Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File:                     syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier:          BvABMDqzQZ+TlmRoCyBE6APNg5dhCuCiC2/8S49gYHI=
Subject key identifier:   E9:81:D7:4D:ED:4C:BD:F1:0E:E5:75:50:DF:A2:09:2A:0A:2A:A6:77
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer:       /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial:       01964FA330FD282BAB5561DA2DC1E9E08F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number:          103B
Signing time:             Sat 19 Apr 2025 20:00:16 +0000
Manifest this update:     Sat 19 Apr 2025 20:00:16 +0000
Manifest next update:     Sun 20 Apr 2025 20:00:16 +0000
Files and hashes:         1: 7Vf5R0kVboHfQe1HmwZydUmPy3w.roa (hash: CSR8lVlOICslmIH5THMhkf2ZR8pm8M7MZ0mWBD2ElFE=)
                          2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: 3vmiXNnomEPqk1Sn/t9aXpWf9tay8atk4aplj+FtUas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:a3:30:fd:28:2b:ab:55:61:da:2d:c1:e9:e0:8f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
        Validity
            Not Before: Apr 19 20:00:16 2025 GMT
            Not After : Apr 20 20:00:16 2025 GMT
        Subject: CN=e981d74ded4cbdf10ee57550dfa2092a0a2aa677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:38:c8:6f:88:da:cd:cb:b7:b5:6b:95:2c:7d:
                    60:cc:36:c5:29:ad:9a:d4:bb:0d:6a:2b:88:c6:1f:
                    7b:07:b9:49:c7:d5:59:8d:45:c5:d8:07:63:fc:cf:
                    0d:cb:b1:ad:9b:d8:ce:0a:38:74:1a:52:13:8f:38:
                    7d:36:54:5a:d7:d7:18:fb:1a:b1:ab:79:88:04:05:
                    d0:1e:c6:da:06:7e:56:b4:b5:62:f6:e9:08:05:15:
                    94:8f:24:b1:f7:f6:a9:d7:ec:94:e6:f3:11:10:44:
                    3d:99:8a:52:ea:d5:24:3b:c4:d9:6d:aa:6d:02:5b:
                    a4:2e:98:12:5e:fd:a8:ce:f9:a2:96:f3:be:12:63:
                    46:e2:2b:0e:08:72:2a:85:a7:e5:ad:28:39:9a:4c:
                    23:01:1d:a7:c1:ed:4e:7c:9a:9f:8d:43:f0:14:1a:
                    2a:f1:39:f0:cd:7e:9b:07:2d:85:1f:4b:6f:c2:13:
                    2e:15:06:39:8d:a7:4d:b9:1e:52:87:0a:02:13:b9:
                    63:d1:5c:61:67:45:36:72:60:21:41:2f:8a:47:92:
                    88:09:41:64:98:b0:bf:f9:b6:f3:b1:7a:59:f7:81:
                    70:58:4c:42:1a:74:78:f8:80:d5:40:6d:a1:e8:44:
                    cc:f7:04:5f:ec:ea:a7:78:49:84:9e:25:39:18:a0:
                    62:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:81:D7:4D:ED:4C:BD:F1:0E:E5:75:50:DF:A2:09:2A:0A:2A:A6:77
            X509v3 Authority Key Identifier:
                keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:7a:2b:be:f7:5f:c5:fb:3b:d7:b7:26:f7:4c:cb:9d:74:c0:
         5a:69:6d:e2:fc:6e:b3:86:77:7f:d2:d6:69:c3:03:72:44:47:
         a5:b8:15:3d:07:4b:90:2d:39:45:a3:8a:34:25:0f:0f:de:f8:
         86:87:73:87:a8:6d:9c:b6:bc:ba:9a:d7:8e:1c:e3:2e:d1:74:
         cd:68:cf:ca:9f:ff:b6:d7:a7:5a:25:63:31:6e:01:1c:88:41:
         be:20:ba:7e:c0:ec:a7:1b:15:b7:be:df:bb:c1:af:ba:9b:50:
         55:66:3b:f1:60:7d:39:03:ee:0c:7e:7f:c7:06:9a:a3:dd:2c:
         5f:30:c8:29:b7:38:96:fd:eb:45:f7:d9:f5:68:a4:cb:e4:53:
         7d:73:82:54:37:8f:9c:9a:21:c3:c5:42:17:0b:df:03:27:a1:
         d5:a5:54:b6:14:28:ae:ef:89:cb:01:4c:e6:c1:f2:1c:a6:fd:
         f8:db:fe:3b:f5:ef:ae:93:91:96:1f:50:aa:e3:38:36:be:21:
         51:ae:2f:3c:9a:53:81:a4:6f:82:ea:ba:7b:9d:9f:49:96:4f:
         be:c2:e2:f4:fd:82:83:4d:da:ad:cb:49:b9:66:ef:89:e9:f3:
         d9:21:01:c4:1b:5e:21:ab:74:55:6e:93:d2:40:9b:49:62:09:
         1b:4a:c4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:29:33 2025 by rpki-client