Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
File:                     snjtj5eA8p2voi-f3wM3TaSYDpQ.mft (raw, json)
Hash identifier:          0Bt5T+pqFHfGuEm1/iqk/vRET3tKKYWs+6dMAW/ge2k=
Subject key identifier:   FD:11:57:CB:53:4E:9C:19:C2:C8:AA:F6:B0:12:D4:5D:3C:18:D6:9F
Authority key identifier: B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
Certificate issuer:       /CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Certificate serial:       019748550C44502B37FE7C3C483CFCDB660D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
Manifest number:          0FD4
Signing time:             Sat 07 Jun 2025 03:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:22 +0000
Files and hashes:         1: Q2ddpl6C3V4vYBl0I3228luG5oU.roa (hash: gKtH3NhXGtSIchcMlB2GM3eSMYDb2zE1qytNooqyMO0=)
                          2: snjtj5eA8p2voi-f3wM3TaSYDpQ.crl (hash: BbqE6S1PRDDas9O9tn5wGWsNwhCp54jX43q6R96YYDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 03:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:0c:44:50:2b:37:fe:7c:3c:48:3c:fc:db:66:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
        Validity
            Not Before: Jun  7 03:00:22 2025 GMT
            Not After : Jun  8 03:00:22 2025 GMT
        Subject: CN=fd1157cb534e9c19c2c8aaf6b012d45d3c18d69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ec:7e:7b:7e:d9:c1:e7:90:5b:01:f1:f4:de:
                    a2:04:1b:67:f3:6a:07:78:d6:bc:d8:27:89:14:17:
                    bb:ec:d2:5c:22:82:f0:21:3f:53:da:97:59:ae:08:
                    44:b7:d4:2f:a9:4c:a6:dc:f6:3b:8a:62:fa:40:c4:
                    5d:25:44:69:79:c3:8f:88:3a:ba:ab:b9:85:60:e4:
                    21:ef:c1:ce:d9:b2:19:78:ef:e9:03:f5:26:f7:a7:
                    bc:36:ea:c3:c2:ff:f3:a0:81:bb:c3:5b:f4:c6:18:
                    30:a9:30:11:0c:ff:91:90:86:bd:1e:40:57:f3:f7:
                    7c:07:ca:df:a0:39:ed:e0:46:e4:7a:f4:b3:b3:68:
                    76:2e:2f:70:7a:5e:1b:d8:ae:c8:3c:7a:d9:2f:7e:
                    9e:59:f9:4c:fd:f2:af:f0:c5:6e:3c:87:b1:35:7b:
                    5a:e4:f0:c8:d4:6f:c9:59:63:e2:4c:f8:df:23:89:
                    ac:54:57:84:c0:d3:c9:86:a9:fa:a6:a5:d1:97:d4:
                    8c:7a:ac:44:30:56:05:e1:a0:8f:fb:20:f5:4e:2f:
                    03:cb:84:b8:8f:a2:10:6e:65:bf:7c:23:cd:42:11:
                    72:e4:5f:80:d9:7c:2d:ab:db:33:cf:2a:23:9a:90:
                    01:d6:61:3d:d0:e2:8b:50:8e:7c:a8:49:9c:de:66:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:11:57:CB:53:4E:9C:19:C2:C8:AA:F6:B0:12:D4:5D:3C:18:D6:9F
            X509v3 Authority Key Identifier:
                keyid:B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8a:e9:96:ca:d8:b8:e0:83:28:29:3c:0a:f1:38:f1:5b:8f:
         f1:35:dc:05:2a:d1:0b:06:41:5a:78:a3:ff:c4:05:99:f2:02:
         c5:5b:3c:72:f4:fb:de:05:16:09:08:6e:21:9c:b3:81:c4:20:
         2c:94:e4:4b:e6:53:78:41:c9:fa:bc:c7:97:b7:ff:0a:8d:e4:
         90:88:9a:44:54:89:36:91:f5:8e:bc:f2:7f:1b:f2:ba:bc:8f:
         c8:19:e5:3c:23:d9:6a:47:ee:73:fa:b6:83:da:c3:fb:c0:23:
         14:d3:d0:04:31:0b:0a:2c:bd:b5:28:c4:19:cf:29:1d:a5:aa:
         44:b0:1e:c2:b7:0f:67:76:81:5c:91:c2:0f:e1:a7:b9:34:c4:
         a8:6c:27:64:fc:dc:3c:66:68:cd:c5:8c:34:5c:cf:60:51:a9:
         ff:c8:fd:2d:56:d7:ac:c2:4d:0f:a4:5a:97:fd:a4:7f:14:df:
         1d:fa:7d:c0:65:61:37:a2:ac:c3:c2:96:be:7a:38:41:86:36:
         28:3b:2d:e8:61:f5:ed:02:2a:76:e3:5c:22:53:58:6c:91:b7:
         32:25:b6:c6:69:22:61:38:62:28:63:9c:24:51:ca:3e:1d:58:
         1c:06:20:e4:c3:48:f3:e9:11:ce:67:b5:6c:00:6f:d3:74:f9:
         ce:08:b2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:56 2025 by rpki-client