Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
File:                     snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json)
Hash identifier:          SYHg3Js+iIFZ31tG9exnBcTLlOWx9BR6ExTEBfhhW48=
Subject key identifier:   B8:CF:1F:5B:E0:39:1C:C1:07:FA:C0:14:6C:28:A5:76:DA:5D:2D:12
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Certificate issuer:       /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial:       01974B1F1694ED651C254C3DA583B5A097BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
Manifest number:          1119
Signing time:             Sat 07 Jun 2025 16:00:17 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:17 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:17 +0000
Files and hashes:         1: Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa (hash: p1jDlEZ3jtWSk1Gt2ui3hdbzWJmpWW1M0qlAGcolPG0=)
                          2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: 6nBfsvJlO+X6XbfRdDqbCGQ9LqrbECnRKfFJi4KDHPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:16:94:ed:65:1c:25:4c:3d:a5:83:b5:a0:97:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
        Validity
            Not Before: Jun  7 16:00:17 2025 GMT
            Not After : Jun  8 16:00:17 2025 GMT
        Subject: CN=b8cf1f5be0391cc107fac0146c28a576da5d2d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e8:8b:34:b2:09:dd:38:3c:84:9e:15:ea:74:
                    b9:f7:d0:07:98:9b:5c:f7:8d:7a:2e:a5:21:0a:1c:
                    d1:c2:55:6b:6a:98:06:fd:cf:3b:c6:19:06:95:cb:
                    42:d4:41:a1:24:3f:8d:11:bb:d7:b6:e1:1b:8b:0a:
                    77:8c:74:49:98:e4:2f:18:5b:89:03:5e:9c:e7:c1:
                    d7:ed:20:40:07:b0:e5:3e:03:34:37:01:16:78:4a:
                    5b:80:e7:98:f2:db:27:9b:bc:f0:74:0f:21:a8:4d:
                    75:64:c2:31:a0:ae:3b:fd:3c:9f:6a:f1:65:cd:c4:
                    45:29:70:41:79:c8:9d:c5:b6:ee:53:d5:b1:29:4a:
                    b0:99:25:88:0c:a6:2f:ad:2e:83:ac:5b:f6:bd:47:
                    75:ba:26:f2:9b:8f:c0:fc:b2:59:c3:56:58:ff:6d:
                    de:83:fb:b7:c5:d1:55:79:16:eb:50:0a:46:d9:6e:
                    c5:d5:bb:8d:d2:cd:b8:9e:0f:5e:34:74:44:ba:20:
                    20:8d:cf:14:d6:0e:d9:0b:1f:b9:71:67:fd:ca:f0:
                    89:bf:35:4b:cd:d2:86:84:9a:58:11:59:10:8d:f9:
                    ba:ea:1e:bf:99:ef:fd:8d:26:cd:9d:f6:03:9d:9d:
                    67:4c:d9:e4:b0:59:e2:61:f4:33:fd:73:aa:c9:e2:
                    5e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CF:1F:5B:E0:39:1C:C1:07:FA:C0:14:6C:28:A5:76:DA:5D:2D:12
            X509v3 Authority Key Identifier:
                keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cf:3d:08:3a:ec:e6:e4:15:38:d3:22:e0:19:f4:bb:d6:1b:
         dd:e0:72:37:9a:d2:68:a6:ff:fc:75:d3:e3:3c:e6:a6:1a:3d:
         9b:7d:14:9a:8a:e7:7c:1a:c6:2c:de:ad:a2:b5:a5:70:7d:88:
         a8:09:ed:8c:80:44:79:35:f3:ad:34:cc:28:d4:8f:4e:0e:50:
         20:e7:f8:cc:ca:9c:c6:56:7c:c2:da:f2:0d:16:f1:1e:19:b0:
         c6:ba:42:54:50:e9:4b:7d:3e:58:84:23:a4:1a:44:2e:1e:75:
         b5:50:80:51:80:18:86:ac:df:da:47:9c:b4:52:aa:36:58:12:
         57:71:43:dc:c6:ae:88:68:58:30:25:4e:ec:14:1c:42:c9:ea:
         21:10:25:97:33:47:e3:ee:20:17:b9:03:ed:35:1d:2d:0e:94:
         75:68:ce:02:98:d9:2f:f6:8a:51:a0:ab:3f:84:c8:78:f2:14:
         e5:f7:5f:5e:5d:6b:b2:b3:13:5b:be:e6:7e:80:06:fb:70:58:
         65:9f:0c:b9:36:06:63:c8:03:9c:f0:16:f8:ff:15:e3:f7:e2:
         94:23:94:c0:09:41:1b:cc:ec:87:e3:19:cf:f4:7b:87:83:bf:
         8e:f1:db:6d:b2:f9:fe:78:54:f0:3d:3a:09:a1:42:ac:15:eb:
         7c:4d:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:59 2025 by rpki-client