Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft
File:                     Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft (raw, json)
Hash identifier:          whmcQqoPPR64kqNqLuKtYAeBTG/WCpxknPKYOqMBGBU=
Subject key identifier:   6B:5D:5F:FB:D3:7A:1C:B1:5D:1E:F6:EB:34:1D:0B:7B:FF:A1:6B:A7
Authority key identifier: 4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61
Certificate issuer:       /CN=4a883e94aa1451ba748d6a5bf175a43fe816e661
Certificate serial:       0197507CC88420790B1D84913F8D4CAFE7FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft
Manifest number:          B0
Signing time:             Sun 08 Jun 2025 17:00:44 +0000
Manifest this update:     Sun 08 Jun 2025 17:00:44 +0000
Manifest next update:     Mon 09 Jun 2025 17:00:44 +0000
Files and hashes:         1: Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl (hash: Hv7cgdaVS8n+LjXX+YuhbRIzZeYklMRjKmWaXMybUQY=)
                          2: jzdzn8fNPZYhsNzLFvnNEAiNqfQ.roa (hash: CgAcBMHOHIF/zsicGTopucDznqKVIIzdoQQgNx76Mfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:7c:c8:84:20:79:0b:1d:84:91:3f:8d:4c:af:e7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a883e94aa1451ba748d6a5bf175a43fe816e661
        Validity
            Not Before: Jun  8 17:00:44 2025 GMT
            Not After : Jun  9 17:00:44 2025 GMT
        Subject: CN=6b5d5ffbd37a1cb15d1ef6eb341d0b7bffa16ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:00:bf:0a:f9:dc:44:35:c8:29:91:8e:e6:
                    c7:84:4a:f1:f7:53:ec:56:01:22:33:fd:5b:aa:fe:
                    a8:7b:20:7a:5e:3b:28:31:09:6f:1a:68:8a:fc:1a:
                    f4:1b:83:e6:c9:4d:54:75:ca:eb:1f:e7:34:a2:a8:
                    25:0d:ee:7b:cc:26:d4:5d:31:80:61:02:1c:09:ad:
                    7c:09:dd:e2:45:85:83:8a:54:0e:67:55:73:5a:01:
                    38:33:1a:02:22:87:b5:ff:d6:a7:8d:c4:54:7e:db:
                    22:57:89:f2:d6:3f:cb:a5:4e:bc:7a:63:6e:a6:a2:
                    7d:e7:b2:6b:ac:4c:df:7b:ee:6d:02:82:8f:07:8b:
                    e5:56:37:85:34:03:86:5c:1e:23:3e:c7:19:0a:de:
                    5d:58:b6:bf:73:c3:bd:77:5f:92:cf:5d:69:27:a4:
                    7c:90:84:af:85:b4:44:7f:03:e1:a5:f1:c2:fd:08:
                    d9:33:ad:d5:1f:f1:5f:ce:13:88:73:af:13:83:a0:
                    a2:a7:87:02:34:5d:9b:aa:f7:29:d3:88:d3:90:b1:
                    21:07:04:a7:3e:82:99:8f:4a:9e:96:6b:10:c7:3f:
                    bf:f0:fb:72:c3:75:9d:0f:ae:70:c5:70:6f:70:8a:
                    72:1b:59:de:73:eb:2c:9e:60:4d:85:68:9e:13:be:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5D:5F:FB:D3:7A:1C:B1:5D:1E:F6:EB:34:1D:0B:7B:FF:A1:6B:A7
            X509v3 Authority Key Identifier:
                keyid:4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:81:57:a8:ce:c9:d9:4a:c9:9e:7d:70:5a:04:58:c4:f8:ea:
         e6:a1:b1:79:ef:5a:d7:06:8c:ca:b4:9f:23:e4:73:60:57:b9:
         d4:ad:32:cf:b8:fb:67:5d:2f:a2:ac:b4:69:62:60:e4:24:0e:
         2a:49:57:18:76:84:b7:a8:e0:3e:36:29:b9:41:e5:a7:73:0f:
         5b:cb:16:45:2e:a9:5a:ba:5f:1d:33:2c:f8:0d:8a:0c:a4:bb:
         6a:ac:0e:03:55:29:c9:1b:2f:57:3d:59:a0:43:0d:5f:b9:77:
         8f:31:b8:dc:3f:70:f3:ff:23:d8:b2:99:23:41:62:44:e9:2a:
         24:c8:a6:aa:73:76:06:2d:36:f3:d4:3d:2d:05:a0:73:29:af:
         b0:44:4f:13:21:03:c1:3a:b1:c9:d2:0a:73:79:d7:9d:a7:41:
         22:bc:25:32:43:fd:b1:49:92:64:37:cf:b3:3b:c0:9a:29:27:
         0b:41:fc:f5:d4:f6:b6:f9:6e:55:8b:36:ea:0d:c9:83:d3:3a:
         40:cc:9a:9d:f4:2e:0f:89:08:34:b9:32:5a:96:cd:19:9c:ff:
         95:c2:db:db:6f:6b:76:02:02:5c:f6:6f:b4:31:d8:21:22:18:
         b6:8a:8f:dc:04:5f:b5:cb:34:ce:4d:23:bc:e1:07:be:a8:da:
         f9:8e:db:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:49:48 2025 by rpki-client