14E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
Manifest number:          1674
Signing time:             Sun 07 Sep 2025 10:00:24 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:24 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:24 +0000
Files and hashes:         1: SeMF15ys2--_HoMrNNfAa7tfYno.crl (hash: fKFpakMlpSfve4j4+UNUmYxLl1cfEr2DjW0IKBupJEc=)
                          2: aCk5yRvbKuue3ENXzksiDKszHOM.roa (hash: gF9bCRgORNZDjS/+hA/hEjcZSXZaNJqm2ogN9Lhnwwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9e:a8:b4:22:8a:f3:47:9c:06:ae:75:e6:3f:c1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
        Validity
            Not Before: Sep  7 10:00:24 2025 GMT
            Not After : Sep  8 10:00:24 2025 GMT
        Subject: CN=48e33fcc9dba1b386af4963f932db43776d18c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e9:b3:cf:4c:c5:95:f1:58:f9:cc:5e:78:d6:
                    c5:57:ae:12:e3:21:97:d3:ce:63:59:8f:19:aa:7c:
                    86:c9:65:e4:cc:d9:64:33:71:9b:cc:03:96:86:60:
                    12:91:92:f7:3f:7e:ba:89:ff:61:90:0b:73:6c:8c:
                    a9:3c:d2:7d:03:e9:2c:3f:90:9c:21:95:f7:9b:b3:
                    b1:33:9f:e8:09:a4:e5:00:ca:82:ba:80:1e:15:3e:
                    9b:25:86:5c:96:34:d5:68:d0:92:b2:e0:57:64:2e:
                    03:98:f6:bc:07:69:bf:aa:3f:8b:f8:ba:cd:3d:27:
                    b2:39:55:ca:71:ef:14:78:1c:1c:70:5c:1d:f8:ef:
                    f4:60:58:a6:2a:7c:12:18:33:a0:23:02:95:70:b8:
                    23:5b:e7:de:cc:1a:4f:40:87:d8:03:f0:8b:e3:26:
                    c2:43:1e:de:51:e0:6e:51:b4:01:2f:5e:5c:0c:9c:
                    27:ea:56:6c:4d:04:f1:0a:a3:c9:37:da:50:03:6e:
                    23:04:fc:10:37:16:70:3e:b9:c2:7b:34:72:cb:59:
                    11:da:ea:e0:0d:bb:0f:30:81:68:4a:dc:50:f5:a6:
                    7d:e5:7a:f0:3a:28:25:a6:66:90:b3:44:4b:ed:08:
                    af:98:e9:ad:d8:77:69:1f:b4:35:be:1d:4d:c8:87:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E3:3F:CC:9D:BA:1B:38:6A:F4:96:3F:93:2D:B4:37:76:D1:8C:54
            X509v3 Authority Key Identifier:
                keyid:49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8c:e7:c8:43:68:a1:a9:cc:5c:1c:a4:82:0b:b5:d3:57:51:
         fd:69:b2:25:b2:18:c5:8c:b4:55:82:7e:f7:86:fe:ea:de:12:
         c1:67:0c:6c:28:b2:97:5d:28:a7:90:c9:fb:1c:56:af:d0:10:
         a6:19:c1:fa:11:fa:46:12:b6:26:f6:8d:56:1f:95:70:dd:be:
         13:e6:72:19:30:3a:6f:33:f3:0b:3e:8e:35:89:b6:22:c0:75:
         b4:32:d4:e8:96:30:7b:3b:0e:46:15:1b:7e:f6:12:07:d7:d7:
         96:29:c5:5e:b0:84:37:18:ef:f3:52:75:5c:19:bc:94:6c:6f:
         ab:fb:2a:fe:b7:a4:a3:37:1e:59:55:0e:14:d8:ea:13:57:9c:
         0e:e7:39:a9:13:4b:3f:46:49:d2:f7:62:4f:51:35:31:78:a9:
         79:49:12:d8:ee:57:14:4d:2e:0a:26:4e:a5:36:35:63:e1:e7:
         85:f1:08:20:7e:77:0b:22:43:84:35:6e:03:0d:5a:b2:21:7c:
         7b:44:e0:38:a6:34:65:6a:e1:75:8a:33:be:20:39:d4:fb:32:
         1e:80:7a:27:be:4b:dd:3b:2e:70:0e:6c:c1:2c:d9:a4:c7:0f:
         2e:16:ad:58:55:92:04:d0:dd:ce:9f:e9:29:e6:63:d4:72:97:
         fa:b0:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:24 2025 by rpki-client