Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File:                     sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier:          BUczDhoThaaoz5uOuorhlvTfwNHSCztX5vFjXPccngU=
Subject key identifier:   C3:7C:37:72:85:BB:BF:3D:85:F4:BA:9A:4D:65:75:60:56:89:A3:A7
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer:       /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial:       019758DAE66AB35F34D3E39223FCE01BC1BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number:          1587
Signing time:             Tue 10 Jun 2025 08:00:30 +0000
Manifest this update:     Tue 10 Jun 2025 08:00:30 +0000
Manifest next update:     Wed 11 Jun 2025 08:00:30 +0000
Files and hashes:         1: 6iKkuLhTnDFWaq3-3shTrwGrJ8g.roa (hash: ss9t8FqhS0xrNtCTKl7Xpo6Vl1ClWOF8J3Gh9ZaVFpU=)
                          2: I-Uqa1zPH3U2lg8ZFnzuOmPnTWg.roa (hash: u740YP79Lg/XA3U3RRNbSWSMGjpptyvItjaGSDwTCrE=)
                          3: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: 5PuRvq3Si3abk3HOEOguz2JKR9yD1Hoi1nkkWnFLdAw=)
                          4: v0rFapiuVgAPd3myx6BzGGJPu3Q.roa (hash: xPkjdAicyKc46/gVu1t411DskLBNUbMsE7SCd3XdA1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:da:e6:6a:b3:5f:34:d3:e3:92:23:fc:e0:1b:c1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
        Validity
            Not Before: Jun 10 08:00:30 2025 GMT
            Not After : Jun 11 08:00:30 2025 GMT
        Subject: CN=c37c377285bbbf3d85f4ba9a4d6575605689a3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:67:62:63:e1:00:a5:67:31:86:63:f2:13:
                    2e:68:0a:b5:2d:b0:c1:d6:be:4a:d4:28:ed:4d:aa:
                    18:14:03:ce:cd:d6:d7:86:a2:8c:22:c8:dc:08:90:
                    41:4a:55:a0:9d:fa:17:d4:71:6a:84:45:63:2b:3b:
                    b7:48:0d:f7:64:3d:d2:6d:47:22:28:e2:28:01:a4:
                    f6:73:ee:90:1a:ff:e5:79:de:72:ee:10:b0:8f:f3:
                    6f:c6:f3:95:52:38:78:75:ab:49:78:4e:0d:ca:1a:
                    bc:d7:f6:dd:22:52:62:d5:5d:fc:f4:ef:44:f2:d2:
                    a0:43:17:33:bb:76:f1:28:4f:b1:d6:66:27:5f:0f:
                    16:aa:75:f9:8a:f4:5e:18:ec:5a:e8:13:70:5a:1a:
                    41:81:6a:bd:2d:b1:97:22:5d:64:8c:74:9e:e1:bf:
                    da:45:11:8d:03:03:f0:f3:55:71:fc:f9:f2:13:a3:
                    94:c1:cd:15:3e:e2:31:31:e9:df:80:d1:89:79:93:
                    5c:94:ed:42:72:93:10:2b:33:dd:3c:52:6e:af:af:
                    be:36:11:d7:6b:0f:e9:36:05:dc:86:d9:a5:78:be:
                    39:58:cd:4a:94:03:f2:3b:bb:36:b6:1c:7b:29:86:
                    7a:86:46:e2:16:48:89:86:5d:66:0b:f7:5f:3a:05:
                    dc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7C:37:72:85:BB:BF:3D:85:F4:BA:9A:4D:65:75:60:56:89:A3:A7
            X509v3 Authority Key Identifier:
                keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:17:f2:4a:f4:e5:2b:df:a7:3f:d3:26:a0:47:a9:b8:d6:80:
         07:d7:1a:6e:42:80:6c:0d:95:8e:c9:ea:45:e0:ed:e5:74:3f:
         a2:a2:35:bd:0c:80:b8:c5:02:90:fc:80:d7:dd:b9:cd:13:e1:
         6c:3a:78:35:20:e1:dc:99:f4:e2:d9:73:e4:c4:46:07:a5:03:
         6a:ee:4c:50:52:36:e1:c9:8d:5c:9f:e2:96:24:f3:dd:3d:06:
         1c:ac:e9:2c:ad:6d:98:e5:2f:75:00:72:e5:9b:5e:37:4f:e4:
         d2:47:ed:bd:a7:54:0b:77:ad:1a:fe:d2:a5:7d:19:b7:21:4c:
         ee:e6:07:93:04:f4:85:6c:0c:4c:37:8e:d0:72:0e:c0:74:c3:
         ae:db:09:6e:3f:a2:55:57:20:e6:67:6b:1a:94:a0:a3:9e:ef:
         ae:3b:0c:c2:5f:06:e7:17:f4:e1:0f:7a:87:90:38:3e:07:21:
         f6:13:fb:52:fd:e8:3a:24:62:65:34:d2:e1:0e:f6:04:ff:75:
         6a:92:bd:ae:d7:0a:e7:c4:f5:49:ec:ad:65:08:e7:97:3f:9e:
         cc:98:a3:3b:0f:2e:f6:1f:78:3b:d4:27:f1:b1:3d:5a:6a:64:
         17:d3:f7:15:ef:d9:c4:52:3d:d0:3a:62:08:c4:ea:be:7d:8a:
         d4:84:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:56:07 2025 by rpki-client