Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
File:                     SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json)
Hash identifier:          8ztGPfo7jb4E5UKn2Q8+OH9PpFIijHfv6EfHu2kKmpM=
Subject key identifier:   37:C9:EA:58:C4:02:AB:D2:61:12:55:7F:E2:01:2D:C7:B4:1F:F3:ED
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Certificate issuer:       /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial:       019652DB6A1DE708C6B6F197212D5F77DF62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
Manifest number:          0358
Signing time:             Sun 20 Apr 2025 11:00:33 +0000
Manifest this update:     Sun 20 Apr 2025 11:00:33 +0000
Manifest next update:     Mon 21 Apr 2025 11:00:33 +0000
Files and hashes:         1: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: 3Zi8x4+lFb0v7s+QBRI4eqo2IHiwaAGKTXs7xgmmHWU=)
                          2: swB_r0IFBPm9Iemed8mXUpcDjzs.roa (hash: 4f+/BeqDILlbNbuoHwEa+IBP8dJNYECac82k/mVW3hE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:db:6a:1d:e7:08:c6:b6:f1:97:21:2d:5f:77:df:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
        Validity
            Not Before: Apr 20 11:00:33 2025 GMT
            Not After : Apr 21 11:00:33 2025 GMT
        Subject: CN=37c9ea58c402abd26112557fe2012dc7b41ff3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:4d:a8:cb:23:53:30:e5:8b:f8:e2:1b:e3:a4:
                    c5:2b:ac:34:34:52:75:b4:74:29:49:ff:1d:fe:2b:
                    7f:87:6b:4b:aa:d4:d6:a2:3e:58:31:61:0f:69:21:
                    8b:bd:94:e9:a4:df:41:18:7a:56:29:28:38:c1:99:
                    75:9f:7a:08:0c:87:ba:50:df:21:e7:ff:df:56:d7:
                    92:a9:82:de:53:ee:9b:b4:7f:c2:ad:1e:44:7e:8b:
                    ac:3c:85:fe:0c:42:eb:c0:c4:fb:8c:ed:be:17:fc:
                    b5:4c:e7:3a:aa:ec:08:78:e2:89:66:73:f2:88:f8:
                    3a:fa:a8:97:8a:84:76:a3:84:66:36:59:ea:27:ec:
                    df:7a:b6:68:24:63:e7:40:6e:4d:50:76:3c:80:14:
                    63:cf:6e:32:c3:70:e3:d1:c1:11:89:54:c5:e4:bf:
                    58:c4:99:ec:c9:3b:47:d9:bb:3c:a8:6d:90:1c:9d:
                    8c:af:a5:d3:43:25:c5:67:69:7e:4c:a2:e3:83:9f:
                    fc:d4:c8:51:bf:b8:5a:fa:ad:b9:85:29:00:b0:12:
                    ed:9e:70:a1:80:e0:ee:85:c3:56:e6:e8:96:4e:df:
                    b5:e3:3d:92:19:0d:b4:6a:51:a4:65:19:68:d4:88:
                    ca:68:6d:c2:c7:cf:bf:ee:36:6f:40:c0:2d:9d:55:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C9:EA:58:C4:02:AB:D2:61:12:55:7F:E2:01:2D:C7:B4:1F:F3:ED
            X509v3 Authority Key Identifier:
                keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8d:de:af:ee:29:2e:e0:f2:c5:c6:38:50:81:2c:5f:de:e6:
         04:ca:06:07:c6:ef:36:f3:0d:54:d5:33:ad:72:5b:bf:05:6e:
         64:4d:b6:5f:28:c4:e6:b4:06:08:bf:7f:af:47:fa:df:3f:fd:
         93:60:29:b9:23:b4:cc:6d:1f:d2:b5:73:a7:ce:c8:6c:01:e6:
         12:91:a2:44:da:40:2e:16:da:46:31:88:78:d4:ee:3d:ab:99:
         ec:60:92:1e:7a:c8:15:fb:53:dd:72:7a:8d:d2:5b:f4:dd:df:
         8f:8f:b5:61:db:ff:e0:10:5e:00:ed:20:15:68:f7:80:d7:6e:
         bd:36:db:07:c0:ee:b2:3e:8e:ae:f2:5d:23:60:cb:ab:81:0e:
         7b:2f:6e:f9:9b:e9:30:cf:1b:77:bb:b2:a0:c9:12:ef:ce:92:
         4b:66:ea:d6:1c:c1:07:56:d7:ff:db:b6:d0:a5:0e:27:df:e5:
         e9:2f:4b:80:a4:a6:5a:74:86:87:bc:48:6a:6c:03:27:a1:12:
         d0:de:c6:56:03:b6:92:ba:2a:28:bc:60:d6:07:14:5c:aa:13:
         2a:ec:69:1b:20:6f:93:e3:18:6e:3c:00:36:a8:23:71:21:05:
         1b:bd:15:c8:4c:9e:82:cc:a4:54:43:dc:e2:f1:58:1f:0b:bd:
         0e:50:f0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:10:23 2025 by rpki-client