Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
File:                     SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json)
Hash identifier:          bG363H/VJhAnI0Ek+8sPBRF2imXxVNAOnROMKM+fJxs=
Subject key identifier:   6F:5F:35:7F:1C:4B:3B:1B:1F:BC:52:FE:4B:AE:6A:63:B8:C9:C0:F2
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Certificate issuer:       /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial:       0197530FB5D96A3B39B69F8F80582789A484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
Manifest number:          0F8B
Signing time:             Mon 09 Jun 2025 05:00:27 +0000
Manifest this update:     Mon 09 Jun 2025 05:00:27 +0000
Manifest next update:     Tue 10 Jun 2025 05:00:27 +0000
Files and hashes:         1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: pgZjZAjkJ3ceDD4ew6FQGQqiOq0Kz3Ef9oRvlGitt4Y=)
                          2: sN71VdE_vP-brkQYYHxei4Ctk7k.roa (hash: Ng80yhJSUZ9ywzwtEcf5TCIYC5bSHVuPL+nXnqyIEIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:0f:b5:d9:6a:3b:39:b6:9f:8f:80:58:27:89:a4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
        Validity
            Not Before: Jun  9 05:00:27 2025 GMT
            Not After : Jun 10 05:00:27 2025 GMT
        Subject: CN=6f5f357f1c4b3b1b1fbc52fe4bae6a63b8c9c0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:a1:3e:1e:03:88:40:6e:e0:51:84:2c:6e:
                    bf:6d:44:bf:8a:e9:53:79:4e:81:a3:c8:84:b6:b0:
                    95:21:04:97:1f:97:44:ba:a2:53:4a:0a:29:28:1b:
                    d1:a7:03:5f:9a:fb:86:a7:19:19:8b:f2:d3:42:e3:
                    6a:43:b8:23:5f:11:9b:39:7f:8c:79:c7:6a:95:af:
                    f6:f4:d5:e7:b5:00:38:62:28:29:9d:18:a4:4c:6b:
                    64:60:1c:3f:ba:43:21:d3:82:50:09:de:ee:90:f2:
                    f0:10:c2:4e:95:a6:4f:44:3c:73:c3:e7:f2:35:94:
                    8e:8e:bb:82:6b:87:d5:8b:b5:80:c5:0b:5e:bf:94:
                    ee:e0:96:f1:81:66:67:d7:8a:b0:db:7b:1a:11:42:
                    b9:62:20:b1:98:bf:09:3f:e3:d4:7a:86:62:b8:3e:
                    ad:04:2b:d0:d5:63:f3:3b:7e:04:ba:14:6a:26:da:
                    34:10:72:ff:85:80:d7:ff:56:ff:30:8f:99:2b:a1:
                    f8:0e:4f:29:1e:08:0e:2a:cb:ca:58:13:0f:a3:7e:
                    c0:a3:dc:7d:97:98:87:e9:87:0f:30:5c:7a:7b:5e:
                    d8:7a:8e:4d:f7:fc:88:2b:ee:a3:db:03:bb:e6:68:
                    58:40:29:a7:c5:ac:c3:30:a6:6b:f5:fb:d8:97:3b:
                    da:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5F:35:7F:1C:4B:3B:1B:1F:BC:52:FE:4B:AE:6A:63:B8:C9:C0:F2
            X509v3 Authority Key Identifier:
                keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:60:20:55:8d:6d:2c:17:48:90:dc:05:f8:dd:6c:47:c2:e9:
         08:8f:3a:44:e8:70:42:c3:f9:9b:56:ca:4e:92:e5:98:65:42:
         1d:57:79:eb:fc:7f:c4:0c:1d:9b:26:7b:ec:7a:4a:f2:09:26:
         9e:19:f7:37:c3:44:17:06:5a:4b:23:96:ae:a2:a8:a6:89:78:
         40:bc:28:b4:3b:3f:16:d1:75:8b:b4:3b:03:8c:61:a0:ae:33:
         55:72:d0:8e:c2:29:75:5c:b1:71:30:d0:bd:8e:8c:94:e0:65:
         99:29:67:f2:f3:4e:f0:c8:3a:ae:d9:01:77:25:8a:88:7e:8e:
         8d:df:e4:b5:ff:14:f1:7c:37:82:d9:cd:1d:e7:ad:3b:be:d6:
         02:bb:da:f5:b6:1c:ae:3f:30:85:63:d8:00:94:b5:75:c1:0d:
         4a:ca:d9:c7:7f:6e:fc:e0:34:75:6c:96:4c:77:33:cb:fe:cb:
         8c:06:a0:d8:8e:99:9e:d1:03:97:b1:de:b0:ca:d1:ec:51:65:
         53:83:a5:06:00:e5:0e:25:ff:40:67:31:40:17:4f:2b:14:b5:
         5d:4a:5b:9c:b8:56:ea:c8:e9:84:43:11:96:7a:20:af:b9:3f:
         c4:0a:2f:31:40:04:35:53:6e:7d:4f:dc:58:36:07:00:00:f0:
         be:e9:33:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:08:46 2025 by rpki-client