Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File:                     SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier:          oyYxRm3gxMZvCqy5XQlz3ww/w3eUOSdhkV4cqrhtKoQ=
Subject key identifier:   6F:10:31:99:79:89:98:82:10:B0:BD:F5:CF:AF:5F:46:11:DD:E8:1D
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer:       /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial:       0197488D3B24E7155D0AFD1F57E94CAD94B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number:          0E51
Signing time:             Sat 07 Jun 2025 04:01:44 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:44 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:44 +0000
Files and hashes:         1: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (hash: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=)
                          2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: ntVjq2hxMJVOQyVxnPg7UrPVJIcUxBY11JFzoHSby/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8d:3b:24:e7:15:5d:0a:fd:1f:57:e9:4c:ad:94:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
        Validity
            Not Before: Jun  7 04:01:44 2025 GMT
            Not After : Jun  8 04:01:44 2025 GMT
        Subject: CN=6f1031997989988210b0bdf5cfaf5f4611dde81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:a4:3b:56:20:cf:49:92:5f:11:7e:e7:ce:
                    3b:87:87:45:f2:31:9c:1c:b1:d6:a9:62:6b:ee:98:
                    8c:ed:a0:81:77:92:c9:7b:24:5a:09:3b:36:6a:32:
                    a6:14:4c:6c:04:3a:ad:68:cc:f5:a9:d1:4d:e1:9f:
                    70:fe:97:c6:de:75:96:96:ec:f9:c4:52:dd:bd:82:
                    56:f6:1c:14:40:6d:82:94:e0:3a:1a:54:30:8a:f2:
                    02:8b:de:b0:3a:ad:82:ec:dc:01:b6:a0:ff:6a:6c:
                    c1:00:bd:df:5a:06:3c:23:9b:c2:38:16:d3:2b:e5:
                    ca:d1:6e:86:ba:94:22:ac:7c:f0:df:37:2b:a2:16:
                    8f:ea:6b:d7:04:2e:7d:3e:b5:49:c5:6a:b9:1b:70:
                    d4:47:8e:7a:d8:52:65:b0:d3:c3:5a:e7:a2:df:25:
                    1d:10:56:79:5b:2b:94:94:09:65:51:ed:e2:7c:b5:
                    6c:39:9f:01:12:b2:69:72:6e:b8:e2:51:73:dc:0c:
                    4d:0b:13:47:b6:bd:63:80:b8:d5:de:99:42:46:97:
                    c2:3f:2e:17:b7:2a:79:2a:83:d9:db:38:5c:5a:a2:
                    29:02:4d:5c:f1:34:d1:85:01:cf:0b:ed:24:97:bc:
                    d5:df:24:10:6c:8a:50:63:cb:27:42:4a:3c:04:05:
                    28:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:10:31:99:79:89:98:82:10:B0:BD:F5:CF:AF:5F:46:11:DD:E8:1D
            X509v3 Authority Key Identifier:
                keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:64:23:8a:b5:17:cc:a8:3c:d0:58:e1:36:67:c4:53:54:4f:
         f2:64:61:07:70:83:72:ee:26:67:1f:fb:a6:c1:e3:5c:5b:dd:
         50:10:da:a7:34:80:de:86:b0:a3:d7:72:f7:09:0c:7c:04:23:
         76:1f:d9:f7:ff:c3:a2:c5:4c:73:f8:b6:22:23:46:d3:bf:44:
         1b:30:e1:cb:33:b3:77:a1:b7:d1:42:0f:37:0a:e6:67:bb:72:
         f2:d6:ba:24:58:6b:ef:e0:78:09:69:b5:ee:09:1a:99:36:43:
         47:88:59:ee:f4:93:e9:05:65:22:8d:21:a1:96:99:5b:e3:7e:
         e2:cc:b2:0b:0c:44:93:ed:01:5a:58:b8:ba:f3:02:ed:b7:e5:
         63:63:3b:f2:a0:a2:46:58:1b:a9:52:00:54:0f:3d:11:91:b7:
         96:5f:8f:09:a1:45:3f:c1:97:8e:e8:4c:a7:e6:21:7a:cc:5b:
         85:91:bd:4a:bd:a7:4b:02:74:ad:0b:c3:b7:81:e6:66:86:7f:
         22:5d:d3:46:1a:39:09:7f:45:55:58:57:43:6f:41:a8:b8:f0:
         57:b5:18:bf:ef:bf:70:f3:88:f5:5c:43:88:09:8e:a8:99:16:
         8f:bb:e7:dd:65:7e:de:d6:4f:e9:92:d3:47:b5:f1:15:69:78:
         3f:82:14:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:49:05 2025 by rpki-client