Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
File:                     Skati1EM9VlIXjYRVVuLQ571M7s.mft (raw, json)
Hash identifier:          HDESwhwVKq84rzzF6GlNFhe9qQPfbVE/xaW/fYXjtiI=
Subject key identifier:   E1:CA:CF:02:A2:74:5B:5D:AC:13:26:99:0C:52:1B:BA:64:EC:6F:71
Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
Certificate issuer:       /CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Certificate serial:       01974A0CAF89F043D15C3621F02D3893C69D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
Manifest number:          0561
Signing time:             Sat 07 Jun 2025 11:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:34 +0000
Files and hashes:         1: Skati1EM9VlIXjYRVVuLQ571M7s.crl (hash: iNDW9QORe0vQl5glzepq479c1y5QAPFXI2gyfQaePGw=)
                          2: YWHB5SFom3PZ1H1nBp8hYONydPQ.roa (hash: vl5j8Bemgq1rdDQ2l7TbBx5NbkCDljfvRSq6QiMNiQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:af:89:f0:43:d1:5c:36:21:f0:2d:38:93:c6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb
        Validity
            Not Before: Jun  7 11:00:34 2025 GMT
            Not After : Jun  8 11:00:34 2025 GMT
        Subject: CN=e1cacf02a2745b5dac1326990c521bba64ec6f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:55:bb:02:68:3a:80:a6:25:05:19:3e:4b:b8:
                    94:eb:2e:a6:f7:e3:51:3a:ff:b7:b6:a5:48:8c:fd:
                    1b:4c:3e:59:5b:48:6f:c3:c8:ea:70:21:49:20:d1:
                    aa:a0:e5:f7:89:64:29:93:14:54:25:ad:be:e8:f1:
                    86:6d:02:af:9e:dd:fb:8a:d1:5f:52:7d:9c:b9:ad:
                    f9:8b:89:a4:43:95:a4:61:fb:40:47:dd:18:dd:35:
                    98:58:aa:36:96:be:09:0b:17:e8:48:41:e7:bd:35:
                    96:cd:d9:e2:c8:ed:6c:d3:2c:0d:08:fe:da:52:43:
                    d4:fd:6e:38:53:c4:73:50:f1:cd:e0:f4:f6:0c:2a:
                    a0:0a:c9:c7:35:ea:94:27:88:90:b6:da:50:78:7c:
                    60:d8:b4:6c:a7:cc:25:ce:65:ff:d1:1c:a0:70:a0:
                    f1:fb:60:45:ad:0f:0c:14:74:d1:16:7e:eb:b8:45:
                    dd:e0:c2:23:32:37:6a:c2:cd:00:1d:a9:ca:5c:69:
                    00:27:92:9f:da:c5:7f:86:3f:27:3a:71:8e:38:54:
                    fb:af:61:62:18:00:ce:82:3d:92:f0:a9:3e:fc:91:
                    b7:0d:96:66:0a:4b:83:9d:7a:3d:63:d8:67:f1:7b:
                    87:ff:8c:c3:f7:fb:08:26:84:b5:00:96:04:22:99:
                    06:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CA:CF:02:A2:74:5B:5D:AC:13:26:99:0C:52:1B:BA:64:EC:6F:71
            X509v3 Authority Key Identifier:
                keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e2:c3:26:76:8f:b8:77:5b:06:bc:88:4e:68:ce:6c:fa:7e:
         7b:f8:54:a7:23:c7:ed:e0:95:2c:58:e4:3e:64:63:4d:ed:f1:
         1a:21:aa:75:6a:50:cd:63:4f:b8:45:6d:c2:94:67:6a:4c:e5:
         a6:43:b8:32:4d:15:f5:6d:53:68:36:b6:80:0c:7e:d3:7b:aa:
         74:28:80:e1:18:7b:4b:8f:c5:bd:e7:6f:fe:d8:86:bb:93:51:
         5d:7a:e2:ea:61:85:3b:13:08:72:13:ca:f9:1d:9f:44:d2:ed:
         2b:9e:5e:83:d4:0c:5f:77:11:6e:aa:a4:fd:d4:d0:21:d3:c3:
         ab:c5:74:a6:44:a4:db:cb:74:de:bf:43:c8:81:1a:af:10:4e:
         f2:44:85:aa:94:68:0a:d7:09:0e:89:ff:14:25:24:33:45:00:
         5d:da:19:e8:f6:95:93:55:1a:34:b2:42:fe:c0:32:f2:b7:74:
         a6:94:84:ab:85:0c:69:de:89:38:0a:55:d3:82:41:75:79:23:
         1a:6d:4d:2e:49:d6:24:c0:3f:e6:43:39:41:70:74:74:ea:bc:
         dc:1c:3d:5c:04:d8:64:a5:13:6e:d2:31:99:41:c0:d4:ce:2e:
         fb:18:26:26:f1:a8:2f:ba:ec:83:74:9c:a5:5f:4a:e8:6e:09:
         6c:29:90:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:41:12 2025 by rpki-client