Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
File:                     SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json)
Hash identifier:          ggRSxenHleFYdP2+OyCU2l/+DwZpV/m7OBYBXQJETNk=
Subject key identifier:   47:FE:A7:B1:58:CD:BD:4A:CC:96:FD:01:B5:E0:1C:37:69:C9:84:5D
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Certificate issuer:       /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial:       01974D7C39B0DCCB4794BCA7AC7C39589071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
Manifest number:          0AD9
Signing time:             Sun 08 Jun 2025 03:01:16 +0000
Manifest this update:     Sun 08 Jun 2025 03:01:16 +0000
Manifest next update:     Mon 09 Jun 2025 03:01:16 +0000
Files and hashes:         1: FZ5EZpDq-K0XA4SjrzGHyd153to.roa (hash: b4KiX1j/3r//4ngjLPvb5RfQAtdM3BaY0Jf4yPv0wJk=)
                          2: NVd8LXx_N2OnP7Dz0qYfp0BrwyE.roa (hash: KXS5t23U3JN9IkH4G9USA7r6qnruCVWmREWySxRe2Ns=)
                          3: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: 6B0y8tIVRcodxac4gfcsRV1SAcTQlghjbSRT2iXWTEQ=)
                          4: cSVJv9Y-FnxxLG20frdAri_noBk.roa (hash: 34paWKddNtWaw0Vl7xzlk/3/M190Z6IXyvbGbAK4Tj8=)
                          5: u7FYseYTvFuik1kkZdQXan5NUT4.roa (hash: OILWNi9mv9AwF8S+yDdOr81iUCDmwjfaxbEGwvX0caY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7c:39:b0:dc:cb:47:94:bc:a7:ac:7c:39:58:90:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
        Validity
            Not Before: Jun  8 03:01:16 2025 GMT
            Not After : Jun  9 03:01:16 2025 GMT
        Subject: CN=47fea7b158cdbd4acc96fd01b5e01c3769c9845d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:68:3b:03:71:94:fa:d7:dd:91:e2:06:4f:5f:
                    37:c7:60:b7:52:78:94:62:5f:f5:65:b9:a7:22:85:
                    3d:c1:62:ef:b9:f0:1e:8b:17:f8:b3:5b:26:9b:a2:
                    4f:29:1c:2f:04:cf:44:61:41:21:5e:f2:32:0a:30:
                    ec:ac:74:34:64:e1:d1:0d:fd:03:c4:33:bb:0a:b5:
                    2f:47:47:d6:c0:b4:2a:ac:f4:31:54:f7:2c:85:23:
                    22:d4:3d:89:af:dd:ab:b0:70:21:51:a4:ca:ef:0d:
                    e1:d1:ff:ac:d2:72:c9:a8:a7:1b:ad:b9:ae:51:05:
                    9e:32:1d:27:31:7f:72:47:ed:3f:db:c1:15:28:84:
                    d6:4b:82:5a:80:a4:c8:c6:39:c4:1e:be:cb:53:fc:
                    ec:0f:31:7c:5b:90:12:95:5a:85:5f:d3:69:6e:91:
                    36:00:b4:68:79:84:31:c3:88:72:e1:0b:ac:57:70:
                    f5:ed:d3:f3:02:52:9b:3b:f1:03:83:8f:a4:bc:f1:
                    fe:4a:40:0b:c4:a4:2b:f8:2d:b6:ff:3a:03:63:36:
                    2a:f8:92:e4:8d:7a:57:84:9c:4a:ff:1c:7d:0b:48:
                    22:05:ef:94:51:49:3e:d2:e7:2a:b4:00:fc:2f:94:
                    62:3d:47:ee:8a:e1:8e:94:1d:39:7c:be:aa:bc:cf:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FE:A7:B1:58:CD:BD:4A:CC:96:FD:01:B5:E0:1C:37:69:C9:84:5D
            X509v3 Authority Key Identifier:
                keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:58:f8:d7:fe:8f:5e:a7:89:e6:f2:da:85:c6:fc:f2:e0:d2:
         8a:90:81:14:89:d4:42:0b:86:eb:3f:27:33:71:2b:80:88:dc:
         55:07:72:69:6c:18:94:8a:4a:43:05:31:8e:b9:a4:c6:d1:be:
         c7:ce:de:50:5f:5c:09:76:a3:ad:62:be:54:99:51:40:d0:a1:
         b2:28:3a:cf:2d:31:7e:27:f6:46:eb:1d:ba:72:b8:ed:20:30:
         cf:05:6b:61:f3:cd:da:92:6d:94:1c:93:ad:89:b9:2d:d4:48:
         99:07:d1:a1:ca:76:c5:20:1e:e5:17:a3:d9:e5:9c:5d:eb:d1:
         48:81:40:30:96:79:0c:f0:4b:e7:c4:6e:c1:02:5a:34:63:6c:
         2f:34:a9:d6:97:86:bb:8e:9c:2d:1e:df:41:3e:97:9e:ce:99:
         c1:93:6b:d8:25:d1:b5:a4:93:22:94:d8:61:62:cf:13:53:9d:
         40:78:5e:58:12:a4:33:89:01:e2:14:43:b8:0b:56:0a:eb:25:
         23:76:f4:3a:e2:96:d9:f6:c0:b8:0c:5b:b2:6f:57:a1:30:e0:
         d5:d5:30:e6:26:e2:cf:83:c2:01:d4:6c:ca:7f:4d:9e:39:40:
         4a:4a:92:80:7d:aa:a0:d7:e8:66:52:4e:d4:55:82:8e:81:07:
         b3:b6:88:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:20:08 2025 by rpki-client