Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
File:                     sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft (raw, json)
Hash identifier:          X24l7bgb710YU/ZfOUTkALioA5DWFbfwYXc4dXXD4Ms=
Subject key identifier:   39:41:3B:A2:C2:37:FB:E8:CC:D8:55:B8:1B:D3:94:28:22:8F:FD:D7
Authority key identifier: B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60
Certificate issuer:       /CN=b0b5ae0cf27526243b2376fed90c160dd7382160
Certificate serial:       01974D0E05662717BEE02A2DBAB1D632E928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
Manifest number:          037D
Signing time:             Sun 08 Jun 2025 01:00:53 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:53 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:53 +0000
Files and hashes:         1: sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl (hash: EBMkN2xsfRM3NB7pCyLLPFuktkIpB2QOdkYn5tg8Jcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:05:66:27:17:be:e0:2a:2d:ba:b1:d6:32:e9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b5ae0cf27526243b2376fed90c160dd7382160
        Validity
            Not Before: Jun  8 01:00:53 2025 GMT
            Not After : Jun  9 01:00:53 2025 GMT
        Subject: CN=39413ba2c237fbe8ccd855b81bd39428228ffdd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:3c:e4:95:7f:27:91:19:48:f0:34:67:78:
                    31:d7:05:ef:99:ac:e8:a6:be:c0:10:56:5d:de:2f:
                    f7:f2:53:f7:f4:d3:75:c7:f6:82:10:48:5a:ee:02:
                    8d:6d:7a:a0:d4:4b:6a:4b:53:1f:f6:94:1b:80:b9:
                    16:f8:4b:7c:bd:3c:dd:f5:0d:e1:c2:c2:2f:50:00:
                    c5:22:65:27:35:5c:bf:3f:6a:d0:6c:2c:b6:3d:cd:
                    96:d8:b9:49:b5:23:87:c5:92:c9:7b:34:1a:43:0f:
                    10:4b:10:2c:c9:9a:bc:e1:12:e7:d9:dd:5e:62:db:
                    4a:76:4e:ce:17:e3:7e:2f:57:08:bc:2f:f0:93:5d:
                    3b:f0:ec:ca:24:65:bb:7f:b0:d6:89:e3:95:c3:4f:
                    13:d4:70:5b:3e:16:ac:47:66:0e:48:3a:c4:94:67:
                    0d:74:cc:37:7a:c1:f1:08:87:af:62:5f:f1:89:47:
                    4c:ac:a1:3c:25:66:0b:15:1b:4b:d3:10:de:af:3e:
                    16:02:9a:a8:25:59:94:b3:27:b2:aa:cd:8c:f9:d4:
                    b8:88:5b:7a:e1:ed:8c:12:e9:01:77:ec:f0:30:21:
                    2f:02:c7:d2:ed:c5:da:7d:72:1d:31:94:6f:e4:de:
                    dc:0f:d5:18:27:09:a6:b1:a6:96:5b:48:3f:8d:2b:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:41:3B:A2:C2:37:FB:E8:CC:D8:55:B8:1B:D3:94:28:22:8F:FD:D7
            X509v3 Authority Key Identifier:
                keyid:B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:93:8d:c0:e0:ac:d1:c9:cc:72:e3:4f:eb:1d:aa:89:d5:ef:
         45:37:34:c3:9b:1a:1a:a4:56:ab:d5:24:e6:f9:d8:81:29:dd:
         f9:56:36:1d:3a:12:6f:c3:65:5c:72:90:2d:70:b0:79:ca:31:
         f5:ad:7d:fb:11:8b:e1:c3:20:1f:7c:bb:0d:f0:3e:72:eb:ce:
         47:87:eb:4f:0c:73:e4:f1:37:cc:cd:38:64:88:79:c4:e2:95:
         ac:ca:56:3f:ee:d3:3d:93:d4:2c:2e:1e:83:85:65:32:08:0e:
         af:42:c3:51:ba:75:dc:9a:55:ee:40:9a:af:d4:88:27:84:d8:
         3c:ab:a1:dc:64:c3:ec:09:ec:4e:9d:0b:d8:ff:93:a9:e7:c8:
         1f:18:37:97:d1:11:9c:f2:09:77:dc:ad:80:53:af:d5:da:b9:
         0f:02:7f:c2:79:65:c7:28:19:f0:87:46:7f:92:66:b1:55:8e:
         ba:89:4b:8c:e0:0f:49:f6:09:88:38:06:7e:e9:34:c1:bf:4a:
         05:cd:5c:8a:ab:dd:b7:93:69:b9:7b:01:d3:29:f4:a9:f6:c7:
         86:39:2f:6c:e3:78:d3:38:1d:a9:81:2a:47:07:b8:1a:e7:ac:
         d9:60:db:16:fd:6f:6c:14:88:45:1e:ec:9f:c5:35:20:e1:41:
         46:11:d7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:44 2025 by rpki-client