Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File:                     syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier:          Yo01ppifFkgWYbJ4pxE2BbiZEjIEnSzxN7w+ESe1bKs=
Subject key identifier:   7B:29:42:D4:36:DF:FC:71:37:10:8D:20:FF:DC:F3:82:98:37:8E:21
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer:       /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial:       019748C2F7384C804BB9F1F132F29756F5D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number:          10BC
Signing time:             Sat 07 Jun 2025 05:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:26 +0000
Files and hashes:         1: 7Vf5R0kVboHfQe1HmwZydUmPy3w.roa (hash: CSR8lVlOICslmIH5THMhkf2ZR8pm8M7MZ0mWBD2ElFE=)
                          2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: dXzBwHtuwtMseeRDDQ4k/wycc7iQ9TsZD4pMNGdIJWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:f7:38:4c:80:4b:b9:f1:f1:32:f2:97:56:f5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
        Validity
            Not Before: Jun  7 05:00:26 2025 GMT
            Not After : Jun  8 05:00:26 2025 GMT
        Subject: CN=7b2942d436dffc7137108d20ffdcf38298378e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:86:d4:c9:dc:d1:c8:55:11:50:ed:35:48:
                    75:24:3e:1b:e1:0b:5d:37:d5:21:97:03:9c:e6:90:
                    db:e5:30:8b:a5:fb:3a:bf:cc:99:3b:a2:4f:62:47:
                    49:d1:c4:88:f0:a0:bc:8a:a8:dd:02:6a:bc:d6:9a:
                    59:c3:25:21:3d:32:31:80:b3:30:e0:78:58:a5:ab:
                    fa:5b:b1:fc:d3:52:28:41:33:8f:0d:fa:31:07:f4:
                    e0:e1:46:27:40:76:8a:3b:3c:43:c4:c9:5b:62:ee:
                    78:fb:9b:da:01:f9:28:e4:19:35:32:43:60:7a:15:
                    ff:b6:77:08:58:b5:1b:aa:f9:13:65:01:fd:b3:52:
                    c3:ce:38:d9:2b:38:28:e4:00:8a:9d:2d:08:d3:46:
                    b7:ec:d1:f9:bc:c1:20:ae:38:fb:c9:92:01:26:0b:
                    36:ff:a4:b5:01:81:fe:41:de:42:32:6d:7e:7a:96:
                    2b:a8:b2:c1:36:60:78:f7:1a:37:6c:0b:7d:b4:55:
                    84:82:94:c6:f3:fc:9a:e5:16:be:11:c0:6a:b8:16:
                    cb:7f:35:af:5d:2a:28:94:a9:6d:7e:69:e4:70:e9:
                    77:83:27:00:a3:b2:d3:f9:76:d3:31:b1:8c:e9:82:
                    24:82:3f:32:7c:29:4c:07:ed:70:fb:5e:b6:4e:bd:
                    f8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:29:42:D4:36:DF:FC:71:37:10:8D:20:FF:DC:F3:82:98:37:8E:21
            X509v3 Authority Key Identifier:
                keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:45:43:87:e1:81:fd:04:75:8e:71:1d:84:f5:32:22:6d:19:
         79:44:d2:d6:9f:18:16:43:6e:70:e7:e9:29:2c:e5:aa:51:a6:
         b5:e8:cb:ef:36:86:15:97:c9:59:82:da:26:a2:42:f2:7a:92:
         aa:c7:2f:3c:9d:ed:dd:27:2b:a2:2c:8d:08:ff:db:f2:b4:83:
         ca:3f:ef:98:e9:e7:f7:8a:f8:b1:1f:75:39:c3:fd:ce:78:fc:
         de:71:46:a1:2c:c1:73:bb:25:2d:75:d1:39:1a:f7:71:65:36:
         dd:0e:2e:d2:cb:6d:c2:3e:fd:60:6f:a5:c9:80:96:2d:08:1d:
         f8:8b:06:35:2a:70:b2:bc:93:8a:a5:42:d0:eb:27:a0:86:9b:
         0c:d0:5c:52:2e:06:9f:3e:1e:cc:7d:46:79:cc:44:15:15:4a:
         95:0f:bc:d6:66:af:ac:11:0c:ec:1f:49:e7:79:67:c2:cd:0b:
         a9:fb:cd:29:b9:6e:45:f4:d6:9e:6b:94:b6:e4:a1:48:cd:b7:
         5c:89:8b:77:10:c4:ed:ff:47:91:ac:47:0e:7c:73:72:88:63:
         c1:a4:b0:13:7e:05:40:59:9c:be:c2:85:2f:28:06:d6:74:e2:
         06:7d:5f:96:f5:b8:1a:55:12:79:34:91:1a:d9:31:06:04:d9:
         d6:3f:24:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:12 2025 by rpki-client