Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
File:                     02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft (raw, json)
Hash identifier:          RGfhv1htyRwsGjEJnJmdAG8r8xa5vbheOy/MXmdnlzw=
Subject key identifier:   5C:CE:75:C8:27:53:3C:1A:61:16:E2:99:37:C3:55:55:94:0D:60:70
Authority key identifier: D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54
Certificate issuer:       /CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
Certificate serial:       019748FA84F077DC6981A3F3DB177C9ED4DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
Manifest number:          0630
Signing time:             Sat 07 Jun 2025 06:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:06 +0000
Files and hashes:         1: 02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl (hash: 4QdLOnuyai/wlvxop1zaSgiS1btB/9951YfWxftg3do=)
                          2: W26ZqjqHqJjDL39ur5MOByNqIds.roa (hash: 0jU+Z1p1KvFeE69GaV/1hkIxIM6ZLT+t/K51maZsks4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:84:f0:77:dc:69:81:a3:f3:db:17:7c:9e:d4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
        Validity
            Not Before: Jun  7 06:01:06 2025 GMT
            Not After : Jun  8 06:01:06 2025 GMT
        Subject: CN=5cce75c827533c1a6116e29937c35555940d6070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:26:b6:3b:c3:bb:e9:6e:3f:2f:b0:eb:0a:12:
                    03:e2:19:b6:78:83:c9:7d:b5:71:5b:1b:15:54:6a:
                    7f:24:f1:93:34:1f:95:38:4d:81:92:4e:64:ab:73:
                    d7:35:be:8e:27:46:4e:5b:f1:13:d9:71:33:f4:51:
                    e6:9e:f8:ad:1d:26:5f:3e:3c:7b:07:97:66:b7:b8:
                    2e:80:ef:03:0c:df:b5:6f:a1:06:38:9c:83:14:8d:
                    37:ec:c3:99:c3:e4:78:76:b2:d0:15:27:fa:23:ac:
                    c1:a9:f1:b6:75:f2:ff:cf:1d:e2:f5:97:27:59:20:
                    bc:9a:1a:3d:0f:1d:e5:51:5a:c7:5c:8e:a9:8e:43:
                    2a:3f:7a:68:a2:3e:7c:da:98:c9:fb:f7:cc:ee:18:
                    5b:52:90:b4:0f:8f:59:67:ea:43:00:2c:5d:6e:92:
                    1b:e5:c3:9b:4f:50:8b:65:68:64:e9:6a:cb:c1:c3:
                    a0:64:d4:fe:08:ea:24:8d:6a:4c:bb:97:30:32:21:
                    ee:3a:22:18:12:eb:63:f4:5d:a9:8d:d4:4b:6e:13:
                    25:60:6a:9a:0d:7e:8c:ab:14:5b:5c:e8:9d:eb:11:
                    4f:24:2c:7d:3a:cf:39:a5:6a:fc:f9:bd:d7:50:b0:
                    bb:9a:d2:b5:44:8f:47:fb:b6:93:37:7c:ca:8c:21:
                    ab:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CE:75:C8:27:53:3C:1A:61:16:E2:99:37:C3:55:55:94:0D:60:70
            X509v3 Authority Key Identifier:
                keyid:D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:97:a9:db:61:e3:03:4b:5b:80:56:4e:85:17:cc:e4:2b:e7:
         50:c8:c6:67:28:c8:46:c5:2b:06:36:9b:6d:fd:53:49:9b:b8:
         65:fd:f2:63:24:3a:12:2b:12:60:e7:06:75:a3:0c:f4:b4:6c:
         1a:2b:4c:93:4a:4b:ec:69:01:32:69:1f:04:5f:c4:a7:26:d4:
         0d:96:dd:77:0c:5a:05:48:f5:09:5a:1a:b4:18:5c:0a:14:74:
         b7:d5:75:eb:01:91:64:17:b3:64:ef:56:20:50:8e:0c:cd:f2:
         06:d1:7e:de:e9:67:9d:24:cf:96:91:ba:09:3d:e0:24:3f:fa:
         65:61:b1:fd:be:d4:06:2d:f9:6a:56:16:64:44:91:bc:90:cc:
         79:d0:f2:ad:df:1f:35:39:f9:47:a8:c9:ca:01:e2:eb:6e:53:
         27:a0:07:9c:f3:e6:be:ab:75:4e:08:2d:13:2b:7d:ff:92:c8:
         d2:79:9c:98:14:2e:e4:45:60:35:23:c3:fa:e1:c1:f0:c7:ab:
         10:ea:b4:c9:f5:eb:21:c0:c1:d0:9f:64:a4:c8:bc:6f:f7:05:
         7d:45:e8:6f:0d:f3:40:dd:55:72:25:e2:2b:7c:3e:03:c8:35:
         71:3a:42:9e:9c:85:db:0b:f1:10:5d:48:fd:a5:be:01:9d:d9:
         a4:7c:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:24:49 2025 by rpki-client