Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
File:                     sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json)
Hash identifier:          WtYb67bOf1YLzs4OVVk2PV2hYWAERElT+jgQ2Uf58kg=
Subject key identifier:   78:47:3F:41:68:81:4D:DB:71:F5:9A:3C:2A:BD:51:11:3E:5A:FF:2F
Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
Certificate issuer:       /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Certificate serial:       0197488CF4F4C261704AE4FAC142AB92E124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
Manifest number:          0C8B
Signing time:             Sat 07 Jun 2025 04:01:26 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:26 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:26 +0000
Files and hashes:         1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: NDNw1fVMTV6n8FW8hlda6apNUo4zfcmw8Vv6Hzys/V8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:f4:f4:c2:61:70:4a:e4:fa:c1:42:ab:92:e1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
        Validity
            Not Before: Jun  7 04:01:26 2025 GMT
            Not After : Jun  8 04:01:26 2025 GMT
        Subject: CN=78473f4168814ddb71f59a3c2abd51113e5aff2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:f6:e4:b9:3f:0b:4a:f0:e8:6a:2e:c6:7a:
                    aa:4e:f6:01:22:87:e0:b2:d7:50:46:43:d5:b2:fe:
                    35:08:47:d6:54:e6:18:28:79:cd:ce:f6:73:0d:f2:
                    fe:88:d2:23:74:47:32:c3:bd:14:25:b1:da:0e:e9:
                    a5:d0:22:77:b1:e5:1e:d1:e1:3e:dd:8c:2b:0d:1b:
                    ad:97:d7:a2:07:ce:61:96:95:ce:a6:04:1e:72:e8:
                    9a:fd:e6:2e:51:e1:3d:ec:35:9b:f2:70:ce:ed:24:
                    a0:72:6f:89:8e:ab:f3:87:fd:bc:e5:38:53:7e:3f:
                    3c:fe:66:93:da:1c:02:fe:2e:62:a6:96:0e:74:f2:
                    88:4a:be:cb:01:e9:89:b7:06:9a:55:4f:94:09:c6:
                    cb:74:66:8e:80:d9:bb:c5:48:5d:5a:1e:63:c5:44:
                    41:35:f4:c3:91:2a:9a:e4:22:1f:f0:39:22:7a:67:
                    19:0d:24:9d:51:9f:6d:70:b7:81:74:ec:b0:9c:26:
                    ff:c2:95:cb:ff:ea:ce:5b:8d:4d:a2:c6:e1:f2:86:
                    aa:42:07:c2:4d:15:91:58:11:77:1c:72:1c:5c:f9:
                    fd:49:ce:41:36:6c:a4:27:c4:51:ef:d3:24:ac:41:
                    cb:97:ae:74:ea:12:81:63:83:82:dd:40:08:48:4c:
                    1e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:47:3F:41:68:81:4D:DB:71:F5:9A:3C:2A:BD:51:11:3E:5A:FF:2F
            X509v3 Authority Key Identifier:
                keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:25:2e:0e:35:f3:71:4b:de:ce:fa:9a:05:25:b5:70:94:5d:
         b6:41:10:aa:7b:93:38:0a:63:78:3e:4c:38:fc:53:e3:c0:1d:
         7b:d1:47:d9:54:19:b0:c6:ec:e5:3b:6a:df:58:00:4d:3b:86:
         75:b7:70:18:54:4d:1a:c3:8c:5c:1c:25:16:18:72:0c:0f:b2:
         bd:ca:11:af:0c:c5:a4:ff:63:23:7f:f0:12:7e:b8:a7:c9:0c:
         5d:02:d0:47:8f:4d:4c:63:33:9e:6a:63:65:24:f0:5d:8c:af:
         5d:b4:0c:4a:00:21:f7:5f:37:09:fe:84:ed:ca:e9:ae:4d:47:
         8b:3a:0c:00:3b:6d:2d:69:a0:34:c3:cc:41:9b:38:ec:5f:a1:
         62:b9:2e:f9:d2:31:c7:c1:05:d0:e7:8c:47:80:82:9a:34:5e:
         d8:ca:74:ee:d6:9e:28:dd:80:77:10:ec:0d:a4:61:81:21:d4:
         82:9f:99:08:ca:89:0f:b3:1c:f3:3f:f3:b8:cd:2d:94:08:26:
         69:c8:06:92:9f:a9:8f:3a:49:88:dc:87:f1:d9:4e:2d:2f:60:
         0e:dd:3a:70:6f:26:d5:21:00:8c:1f:7e:6b:c2:1b:4e:32:9b:
         e9:7c:66:fd:7d:44:54:b8:f7:e1:14:2f:26:5f:8a:f7:a8:2d:
         65:7c:f7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:04:24 2025 by rpki-client