Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File:                     SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier:          +a5cZYMVo/1+rQMeFUGpV9wIrz+2uxUSLQaQCiFnPuE=
Subject key identifier:   37:AF:1B:59:46:D7:69:A1:41:88:A7:AD:6C:6D:5C:D7:34:34:6B:EC
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer:       /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial:       01974B1F9538CB9052439EC289417AE544FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number:          0F78
Signing time:             Sat 07 Jun 2025 16:00:50 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:50 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:50 +0000
Files and hashes:         1: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (hash: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=)
                          2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: W3VD5J9gAXYXmg/AWEOQEpJ6akRhmZ4cqDDhCskt8js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:95:38:cb:90:52:43:9e:c2:89:41:7a:e5:44:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
        Validity
            Not Before: Jun  7 16:00:50 2025 GMT
            Not After : Jun  8 16:00:50 2025 GMT
        Subject: CN=37af1b5946d769a14188a7ad6c6d5cd734346bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:08:a9:08:27:29:37:1a:a4:37:0a:f7:ed:
                    68:4c:39:69:d3:f3:ba:51:fc:f3:d5:64:26:02:4b:
                    ab:95:ca:64:e6:35:ef:79:a9:77:e6:c2:c0:d1:9a:
                    25:59:75:d6:c1:81:f5:11:6d:77:72:0c:a1:16:86:
                    0f:14:99:b6:46:93:d4:c1:6d:15:70:5f:5e:ad:8b:
                    fd:dc:08:54:2c:37:f8:3b:27:4a:55:5f:0c:b1:97:
                    fc:a3:63:d8:e4:6f:b9:59:21:f3:7e:46:a5:80:51:
                    dd:2b:53:65:9a:32:90:be:70:6e:a5:b2:8a:a6:1f:
                    c7:53:ce:ce:3a:92:71:10:ab:36:aa:9b:55:39:43:
                    41:51:e7:be:8c:33:56:a2:e8:bc:fb:01:eb:9d:1c:
                    c0:98:74:7c:31:33:d7:74:2c:9c:24:ac:14:40:79:
                    67:aa:75:4b:e0:d4:6d:5d:ba:10:f6:e7:27:17:fc:
                    67:18:0e:45:b5:a2:6b:b2:2f:d3:ec:76:5f:d1:8f:
                    18:9a:32:a8:45:40:e6:78:74:04:bf:17:8e:3b:9c:
                    81:26:9a:c3:06:12:b5:27:57:0d:04:63:ae:ef:51:
                    09:43:10:ee:ca:dc:16:db:25:97:2d:da:b2:56:ae:
                    42:a8:2d:79:b0:a8:b5:3d:6e:0b:6f:a5:2a:5e:6b:
                    af:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AF:1B:59:46:D7:69:A1:41:88:A7:AD:6C:6D:5C:D7:34:34:6B:EC
            X509v3 Authority Key Identifier:
                keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4e:4b:27:d6:72:4f:bd:f4:04:92:35:e8:c8:20:9f:0d:9d:
         2c:50:2b:06:fc:94:a2:63:2e:70:26:3a:d7:a1:74:88:c7:c4:
         a8:8d:2d:23:1e:75:3d:49:f1:b7:5b:58:20:59:91:7e:76:9e:
         36:26:90:09:b5:e8:66:e9:8b:fb:ba:cd:3f:7c:88:43:cd:5b:
         21:36:a6:8a:b1:cf:7e:59:17:5e:73:f7:d1:68:2f:83:f7:1d:
         b3:fe:a6:c2:ce:fc:b0:7c:af:c7:db:fc:50:30:5f:00:97:4f:
         d1:68:42:5b:10:02:1d:f8:09:f1:6c:c3:b2:9d:ee:d7:0d:5e:
         10:6a:9d:f2:cb:ce:27:b6:3e:7b:d9:be:b4:1d:f4:9f:74:28:
         b4:eb:43:a9:86:41:4d:55:5a:13:20:22:79:3e:1c:bc:68:b7:
         b4:f2:17:95:f5:0a:41:f8:d6:96:fb:17:55:e6:62:ef:45:5d:
         71:99:03:93:4e:9e:19:f7:e8:da:17:2d:1d:23:5a:fa:d0:4c:
         f8:5d:71:ee:71:73:a5:fa:db:69:2a:21:90:5e:c8:94:32:0d:
         35:38:cc:6a:b5:a7:2e:0c:98:9b:a7:ec:b1:12:00:9d:68:1c:
         14:43:23:47:19:16:fb:d9:3a:1a:cb:d9:32:d3:02:f0:62:a1:
         40:99:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:59:15 2025 by rpki-client