Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
File:                     SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft (raw, json)
Hash identifier:          ZZEtf0HRpbEuLMoR7z+oKxGyJSlyWb3hBeu8gbKjdhI=
Subject key identifier:   9D:C7:62:C7:A2:EB:37:DC:AB:2E:75:36:8E:BB:5F:D4:10:17:C1:BB
Authority key identifier: 49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F
Certificate issuer:       /CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f
Certificate serial:       01974C699B313733D3CD4B484D46CB391EF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
Manifest number:          0DDB
Signing time:             Sat 07 Jun 2025 22:01:18 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:18 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:18 +0000
Files and hashes:         1: SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl (hash: ZgrfpGi/zPPSJC10txSjHabF2UnabXT54mh7RJhgqS8=)
                          2: qbL9OL5sc-w50AXrG2tZRkZnW2s.roa (hash: Q4+OtthvOte+9IlGsVQn+tB7AZLUhi+dropNGViFYc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:9b:31:37:33:d3:cd:4b:48:4d:46:cb:39:1e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f
        Validity
            Not Before: Jun  7 22:01:18 2025 GMT
            Not After : Jun  8 22:01:18 2025 GMT
        Subject: CN=9dc762c7a2eb37dcab2e75368ebb5fd41017c1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:9f:1a:60:61:42:71:73:8a:43:40:9a:e3:
                    9f:f7:36:17:86:dc:d1:79:5c:8a:13:db:60:b6:dc:
                    83:10:e1:93:02:50:6e:5e:00:23:2b:8a:d1:fa:94:
                    b5:ad:49:0a:9a:eb:79:f7:99:8c:73:d1:ae:fd:46:
                    07:c0:bf:f8:be:56:ee:7d:45:a5:81:bc:a3:75:17:
                    84:69:18:66:4e:e4:08:24:e8:2b:06:db:0d:24:61:
                    6e:5d:f5:bf:e9:a1:ab:36:22:57:cb:9a:28:72:8c:
                    c4:cc:26:d6:b5:81:81:e5:06:b9:af:d6:83:22:a2:
                    99:d4:0f:ea:bc:50:be:25:2a:8b:c8:5d:ff:41:52:
                    32:a4:76:a6:f9:96:71:52:96:5c:64:42:86:46:b8:
                    1c:28:7e:5f:4c:50:86:92:e0:45:48:3d:32:94:cb:
                    2d:5b:8d:5f:fe:b2:07:49:33:f2:48:f5:a8:16:b4:
                    04:9d:94:84:1a:00:34:1f:61:64:75:63:1e:58:e8:
                    e7:4a:db:c6:b9:c3:16:7d:cd:33:2a:39:f6:e9:d8:
                    be:69:b3:41:31:4a:03:e8:56:07:fc:98:68:91:af:
                    35:5e:9d:2a:c3:c9:ee:3d:f2:54:19:5a:8f:b8:99:
                    28:f7:b8:f6:64:ab:62:c0:46:81:ab:22:db:b3:d6:
                    27:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C7:62:C7:A2:EB:37:DC:AB:2E:75:36:8E:BB:5F:D4:10:17:C1:BB
            X509v3 Authority Key Identifier:
                keyid:49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:fd:5f:59:11:6d:ed:bc:4d:83:dc:0b:52:20:79:3d:43:07:
         df:0d:85:3f:ea:b8:ac:b2:b4:39:f1:77:c5:b5:eb:75:b8:f3:
         cd:e7:e2:e5:de:04:7c:e9:2e:f8:13:36:7c:f1:8d:07:ee:c0:
         50:62:19:03:cc:68:e0:c1:ce:6d:1f:9b:d9:a3:04:24:ab:38:
         83:37:d3:92:cf:43:b0:17:3d:c4:49:a8:6f:f1:99:8b:2c:ce:
         4d:b4:dd:65:0e:70:0a:f1:81:ad:36:a6:cd:16:61:d6:da:d2:
         f4:84:c4:16:e7:51:1c:16:f2:4d:27:3d:e7:09:63:31:3c:22:
         7c:34:ed:3f:0f:82:09:5b:3e:60:10:c6:a8:eb:55:26:d5:30:
         c9:4d:d9:4a:ce:80:94:01:43:ca:17:d0:f6:f2:d6:5b:ea:54:
         fb:0a:da:67:de:a7:c7:d9:76:e9:f9:c6:93:85:1c:47:0e:ca:
         02:01:9f:de:50:d0:06:36:df:fd:fc:32:3e:12:2f:9a:3c:6c:
         cc:6b:60:c6:b1:0b:a6:9e:5c:21:1f:27:41:46:df:4c:3f:11:
         b7:5a:c3:33:e6:fe:c9:1a:aa:2b:48:d2:8d:3b:94:c6:8a:06:
         19:b8:e6:4b:c2:3b:0c:2f:b4:f9:74:cb:41:b1:09:c5:0d:53:
         b9:d3:84:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:33:08 2025 by rpki-client