Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
File:                     sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json)
Hash identifier:          ysPXxXIQgIhU3t0sLthS5FFBLWqZwOZeLxfmPsI3vXY=
Subject key identifier:   7E:63:76:F0:1F:E0:8B:C2:CD:D7:26:86:6F:07:95:69:0D:E6:57:F3
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Certificate issuer:       /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial:       019747E78AA466DB2214F07097A9AD8EF1CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
Manifest number:          0C04
Signing time:             Sat 07 Jun 2025 01:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:46 +0000
Files and hashes:         1: QmAm7-ckXWNCy_EyjMRgtbazq1M.roa (hash: cL7W6FgXh5+bmFrfSXRxDbf8HtHE6dFb//gf0dsJOB8=)
                          2: WdOqlklUlY-sNbaLSfkpvoRt0iM.roa (hash: nFChOa8TYCoMQ8iwf2JuylM1/1NoIavp13ZTbwdNwn8=)
                          3: kIN_jMTtiRLUszBNqKlNoyJk3dk.roa (hash: lHRqbJ9tYmnELEYhJx16n/sdjvBPGJLZ5vlonZ4KvjA=)
                          4: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: rB+HB0DTah2HCnEqjjG8xfr6paTwkJZ5VHl0e1KpPYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:8a:a4:66:db:22:14:f0:70:97:a9:ad:8e:f1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
        Validity
            Not Before: Jun  7 01:00:46 2025 GMT
            Not After : Jun  8 01:00:46 2025 GMT
        Subject: CN=7e6376f01fe08bc2cdd726866f0795690de657f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:00:ad:cf:35:b8:e5:cf:2d:ab:04:6f:13:3d:
                    37:d6:26:12:ae:bd:20:3e:93:14:72:00:91:35:0b:
                    33:16:26:59:71:1e:f8:e9:1d:f9:2a:49:5e:03:1e:
                    f0:03:c0:46:ad:17:24:65:6c:a5:2e:b0:6a:7f:97:
                    88:a5:3b:f5:83:c3:bf:cd:e7:82:f2:28:a6:75:da:
                    46:a9:a4:2f:c0:ee:19:97:29:8c:45:81:21:12:17:
                    a4:c7:bd:d7:3a:b8:96:78:24:69:74:5e:db:01:6f:
                    7f:ed:bc:71:58:15:04:21:31:34:e0:a9:4d:f0:d2:
                    55:c9:f1:c0:cd:b1:e8:fb:d1:e4:ef:e9:9d:c9:5f:
                    6a:3c:f7:45:09:c5:89:cd:11:4d:b6:ec:ea:f8:77:
                    5e:ed:8d:e9:71:6c:71:7d:46:cd:b4:ec:4c:6b:a4:
                    ce:89:ae:68:54:75:c0:43:f8:57:7d:ab:eb:09:82:
                    d5:b3:28:0e:31:4d:b0:9f:0c:67:95:6b:9c:fb:da:
                    2e:dc:ba:9c:a5:5f:a4:c2:42:41:ea:1f:a1:79:81:
                    ea:46:71:80:a4:ac:db:6d:92:40:ba:5a:22:a4:92:
                    e6:5e:5b:4e:e1:f7:92:d2:f4:0b:61:2b:0b:ed:17:
                    50:54:56:3d:62:fc:97:c6:13:f7:b7:c5:fd:0b:32:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:63:76:F0:1F:E0:8B:C2:CD:D7:26:86:6F:07:95:69:0D:E6:57:F3
            X509v3 Authority Key Identifier:
                keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:64:a3:68:23:49:97:c4:ba:03:19:8f:7f:d9:5a:66:de:8b:
         31:35:41:ae:2c:a3:ff:93:ba:20:b9:96:98:4d:71:af:f9:46:
         20:d1:a9:55:dc:6d:a2:38:61:2b:d8:6c:93:3e:f2:80:66:96:
         4c:7a:a5:f6:d1:30:e7:d9:75:04:ed:17:34:a9:c2:0e:3b:61:
         42:84:1c:3b:b4:5b:79:2d:cf:59:54:8d:65:5b:6c:35:28:01:
         61:76:4a:a0:6c:79:8b:ad:1f:96:01:90:86:68:3e:bd:36:fd:
         95:36:b7:88:40:8c:b2:e1:03:5e:36:d0:15:4b:19:b0:b9:b9:
         b5:33:3b:2e:60:41:70:1a:6e:23:0e:e0:87:5d:15:36:cd:ba:
         9e:c1:48:a1:de:41:25:8f:24:20:31:b6:c9:cb:95:d9:94:17:
         b3:dd:33:1a:69:42:b3:8a:04:16:b4:ce:98:b9:cc:ca:85:44:
         10:dd:22:8d:4b:87:d8:55:fb:1a:30:27:01:f3:a9:ab:21:39:
         4e:30:d2:7e:8a:8d:51:1f:22:76:89:04:1b:8f:06:f0:75:44:
         24:d4:a6:a3:90:9a:9a:b1:fe:38:f1:4d:fe:d9:a3:48:19:fd:
         e5:27:98:c8:fc:43:95:36:76:e3:ac:04:a2:81:60:8e:95:2e:
         b6:5b:06:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:53 2025 by rpki-client