Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft
File:                     SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft (raw, json)
Hash identifier:          x4/9CDHZ7Aj1CPEDbh5FiFKutFq6tAGY384oIXA2THo=
Subject key identifier:   6E:EC:BA:44:6F:AF:A9:DC:F5:FE:DF:38:4B:7F:D6:06:C4:AE:59:1F
Authority key identifier: 48:F4:95:E2:EC:9D:07:FD:59:5D:22:B6:28:D3:75:6E:9D:8F:A7:63
Certificate issuer:       /CN=48f495e2ec9d07fd595d22b628d3756e9d8fa763
Certificate serial:       0197C94B852DC1AD1027410B93DCE1918BB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft
Manifest number:          2F
Signing time:             Wed 02 Jul 2025 04:00:58 +0000
Manifest this update:     Wed 02 Jul 2025 04:00:58 +0000
Manifest next update:     Thu 03 Jul 2025 04:00:58 +0000
Files and hashes:         1: SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl (hash: ZJ6vuESgJvrGzq9CXNhMeMQyG4GYdvDfDZVOpEFwZ8k=)
                          2: qZWsXw0hoWQJjbaPgRbw4RgNUcs.roa (hash: ZO3W12AHJk04EL5GeY7ebFH6eGQvrnx8GB8nEx/wAoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:4b:85:2d:c1:ad:10:27:41:0b:93:dc:e1:91:8b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f495e2ec9d07fd595d22b628d3756e9d8fa763
        Validity
            Not Before: Jul  2 04:00:58 2025 GMT
            Not After : Jul  3 04:00:58 2025 GMT
        Subject: CN=6eecba446fafa9dcf5fedf384b7fd606c4ae591f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:27:5c:77:47:de:3d:79:78:3b:25:a4:cd:73:
                    a2:bb:57:f6:94:96:8e:c5:c3:77:87:04:a3:08:5a:
                    0e:6d:ce:5c:1b:79:91:88:04:8d:30:41:de:8d:df:
                    b3:96:9d:ee:6d:d7:76:4f:ca:72:72:e8:8b:7a:f5:
                    df:3a:df:ef:64:22:bd:64:13:23:be:05:f2:f3:89:
                    d2:20:3e:5c:a6:14:9c:5f:cb:96:c7:7a:1d:11:b6:
                    57:1e:25:3d:29:af:3c:b9:28:16:e6:cb:6f:de:ec:
                    d7:12:a1:6b:f8:a0:63:0a:c2:24:24:d2:ac:ea:c0:
                    c5:c3:98:a2:d5:33:11:a9:fa:f3:76:b5:63:d5:40:
                    c8:2f:98:17:b9:43:13:e0:8f:0e:1d:2d:1c:65:58:
                    7b:2f:58:03:81:43:b5:c9:e2:a2:86:88:b5:1e:96:
                    24:5e:fe:2a:24:38:0f:b3:9f:2b:f3:eb:27:47:fa:
                    00:8c:04:66:fa:4c:8f:7f:ca:2d:0b:87:85:55:9d:
                    17:21:d4:84:be:36:0a:5a:52:e3:12:ce:8c:c3:ea:
                    15:34:f9:52:44:e2:dc:cc:e1:fd:16:20:b8:05:dc:
                    ca:14:5a:37:d6:63:36:27:8d:91:de:c4:15:b5:ed:
                    0d:f6:08:2b:59:8f:ab:d2:95:a5:69:80:90:6d:8c:
                    32:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EC:BA:44:6F:AF:A9:DC:F5:FE:DF:38:4B:7F:D6:06:C4:AE:59:1F
            X509v3 Authority Key Identifier:
                keyid:48:F4:95:E2:EC:9D:07:FD:59:5D:22:B6:28:D3:75:6E:9D:8F:A7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:48:de:7e:93:d4:d2:b8:93:ec:a5:fe:20:71:5f:32:23:85:
         47:c4:0f:3d:16:7a:8e:35:33:77:87:9c:5c:2c:0f:a1:1b:72:
         4a:d6:75:12:ad:27:b2:48:71:b1:16:c2:76:67:d1:a5:e2:6c:
         05:10:ef:b6:39:74:92:99:d9:bb:ce:eb:17:50:31:3a:8e:d0:
         90:33:d1:d6:88:41:36:b9:e7:e9:19:fc:1b:74:68:45:54:13:
         3e:4b:3a:50:3f:43:8d:e6:db:55:6a:4f:d1:13:b8:e1:68:6e:
         86:6a:7f:34:0f:55:03:51:73:91:b7:5d:aa:d6:5b:6c:99:df:
         cb:c9:13:d8:d1:51:27:32:a6:f8:25:0d:e9:20:8e:58:d1:6e:
         e2:d0:e0:12:31:26:7c:a8:0a:1c:5e:25:e2:82:ab:43:b0:e1:
         4e:fa:4a:95:75:c2:74:0f:65:66:b6:c2:7f:91:3c:1b:13:c5:
         0b:af:48:99:ff:be:09:32:19:6f:6c:50:72:0e:c7:ef:48:70:
         bd:71:b2:37:09:c8:9f:b3:d4:5e:c1:1d:d7:d3:bc:c1:02:45:
         28:45:ee:97:f8:66:c4:f9:74:48:f6:44:a0:22:13:27:ec:ba:
         8c:e1:fb:5d:6f:ff:e2:53:a3:62:5f:35:20:df:e2:f5:30:94:
         fd:d1:ed:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:40:27 2025 by rpki-client