Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
File:                     scIIojstTYe-k_idUyvG9EkIgZs.mft (raw, json)
Hash identifier:          n2L0US9sblRu1DTYC74c8JRx/IZWG2iMmuOf4a/UvNY=
Subject key identifier:   BD:E8:05:6B:8F:C3:5F:1A:A5:4F:8F:AF:D7:09:AC:29:00:D2:34:96
Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
Certificate issuer:       /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Certificate serial:       019745C27D60ECDE6B53A1ED2A2858B492C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
Manifest number:          09DE
Signing time:             Fri 06 Jun 2025 15:01:03 +0000
Manifest this update:     Fri 06 Jun 2025 15:01:03 +0000
Manifest next update:     Sat 07 Jun 2025 15:01:03 +0000
Files and hashes:         1: St1eW7huW5NWmrTlCcZNOVav4YY.roa (hash: L1r59p9it1NHOb7n3iknNAhhpFyt7umgYxP2fwKVRnQ=)
                          2: scIIojstTYe-k_idUyvG9EkIgZs.crl (hash: lJtbzI1OTr9RHuli8Mxte2NGGsAxo20ODotNYEQ0JQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:c2:7d:60:ec:de:6b:53:a1:ed:2a:28:58:b4:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
        Validity
            Not Before: Jun  6 15:01:03 2025 GMT
            Not After : Jun  7 15:01:03 2025 GMT
        Subject: CN=bde8056b8fc35f1aa54f8fafd709ac2900d23496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:ce:df:25:27:4a:f1:e5:a9:a8:6f:b0:51:
                    43:a8:72:7a:0b:1c:d8:88:41:8e:ce:96:5f:0c:31:
                    15:d4:43:a0:6d:62:51:9c:c4:60:91:89:dd:bf:b4:
                    58:7d:32:5c:78:34:f7:0b:a3:1c:ab:ec:aa:40:8a:
                    4d:4e:26:49:48:02:92:5d:96:71:f4:d1:9a:3e:c6:
                    ee:bf:07:4d:e1:d0:a0:a2:cb:9b:3e:bf:b3:f5:c7:
                    75:a3:30:57:1e:90:2c:e3:5c:e1:77:7d:02:7f:25:
                    60:93:51:b8:9e:5e:da:c3:3a:7a:c1:a2:f2:90:5f:
                    42:5b:65:0f:6d:5a:5e:b9:dc:ff:2b:7a:c8:15:95:
                    8a:9a:7c:01:90:30:8d:0b:fb:76:21:c4:0a:af:24:
                    9b:29:3b:08:6d:68:7c:2f:ba:c4:08:30:a3:d1:ab:
                    ec:cc:cc:cf:30:76:d9:a0:d2:a9:93:ca:56:c2:28:
                    61:b6:7b:b4:55:ad:ad:6f:9f:c3:5a:2b:55:92:5e:
                    35:ce:8b:34:19:2a:d2:c9:4a:a5:47:c9:2b:53:43:
                    85:7d:00:8d:17:05:ac:44:96:18:cb:17:3c:15:16:
                    ca:27:e9:43:97:bb:b6:bd:cf:45:d0:8b:da:9c:8e:
                    da:40:19:8f:43:71:c4:eb:59:4c:14:e1:a3:bb:94:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E8:05:6B:8F:C3:5F:1A:A5:4F:8F:AF:D7:09:AC:29:00:D2:34:96
            X509v3 Authority Key Identifier:
                keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6e:ee:e1:b0:d4:bc:20:99:24:10:5e:54:96:1c:46:f4:25:
         ee:9e:b2:ac:43:c7:35:9d:c0:d9:f0:70:ac:34:8f:b9:60:56:
         af:c7:b6:ba:e4:b0:87:ce:49:54:d3:8b:38:cd:f1:0a:99:5c:
         72:12:a6:63:2e:91:27:61:4a:34:64:63:ca:37:28:6f:1e:fa:
         b6:db:57:f6:2a:57:83:a5:2d:32:1e:83:f8:55:20:90:e6:7b:
         65:5b:e3:59:8b:17:02:a4:21:ca:2e:6d:a4:99:e2:5d:0f:ba:
         02:0e:e6:2d:10:f4:9a:0b:1d:da:78:d8:8a:90:78:dc:c8:9f:
         73:df:09:f3:49:e7:29:aa:f3:1d:dc:b5:ab:ec:fe:85:33:7c:
         8b:cf:36:2e:a2:f9:11:c8:19:15:db:7c:09:78:83:8d:14:28:
         7e:1d:c8:36:7a:e1:87:85:88:ca:21:f7:7e:51:0f:ce:5d:1d:
         67:66:b0:87:1e:70:5b:71:ed:a0:04:79:fb:f9:bf:2f:47:4d:
         e2:69:6d:6c:d9:14:b8:8e:ec:fd:ce:8f:20:96:25:02:88:59:
         c2:6d:c0:94:7f:86:f0:84:be:55:23:79:d8:48:59:fa:61:a4:
         0c:a2:ee:ee:c7:34:25:c9:b9:ab:2f:ee:fb:25:91:a9:6a:8f:
         c0:af:a6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:23 2025 by rpki-client