Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
File:                     Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft (raw, json)
Hash identifier:          /ehzZ0OCJEB9yMpo6YIQqfuf6cZ42QRiKZAu7hFq0Yk=
Subject key identifier:   FB:17:91:B8:EF:4A:F3:DE:D2:B1:88:32:54:3F:C4:8B:DE:51:97:57
Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
Certificate issuer:       /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Certificate serial:       01974779D7EAED37E75EA5A7F6152CA32717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
Manifest number:          0DB2
Signing time:             Fri 06 Jun 2025 23:00:56 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:56 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:56 +0000
Files and hashes:         1: Mg03f5x9KEwTzrWMVXcY-DpbRQM.roa (hash: gHoeFO+xk1dFoFV2Z9UYHxVBDmrYCHhqpQCvP+8wkDE=)
                          2: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl (hash: 8ZjP8+mDVybC/3wcHEtLXY3AvNhJ9UZUUXubGLM3Ccg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:d7:ea:ed:37:e7:5e:a5:a7:f6:15:2c:a3:27:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
        Validity
            Not Before: Jun  6 23:00:56 2025 GMT
            Not After : Jun  7 23:00:56 2025 GMT
        Subject: CN=fb1791b8ef4af3ded2b18832543fc48bde519757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:aa:61:1b:06:9e:e9:24:d4:41:7a:aa:69:7e:
                    35:57:dc:89:22:0a:19:4f:00:91:c8:d6:79:7a:51:
                    7c:7d:ef:bc:1a:7e:e1:37:16:c1:f6:b6:ee:a1:0b:
                    f8:ee:b8:ab:a9:77:80:4b:3e:14:35:ae:2b:29:17:
                    5f:17:a9:17:61:90:eb:83:41:16:2b:92:fb:a5:7f:
                    b6:65:c5:a9:7b:8f:a2:af:ed:f7:11:f6:29:bc:a5:
                    04:b6:0f:d8:9c:d0:46:bc:ee:23:66:ec:8c:f6:5a:
                    65:43:37:4e:4a:d7:76:84:2f:30:1c:8c:55:97:47:
                    d4:28:28:60:37:cf:3a:d5:47:f4:8e:4d:fe:74:aa:
                    81:3c:86:dd:47:78:54:f6:5b:3f:e7:74:5b:eb:cc:
                    a2:94:78:49:1e:10:b5:a2:9d:4e:bf:89:f0:d7:3b:
                    1f:52:60:92:f1:12:fb:79:12:6c:67:ab:a0:35:85:
                    c1:17:e9:fc:fa:88:1a:f6:4e:89:a8:d6:20:8d:d7:
                    a5:5b:b0:e6:6a:ee:32:2a:a7:f9:33:a8:f0:a3:be:
                    e1:18:bc:d5:5a:9c:ad:9a:83:59:78:71:c2:99:1e:
                    16:fa:fd:a2:a8:46:b0:35:a3:59:37:34:d8:e5:69:
                    ce:20:c3:cf:4b:94:18:69:5f:1e:cf:c0:16:d0:d8:
                    63:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:17:91:B8:EF:4A:F3:DE:D2:B1:88:32:54:3F:C4:8B:DE:51:97:57
            X509v3 Authority Key Identifier:
                keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:14:b9:6b:5b:d8:d8:13:d5:67:eb:90:b6:7e:52:6b:1e:
         f2:e9:7b:b0:b3:09:8a:0d:ab:f7:b0:ff:f5:89:e7:65:15:82:
         5c:ee:3f:c2:ad:be:cc:e3:9b:a0:b4:20:38:55:fc:85:89:4f:
         e3:43:99:61:91:cf:ee:97:bc:33:52:c3:54:3e:65:c7:38:9e:
         ea:02:3a:3d:bc:76:34:03:fa:a2:53:32:32:57:d3:46:7d:9d:
         4d:fb:85:2a:46:bb:b3:f8:40:bc:f5:d6:08:72:c1:34:59:b6:
         ce:19:0b:2b:8a:ff:1d:c7:81:6b:e7:ab:21:5f:f3:f4:d7:ba:
         ec:81:a9:93:e6:5f:4b:fb:6f:87:4a:db:be:80:c6:fb:ca:24:
         97:01:d0:a8:e4:6d:28:dd:93:51:63:53:96:ae:22:a1:e8:cc:
         cb:0e:40:4c:4d:4c:d8:91:6d:25:25:df:e7:d2:f0:35:b6:8b:
         5c:ce:e4:ec:f9:44:fe:7e:5d:05:cf:dc:23:5d:97:c6:56:a7:
         35:34:35:5a:5a:6d:f8:6b:2c:99:20:6d:47:28:f9:e4:32:f8:
         f4:91:d4:7b:f0:b5:f1:f7:66:24:a0:7e:08:c1:47:9c:50:bd:
         c3:e8:55:34:85:d3:e3:51:c4:d1:86:d5:7d:92:71:2a:98:79:
         12:de:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:42 2025 by rpki-client