Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File:                     sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier:          pulk0MDn51+EHjepHPcUYi5UjdjPDB/IMfgXXVunc/8=
Subject key identifier:   F4:C3:26:CA:FB:49:F2:C0:1A:2B:BD:96:5F:BB:55:5B:86:04:85:25
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer:       /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial:       0197488C3C7CF41BE311B54D4404FE6D7D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number:          090D
Signing time:             Sat 07 Jun 2025 04:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:39 +0000
Files and hashes:         1: YijLZfZ1VVcQMfbO2kW4jsYTug8.roa (hash: f055fbJfO/jOl/pVZwNG+0XakEEdz2iyjouPpXHwKII=)
                          2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: CTwhfX3XTk9slH/BQfVnPnGeYAkCXp2It66q1drYyC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:3c:7c:f4:1b:e3:11:b5:4d:44:04:fe:6d:7d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
        Validity
            Not Before: Jun  7 04:00:39 2025 GMT
            Not After : Jun  8 04:00:39 2025 GMT
        Subject: CN=f4c326cafb49f2c01a2bbd965fbb555b86048525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:4e:ce:ac:64:a8:b2:eb:48:e0:98:62:22:
                    6f:6d:e1:7d:40:a0:95:3c:d5:dd:36:2f:63:a7:4e:
                    da:f0:f7:99:49:f8:6f:c9:6f:46:e7:68:36:df:10:
                    8a:73:2f:05:ff:71:e5:b0:65:43:d6:98:8f:65:70:
                    8b:52:53:e1:97:5d:7c:98:bb:1e:59:96:66:2e:1a:
                    f6:5c:a3:be:80:0c:07:d2:d3:7e:55:c6:17:4c:42:
                    d7:1e:eb:ef:4e:19:fd:d1:52:dc:ec:9a:0f:bf:43:
                    86:b7:80:fd:bd:6a:83:a8:f3:6f:b7:af:6c:fb:ac:
                    37:8c:01:b7:34:92:b9:fe:cf:77:fb:3d:2c:dd:ca:
                    44:9a:23:94:cf:c2:38:a5:bf:ab:a4:8f:01:8a:18:
                    61:8c:34:63:71:bd:c3:4c:78:bf:3e:0d:8d:0f:4b:
                    85:9c:f5:e8:b8:cf:f5:3b:4d:ad:64:37:72:5f:96:
                    04:65:e6:b5:aa:82:ee:0f:7e:c5:62:d2:dd:47:90:
                    d9:53:7d:36:f7:d2:47:86:27:77:7b:f3:83:b8:b8:
                    e0:4b:96:17:80:4c:d3:bf:08:23:c6:ff:20:fd:4a:
                    dd:24:95:da:af:6e:9e:b1:08:be:26:83:7a:e2:33:
                    27:07:ad:87:46:51:32:37:1c:f3:95:de:36:51:b9:
                    35:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C3:26:CA:FB:49:F2:C0:1A:2B:BD:96:5F:BB:55:5B:86:04:85:25
            X509v3 Authority Key Identifier:
                keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:39:bc:32:37:27:9a:f9:c7:77:c4:78:61:bd:72:60:a9:61:
         0b:45:b1:8a:a6:6e:7d:15:8a:da:77:67:60:ff:25:cd:0c:39:
         1e:e3:4a:88:49:44:1a:ef:65:57:e7:1a:fe:bc:21:3b:e8:9b:
         89:13:75:f8:d5:cc:72:89:24:82:34:5e:c3:e3:28:56:4e:40:
         b0:b7:97:88:9a:5c:a8:75:76:4a:11:f6:70:12:cf:78:1a:0f:
         db:2b:39:d7:e3:56:25:44:51:6f:8b:03:0d:0d:df:66:11:43:
         6e:a8:9c:20:bd:07:d6:d3:ab:cb:84:ac:c4:58:80:d5:94:48:
         2a:c0:47:50:ea:6d:88:65:e1:f4:2d:14:8e:18:f9:d3:96:e0:
         2e:5c:d1:66:3d:6f:71:41:86:a7:42:7b:a6:a7:19:3c:4c:fa:
         7a:8b:1e:db:c8:41:57:10:f2:11:42:95:7e:c5:4d:85:d8:6e:
         1a:6b:da:06:35:04:81:49:69:15:67:ac:f8:af:1f:c1:5b:b6:
         ec:e1:c1:dc:2a:a1:9a:75:74:46:e9:0d:ef:dd:93:05:a4:bb:
         07:a8:5a:45:9b:fe:1e:2d:36:5e:a4:1b:80:d7:a4:27:f8:68:
         d4:6f:0b:ff:1d:9e:3d:99:27:a7:c0:5b:27:ac:ac:7b:a2:6a:
         0d:21:7f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:33:23 2025 by rpki-client