Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          +QZa5sJ9riZIJeCj7nf/RK0sHcMe83UsW/xJAo66c88=
Subject key identifier:   BF:56:DB:B7:EA:9B:67:1C:E8:9B:38:38:42:1B:4D:53:7E:06:A7:0D
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       01973CBF3BAA4770658C1E657F02A37E0B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          0BD2
Signing time:             Wed 04 Jun 2025 21:00:54 +0000
Manifest this update:     Wed 04 Jun 2025 21:00:54 +0000
Manifest next update:     Thu 05 Jun 2025 21:00:54 +0000
Files and hashes:         1: 9rmctfL499xq_XdP3NUoaQL9dt8.roa (hash: qmWMMe4np6q+yuy7dqi4TF4eBy7zv3FZoKf6q8wuZjY=)
                          2: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=)
                          3: Ec-3R5lSbUg4nkiWhBSyhOomcnQ.roa (hash: 62Xy6RK/IfEoVB5QCyI3LUCOJ3jLbPB31KKuSd8Y3RM=)
                          4: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=)
                          5: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=)
                          6: HIg12NFUg7Eb_z2q4_r85AxcQMM.roa (hash: +6laq1iJCnub2N6uqVJ0BPm3G2zkWo723oA1FoMeiQM=)
                          7: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=)
                          8: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: QrIxBfFOi08xFnzLJ689bN80OlaYyBrsoP5pG8+cxG0=)
                          9: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=)
                          10: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=)
                          11: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=)
                          12: o979ZrblSrorE9B9zxDq41HUGYA.roa (hash: kigJPd/hpDjSHjs7rzVTH64QUtXJbGCT3yl7CjOiV2A=)
                          13: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=)
                          14: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=)
                          15: sYn86kZKw4G3fFE4L_epfK7wXCA.roa (hash: fdCIDuHioT3v4CHhE018xXjPJRG+/QyggQzYrvRftpc=)
                          16: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=)
                          17: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3c:bf:3b:aa:47:70:65:8c:1e:65:7f:02:a3:7e:0b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Jun  4 21:00:54 2025 GMT
            Not After : Jun  5 21:00:54 2025 GMT
        Subject: CN=bf56dbb7ea9b671ce89b3838421b4d537e06a70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7e:55:05:48:22:47:ef:79:0b:83:65:72:de:
                    16:37:40:54:ad:7d:32:6a:d5:e4:df:e2:f2:1d:b3:
                    d4:42:df:d6:c1:02:64:bd:98:ce:73:06:76:b8:4b:
                    c3:da:66:cf:fa:b1:f6:76:f3:68:ab:ad:c7:fe:b8:
                    27:a4:84:8b:9c:ad:61:93:65:cc:e2:fd:d6:88:02:
                    be:c6:60:56:0c:13:28:d5:a9:d5:35:e1:58:dd:1f:
                    54:fd:8e:4f:32:8c:36:90:eb:c3:cb:82:32:b5:c7:
                    f1:89:4e:51:b5:c6:a6:50:de:a6:10:2a:d6:29:d5:
                    7d:a1:15:53:bc:a0:96:38:4f:01:14:be:a2:00:2d:
                    94:94:aa:6d:e4:3a:4c:46:b3:2a:a7:6d:df:ce:27:
                    d8:c2:d8:43:93:5f:53:cc:44:1b:8d:b3:2d:47:75:
                    b1:1f:e4:30:43:eb:83:2c:39:a5:ef:ed:f2:11:ef:
                    2b:ac:33:10:ff:65:a9:94:ca:66:e2:85:94:f5:a1:
                    ba:6c:70:35:7c:9b:e4:45:e4:93:9f:da:16:ef:00:
                    37:76:86:f6:6c:99:c0:2b:fd:7a:ed:52:97:f1:80:
                    3d:6e:24:99:b0:63:db:0c:e1:6f:70:6f:00:24:8a:
                    14:07:c4:61:97:92:16:b7:1c:7a:a8:57:f7:4a:5b:
                    38:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:56:DB:B7:EA:9B:67:1C:E8:9B:38:38:42:1B:4D:53:7E:06:A7:0D
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2d:5e:07:b9:97:3f:2c:85:4b:a8:fe:d0:de:73:fd:9e:09:
         4d:aa:b2:9d:3f:1e:54:20:04:63:fa:e6:63:31:13:1a:fd:93:
         02:3d:5c:5b:79:5d:72:f5:6c:88:92:86:c9:ac:98:2e:51:64:
         84:a9:28:98:df:4b:1c:f0:2a:63:34:27:cd:e5:5c:bc:02:4f:
         4a:08:37:81:50:18:8f:82:71:24:d6:d7:79:1d:bd:75:7c:32:
         25:a9:5f:c4:73:bf:e8:70:64:bc:73:e3:df:07:4f:49:40:cc:
         5c:e0:66:09:27:2a:50:c7:0d:20:1d:55:e1:e8:79:54:44:0c:
         a8:6f:63:7d:78:4d:4b:df:67:5c:43:a0:37:db:f8:08:9b:a5:
         71:c5:6c:19:32:00:b1:57:02:d2:54:3c:1f:49:49:44:95:b8:
         ac:7d:b6:16:1e:53:e8:1d:4c:48:33:0c:b7:48:ae:9a:35:ca:
         2d:f8:d8:61:39:78:88:c9:4f:08:61:2e:08:1b:34:0f:28:4a:
         83:7e:8c:46:f9:29:c5:9c:fb:7a:e7:95:0a:9e:d1:88:06:57:
         38:7e:15:12:1f:4c:87:89:7d:ff:e4:cb:36:4d:9f:d3:de:a0:
         e8:b1:9f:78:e5:98:a5:d3:76:9d:91:b8:6f:5c:d9:69:51:c9:
         67:b4:ab:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:22:44 2025 by rpki-client