Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File:                     SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier:          aU7N/psyW/IqlRLiPSBy/GQwQyHc5dIPwTmrpbplZB4=
Subject key identifier:   82:BD:9A:1C:5E:2D:54:75:D9:58:B7:EE:36:0E:F2:82:4A:AC:7A:D7
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer:       /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial:       0197499EE0DE646575441B5D5095C8975489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number:          1565
Signing time:             Sat 07 Jun 2025 09:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:38 +0000
Files and hashes:         1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: R8rcxl9d/9Lr3Wra6Ds81S5jkhqBwjSsoPoz10LOQ58=)
                          2: qamXgGdELqVwuCRXcGaE5fyjphY.roa (hash: XwiZQCHwX+Vwexgrkkuz5eMSgh62jyoQLxKiqhe1Bqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9e:e0:de:64:65:75:44:1b:5d:50:95:c8:97:54:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
        Validity
            Not Before: Jun  7 09:00:38 2025 GMT
            Not After : Jun  8 09:00:38 2025 GMT
        Subject: CN=82bd9a1c5e2d5475d958b7ee360ef2824aac7ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:e5:a0:db:49:28:68:6d:2b:2c:95:79:24:
                    de:c9:3f:81:2f:11:96:ad:89:9c:7a:e3:e4:9e:0f:
                    1a:20:c9:ff:d8:d8:f5:20:b6:fb:ec:80:b6:ac:20:
                    69:75:3d:df:7a:e1:cb:cb:dd:c3:16:56:01:c2:b9:
                    93:6f:dc:46:27:8a:92:0d:a3:b8:8b:09:a9:b6:42:
                    c7:9f:49:3e:3e:f9:2e:eb:f2:06:da:f8:34:f2:a2:
                    1f:e4:d0:54:23:1a:d5:80:80:26:85:87:89:ab:83:
                    69:57:ba:79:31:d2:cb:61:f4:fb:c2:71:bf:29:f0:
                    b0:4d:ce:08:86:8e:8b:fe:cf:df:2c:ac:21:55:a1:
                    fe:af:ab:12:26:79:41:67:f4:22:ff:f0:af:27:b6:
                    45:1e:95:1b:36:fa:bb:fb:94:4e:f3:99:95:1b:b2:
                    49:18:d4:55:0a:2f:3d:40:cc:3d:1f:38:ad:bf:03:
                    2f:a8:32:94:97:04:8e:a8:7a:d1:f9:95:86:29:1e:
                    d3:e5:58:e1:bf:2b:6a:85:03:73:86:15:fe:35:06:
                    01:ca:e6:78:71:e7:2d:14:3b:c7:f3:23:b4:67:30:
                    fb:21:15:24:07:44:5c:4e:39:9a:65:53:f5:e6:8b:
                    b0:c7:7a:ef:19:17:94:91:b9:cb:a3:cd:25:0b:8c:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BD:9A:1C:5E:2D:54:75:D9:58:B7:EE:36:0E:F2:82:4A:AC:7A:D7
            X509v3 Authority Key Identifier:
                keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:12:02:c8:0f:85:4a:f3:e1:d8:2b:42:bb:2e:34:8d:ab:
         07:9a:2a:bc:09:b2:af:8e:2a:ce:5d:01:f1:a8:6f:74:25:f3:
         ae:43:6f:14:50:cf:f8:dc:d6:4f:94:48:9e:4f:fb:f6:54:fd:
         62:95:10:d3:5a:05:11:dc:af:85:c8:6c:0e:e2:07:2a:7a:be:
         cc:72:dc:f1:59:d0:4b:35:f0:36:8d:c0:b0:23:77:bf:5a:2b:
         26:90:36:bc:ca:ba:2f:d6:3b:1a:50:35:4f:47:54:bc:8e:77:
         fe:52:df:e9:f9:c7:82:70:7a:53:1c:80:70:8a:b2:60:ba:3f:
         03:19:63:db:56:49:6f:fb:26:ed:39:b1:21:77:69:49:9f:1f:
         54:c0:51:b9:74:53:8e:e2:90:6d:17:c6:6b:a3:b0:15:a0:b5:
         11:1b:89:16:8e:c9:5b:d2:fe:26:ac:f5:f1:ac:55:93:40:d6:
         7c:8c:9a:54:62:3f:10:b3:6c:36:74:7d:7a:a3:e3:f0:cc:19:
         5d:24:e2:6a:ff:a8:c7:d4:bb:ee:22:f9:00:61:ac:ce:75:45:
         3a:30:48:ea:72:00:ed:86:ef:54:09:30:39:dc:f0:56:6b:cb:
         91:03:c0:93:43:2c:7e:a8:4e:54:32:9a:11:1a:71:2c:25:43:
         68:62:55:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:04 2025 by rpki-client