Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
File:                     RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json)
Hash identifier:          XL66niksLZm4wMyqZv+dM9evtik66kdskogqtcQcFvo=
Subject key identifier:   10:50:95:65:EF:EE:AA:4A:6D:75:94:E0:31:B6:36:06:35:EF:A0:37
Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
Certificate issuer:       /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Certificate serial:       01974D450D4920D13490D70BEC3214239D0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
Manifest number:          B1
Signing time:             Sun 08 Jun 2025 02:01:00 +0000
Manifest this update:     Sun 08 Jun 2025 02:01:00 +0000
Manifest next update:     Mon 09 Jun 2025 02:01:00 +0000
Files and hashes:         1: 6XJE8rlYoWtrh2ad3Kvm7Q_y5CQ.roa (hash: 7BUcSs/WeuS6GOcIo66oyt8ibf2WB0YlmBoooxU7KVI=)
                          2: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: sUlIUAxURkuKyVfw7PIsCXT51KorDE11IOq6Uy1k7ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:45:0d:49:20:d1:34:90:d7:0b:ec:32:14:23:9d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
        Validity
            Not Before: Jun  8 02:01:00 2025 GMT
            Not After : Jun  9 02:01:00 2025 GMT
        Subject: CN=10509565efeeaa4a6d7594e031b6360635efa037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:d6:45:07:8b:71:21:c8:59:c2:26:95:fd:
                    65:03:43:48:8d:53:d8:bd:b8:09:dd:40:0e:a4:86:
                    e0:35:a6:54:f9:6a:2e:f9:b3:4e:b8:5a:55:36:f3:
                    aa:66:8d:69:b8:0d:1c:77:2e:86:f7:dc:09:0d:07:
                    28:a9:8e:9b:00:48:d4:47:03:18:d6:d8:f1:bc:2e:
                    bd:34:14:21:11:59:3b:ef:d6:bb:9d:a9:f4:79:b6:
                    a1:11:c7:cf:63:a5:22:98:58:18:74:41:15:2c:e0:
                    d6:84:e2:16:c1:ff:05:ea:7d:95:2f:46:a2:65:0a:
                    be:ae:62:76:3b:f9:ab:46:7c:1c:62:c3:51:1c:74:
                    26:f9:ca:9b:0b:17:6a:f4:f5:0d:6a:d7:f8:e4:23:
                    e6:3a:f0:bf:39:e3:f3:3f:ed:00:85:e0:49:71:31:
                    7d:a4:b4:bd:10:90:c8:bd:54:17:11:90:8d:a8:0b:
                    9a:1d:9d:d9:37:94:34:56:bd:c8:b0:88:e3:04:f9:
                    8b:f2:ff:c6:52:ef:d1:a3:2a:58:f5:3e:3e:5a:93:
                    96:3d:1b:27:86:48:21:70:b0:20:9b:c7:86:12:46:
                    d0:77:79:de:52:5b:21:64:dc:62:ad:3c:3b:3d:62:
                    29:a7:ef:ff:6d:c2:66:d8:6b:27:3a:1c:e1:1e:2b:
                    59:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:50:95:65:EF:EE:AA:4A:6D:75:94:E0:31:B6:36:06:35:EF:A0:37
            X509v3 Authority Key Identifier:
                keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:56:6c:30:39:e8:d3:7f:8a:e5:4d:21:f3:5d:af:79:99:c9:
         8d:7f:be:9b:9f:fc:59:fe:80:3d:12:74:1b:61:97:eb:d7:48:
         42:fc:35:28:f6:b7:24:e4:a3:6e:6c:39:dd:f0:af:08:ff:83:
         1d:5b:6a:e9:dd:5a:75:02:c2:65:ee:40:47:af:8a:90:01:05:
         c7:e1:2a:62:1c:74:a4:26:30:8f:a1:40:3d:0f:ea:8a:34:77:
         ad:5a:3d:22:41:f3:5e:e1:ae:2d:df:92:93:e3:db:cd:d7:7d:
         e4:29:f0:1a:57:d7:14:52:28:a2:41:15:1a:97:86:3a:5a:3c:
         42:fa:0d:f5:47:22:33:e2:b2:43:c7:53:62:0e:2c:36:dc:e1:
         72:12:40:ab:6a:08:86:c2:a7:55:36:fd:65:f9:85:2c:51:ab:
         67:78:ae:75:82:49:78:c4:df:03:f7:76:c8:57:ed:bb:c8:90:
         41:4a:ec:36:a2:46:e2:ac:e5:8d:9c:91:e6:a3:37:ce:53:89:
         a1:98:83:07:a8:21:58:35:dc:cf:49:1c:fc:8d:e4:4f:14:2d:
         a2:05:12:cd:f8:a3:7b:7f:e3:bb:bb:06:b0:6f:31:09:64:a0:
         4b:a3:bb:50:91:2f:7e:a3:8e:11:1f:d2:90:67:ce:bf:b9:10:
         e0:34:52:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:57 2025 by rpki-client