Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File:                     SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier:          j34H6h11Qo30AcPXeJnESO0dJ3C+CLWKtxbmOk7tJBM=
Subject key identifier:   13:09:99:25:6C:85:C3:2A:F5:DC:69:37:31:92:C6:69:F5:20:31:1A
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer:       /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial:       0197470BEBEEA8762195AD8E3286185514B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number:          097F
Signing time:             Fri 06 Jun 2025 21:00:52 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:52 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:52 +0000
Files and hashes:         1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: dwQPTY0k1+uxvzI6OkEOKAtfIJPQw+gWbx+3nCnfQVw=)
                          2: gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa (hash: ynLfSUBP+/RK0hSDUfdxyie+FGZVBwWsIpKno/W57hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:eb:ee:a8:76:21:95:ad:8e:32:86:18:55:14:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
        Validity
            Not Before: Jun  6 21:00:52 2025 GMT
            Not After : Jun  7 21:00:52 2025 GMT
        Subject: CN=130999256c85c32af5dc69373192c669f520311a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:b6:b6:a5:51:a5:c5:80:1e:f3:06:51:0f:
                    53:99:46:f8:10:7e:8b:f7:04:70:d7:de:dc:5e:ef:
                    a1:7f:e8:2e:22:a2:c1:3d:a3:ce:b4:2f:bc:9e:c0:
                    b6:af:98:91:28:bd:8f:bc:10:a5:b6:3e:ec:cf:7e:
                    e2:ab:02:37:47:bb:65:21:69:1b:bd:b6:6d:68:71:
                    0b:bc:05:10:f2:e3:bc:f5:03:c7:8b:98:46:b3:b2:
                    e3:c3:76:34:bf:12:b7:2d:d2:d5:a2:69:90:8b:ce:
                    14:f5:98:ad:28:51:88:ee:98:12:43:a5:be:8e:12:
                    7d:7f:de:a8:3f:ac:19:63:8b:32:01:28:e9:2b:73:
                    0c:89:01:2e:0c:f2:63:0f:c5:a8:b7:66:5b:4e:d9:
                    01:07:96:b5:4e:2a:e9:ff:1b:eb:a0:24:ec:ec:51:
                    33:f7:49:97:6d:2f:06:0b:bf:5c:1c:73:3d:54:4c:
                    5c:ef:bc:84:c6:f7:46:55:c2:81:0d:01:75:2f:99:
                    48:3c:ec:e2:7b:b8:74:71:bc:23:d7:ec:3a:31:07:
                    a8:33:1c:4e:74:23:ce:5f:f9:40:d3:9d:66:a2:de:
                    7e:61:9c:6f:8f:d1:1c:91:4f:20:ad:8e:9b:85:f9:
                    53:99:0f:de:6a:7e:69:cc:49:9b:e6:86:c8:93:e2:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:09:99:25:6C:85:C3:2A:F5:DC:69:37:31:92:C6:69:F5:20:31:1A
            X509v3 Authority Key Identifier:
                keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:59:17:b6:63:83:8b:b0:22:ef:e1:2f:59:91:09:c7:07:60:
         32:8f:85:0e:d3:4e:88:89:c7:2c:ff:8c:91:df:9b:ec:93:9b:
         19:4e:3d:d2:71:72:af:f2:f6:ba:a9:88:ac:57:dc:59:05:d9:
         6d:b7:f7:3f:64:b9:8e:0d:6b:c8:b9:bf:09:bf:f0:fc:98:8e:
         e5:6e:8f:98:60:17:79:1b:6c:1c:99:ba:05:a5:84:98:c6:80:
         a2:aa:9d:f9:d4:5c:25:3a:42:31:8f:e0:15:37:ac:e8:a9:7a:
         77:4c:b9:de:32:c4:7d:b5:0a:c9:00:d2:27:ec:50:8f:a6:cc:
         a5:36:05:74:1d:fe:98:48:b1:e5:04:e1:34:dd:71:70:73:b3:
         43:bd:9d:3a:e9:1a:8a:aa:04:64:72:ed:76:2f:7a:a6:2d:5d:
         d5:0c:c9:d9:02:43:51:1e:d5:20:c0:5a:93:4d:e4:33:28:7b:
         65:9a:84:53:93:2b:02:6f:ff:2b:61:77:f5:d5:a3:ef:6d:ac:
         a4:53:66:35:ae:e6:bc:6b:7e:0c:b0:d9:46:c2:2f:32:33:1c:
         bd:bf:f5:2c:14:c6:3d:62:a1:11:62:bd:34:f5:a1:64:63:73:
         ef:5d:42:aa:f4:e4:11:fc:f6:91:72:d9:ac:07:75:4d:89:f9:
         5e:0b:8c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:16:03 2025 by rpki-client