Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
File:                     stsr_PWdmcpwgzcI_TADLyP-9IU.mft (raw, json)
Hash identifier:          1qDqXs1il4j1LvzOCA+EbucdCYqemB2RSZSrVXtxzqc=
Subject key identifier:   7D:E5:98:85:4D:AB:E9:BF:FF:5A:AE:58:8D:9B:D9:23:4A:51:28:4D
Authority key identifier: B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
Certificate issuer:       /CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Certificate serial:       01974B1F3843B674CD199BABBD30E376BC55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
Manifest number:          1549
Signing time:             Sat 07 Jun 2025 16:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:26 +0000
Files and hashes:         1: 8OSq_me_piuY9aTEESBxQ_Nz1Zc.roa (hash: jli/f4rA8lzODNLo/sC1h2DAhvEwSPZMgYQGoXMtAvM=)
                          2: stsr_PWdmcpwgzcI_TADLyP-9IU.crl (hash: 5BcrW6BW/peXrBTRv2rEtZ1KzgqPme8eapYeQpWn4mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:38:43:b6:74:cd:19:9b:ab:bd:30:e3:76:bc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2db2bfcf59d99ca70833708fd30032f23fef485
        Validity
            Not Before: Jun  7 16:00:26 2025 GMT
            Not After : Jun  8 16:00:26 2025 GMT
        Subject: CN=7de598854dabe9bfff5aae588d9bd9234a51284d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:60:59:81:ab:0c:33:b0:fa:01:20:3b:9c:d3:
                    8d:cc:f6:53:65:59:d7:2f:d1:06:ca:52:f0:42:93:
                    a1:a1:8c:c7:06:8f:dc:98:aa:04:2f:bb:48:12:7b:
                    3a:69:cf:b1:f0:d8:17:cd:bf:51:68:38:6a:98:11:
                    ee:a4:83:73:16:ca:a3:cd:a1:c4:e9:f8:f4:87:6b:
                    3d:0c:b2:91:4b:d2:cf:b4:6c:bb:0a:78:fa:52:57:
                    8c:9f:57:2a:65:bc:a4:05:d8:3f:49:3d:b2:57:2b:
                    52:2c:cd:f6:dc:97:7f:b0:4c:ee:59:57:f2:34:46:
                    d1:9e:59:03:8e:b0:c1:0f:12:bf:5f:33:a0:8f:60:
                    3a:68:82:3f:b1:ba:b2:72:32:30:3b:ad:95:16:bd:
                    91:a7:7c:8b:5a:8f:9e:d5:d8:7a:ba:1f:38:a9:33:
                    40:77:57:5c:f2:be:54:cf:a9:b4:8b:af:43:4f:c0:
                    9d:29:4d:c4:8d:9d:cb:e9:59:6e:8a:34:81:65:4a:
                    14:43:41:d8:06:43:11:21:c3:05:e7:45:05:07:3e:
                    40:41:ae:8a:9c:d2:07:cb:2b:1c:6a:9e:17:45:81:
                    ef:3d:1d:06:4e:0c:3b:69:a9:6b:07:dc:a8:5a:06:
                    ea:97:7e:53:59:c7:87:1b:b2:c9:1f:8c:d5:ae:e5:
                    e5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E5:98:85:4D:AB:E9:BF:FF:5A:AE:58:8D:9B:D9:23:4A:51:28:4D
            X509v3 Authority Key Identifier:
                keyid:B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:92:aa:ef:35:74:87:20:63:bc:ac:d4:b8:c5:83:74:55:53:
         61:5d:4d:f4:b6:9b:4c:22:d3:9f:4f:39:fc:96:ed:dc:2c:b9:
         71:27:cb:25:94:f7:5f:f4:46:d0:43:39:dc:3f:49:35:a6:56:
         8a:75:33:8d:f0:28:f4:95:b2:bc:59:72:38:1a:b7:06:1e:b1:
         f6:a2:55:3e:c6:05:58:3e:5a:22:73:cd:6d:03:6d:fc:e4:ad:
         a8:f4:ca:16:8b:1b:ee:e5:09:51:02:56:9f:0e:28:f1:68:ca:
         18:36:a8:88:e8:ea:f2:1f:95:82:ad:47:3e:dd:63:98:90:3a:
         41:18:09:5c:2e:6d:3f:10:2e:e5:6a:66:ae:3b:36:16:89:a4:
         7f:5c:dc:08:4a:b7:66:ae:14:47:ab:3a:3e:c5:b3:1e:81:a4:
         5b:1f:ee:15:6c:77:a1:ed:e6:21:64:b4:46:6a:99:a9:17:68:
         cb:d0:58:b6:2c:0c:f6:58:2d:b2:42:67:f0:b6:ef:51:52:fd:
         3a:b5:be:34:eb:a4:7e:5e:05:f2:16:3d:68:2d:5c:36:84:d8:
         07:ba:57:bf:b4:a8:ab:38:32:c5:97:38:89:83:27:80:fd:95:
         06:0d:81:1c:ad:a6:96:9f:82:51:20:fa:9a:da:b8:8e:30:5e:
         86:6a:62:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:02 2025 by rpki-client