Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File:                     sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier:          ARfgZuN4FzceFt0EyLtPg1Abqno1aS8D+Sp4iYTFDcE=
Subject key identifier:   47:9C:70:2C:B7:AD:74:B2:97:5B:C6:53:06:37:8B:78:A8:29:8B:94
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer:       /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial:       01975E6F678403C317032A4BBEAF1ACAB54B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number:          0530
Signing time:             Wed 11 Jun 2025 10:00:48 +0000
Manifest this update:     Wed 11 Jun 2025 10:00:48 +0000
Manifest next update:     Thu 12 Jun 2025 10:00:48 +0000
Files and hashes:         1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: H3q3XR9eFD/+7GND91fDzcQySggAxuIFvMlc5+HBlo4=)
                          2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:6f:67:84:03:c3:17:03:2a:4b:be:af:1a:ca:b5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
        Validity
            Not Before: Jun 11 10:00:48 2025 GMT
            Not After : Jun 12 10:00:48 2025 GMT
        Subject: CN=479c702cb7ad74b2975bc65306378b78a8298b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:a9:7a:88:96:85:09:99:27:1c:c5:39:e4:
                    1f:61:f4:85:40:4a:dd:d0:85:09:38:35:fa:3e:a2:
                    0b:f2:45:08:1f:a6:4c:da:da:05:e6:8d:fc:83:7c:
                    29:8a:ce:e1:d6:24:94:d9:7b:c3:e3:ce:fa:4d:23:
                    68:57:4c:b8:b0:68:0b:54:71:7d:8e:31:97:f1:f7:
                    e9:89:4c:c2:07:f7:7e:d3:e0:26:c2:b0:88:a4:4a:
                    b1:4c:03:43:14:b1:3e:d9:d2:6d:57:23:a7:15:f6:
                    0e:28:d5:f5:e3:34:a9:56:d1:83:1b:16:4b:9b:3f:
                    7b:6b:eb:76:77:a7:ef:4b:a0:4a:be:74:36:2c:14:
                    b2:f2:a1:3b:f2:f9:1a:2b:8c:31:16:0c:70:0f:92:
                    81:34:a8:2e:ee:ac:4b:e3:b2:bc:8c:7c:6e:59:e6:
                    ed:ef:ac:62:71:8c:a0:0a:de:d1:1e:96:ae:e5:a0:
                    42:cc:3e:29:f6:07:aa:aa:61:8d:f1:70:9f:2e:c0:
                    0e:b3:1e:3d:e0:ed:63:c0:41:a7:45:f2:cb:ec:77:
                    b2:d6:5c:a8:77:51:da:87:9b:81:b5:e0:57:7d:4d:
                    37:f5:b7:27:d1:d7:fe:5f:20:48:37:b3:c9:cf:28:
                    1b:4f:06:1a:9b:67:16:e6:a8:74:cd:36:b9:17:63:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9C:70:2C:B7:AD:74:B2:97:5B:C6:53:06:37:8B:78:A8:29:8B:94
            X509v3 Authority Key Identifier:
                keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:9d:53:43:00:5a:5a:64:d0:df:6a:83:f5:ad:af:c4:23:c7:
         72:f4:40:fb:b2:55:fd:9f:a4:b5:13:dc:69:92:cb:cb:da:59:
         eb:57:a7:0c:64:de:d7:2e:84:f6:91:3b:f3:1b:e1:b0:68:9f:
         8d:96:e0:d0:10:81:e0:65:0c:f7:f1:34:7a:2c:f1:aa:94:e9:
         e6:5c:97:3f:a6:3c:42:f8:02:71:12:da:36:2a:83:90:6d:e6:
         aa:c3:19:f2:a7:a9:f5:0d:5d:34:b9:8e:6c:38:56:e7:f5:c5:
         f3:13:09:2a:d7:e2:98:06:ea:42:11:35:a5:d8:cd:fe:55:59:
         68:74:9f:77:f8:90:c7:98:62:03:60:2b:23:6c:38:6b:9e:c7:
         a6:19:cb:9c:5c:d8:76:07:57:8b:9c:d6:a9:02:a3:b4:f2:ab:
         c0:d8:ea:0f:0f:ce:36:e5:c3:c4:6f:93:52:42:14:85:27:1e:
         b2:94:a4:9c:9f:19:ea:3e:0f:dc:96:86:5f:a8:a4:59:09:a8:
         48:b8:f7:e1:a3:34:32:5f:d5:a8:de:c3:4f:7e:cd:1b:49:ea:
         2d:97:40:60:d2:75:19:4c:61:f3:47:09:55:de:da:6f:76:b0:
         00:54:09:66:1d:38:54:8b:bb:f4:4a:07:ae:2d:22:50:6a:bd:
         5e:57:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:45:16 2025 by rpki-client