Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
File:                     SYKxcZtP7HCLpmsper4NsI-tDh4.mft (raw, json)
Hash identifier:          SfJ+WdvI4wA7DYnh1b+a56htNv7chxLpXu8GcSFc7/s=
Subject key identifier:   92:73:D3:6C:13:1C:C1:24:78:69:3E:BF:D5:AE:74:6F:D4:D5:F6:67
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Certificate issuer:       /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial:       019754228A4A4F04702A6141A5E2B3B03271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
Manifest number:          1353
Signing time:             Mon 09 Jun 2025 10:00:39 +0000
Manifest this update:     Mon 09 Jun 2025 10:00:39 +0000
Manifest next update:     Tue 10 Jun 2025 10:00:39 +0000
Files and hashes:         1: CLHhdOeMNXgExKSCdON9sy75K9Y.roa (hash: 38I9hpL0OwteLRFzo32bZbguPasIk9LP7nDY3tAu3zY=)
                          2: Kw1AzsNWjphqCxFEI8zvxxKk-4E.roa (hash: 02mwLZVS9V2HuLFBIdWLYALyxWsEeq02GbwMCR2pv1g=)
                          3: Mz_0oopSyUD8tIkNMNqzhKplVuM.roa (hash: DOtqb1hTDcb0EkPiiKGPxHU95felEP0mxUFdKqkLpas=)
                          4: SYKxcZtP7HCLpmsper4NsI-tDh4.crl (hash: hxPBrlP5KbBkzZWIVKfaa9Gjk5djgjCS4h+GbLTC4oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:22:8a:4a:4f:04:70:2a:61:41:a5:e2:b3:b0:32:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
        Validity
            Not Before: Jun  9 10:00:39 2025 GMT
            Not After : Jun 10 10:00:39 2025 GMT
        Subject: CN=9273d36c131cc12478693ebfd5ae746fd4d5f667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:84:b6:6b:4e:dd:a9:4a:9f:8b:fe:45:b5:
                    08:93:38:76:30:68:58:9a:2a:8e:36:11:fe:8b:3a:
                    af:32:8b:05:1f:31:b6:48:64:b9:46:74:8d:6e:a2:
                    f6:4a:23:ee:27:c3:b6:66:66:36:0d:db:b2:02:ba:
                    a7:52:51:4c:d1:a3:95:ba:54:c6:55:d4:09:76:24:
                    b5:46:9c:25:e8:b0:9b:77:5e:e0:d2:02:6c:2a:9d:
                    25:6f:d2:68:07:0f:19:45:55:37:15:e7:0a:78:21:
                    d4:ba:fd:78:da:8f:3f:9c:53:37:0c:e9:25:c9:85:
                    89:77:8e:ba:cd:ff:05:73:f9:7f:1f:24:be:26:8d:
                    f2:51:37:5c:db:fb:cc:00:62:35:11:eb:fe:6f:6e:
                    ca:2e:c7:7b:44:99:7c:31:34:3e:0b:9c:31:22:0f:
                    ee:f8:08:5b:43:6e:6f:3e:d1:ee:c0:a3:8b:88:8a:
                    f0:ad:9f:e3:e8:ee:62:c2:79:53:61:1f:be:17:4f:
                    5f:a0:c6:35:10:c1:ac:42:3f:62:62:63:d1:7b:3d:
                    1c:b4:36:3e:59:fd:e4:3e:1d:f5:9e:4d:0a:b5:2b:
                    e3:32:00:d9:54:39:02:14:19:de:79:14:1e:3b:b6:
                    fa:6e:14:2a:1f:c7:bd:e4:1f:71:3d:3a:33:e8:5f:
                    f9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:73:D3:6C:13:1C:C1:24:78:69:3E:BF:D5:AE:74:6F:D4:D5:F6:67
            X509v3 Authority Key Identifier:
                keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:cf:ee:94:ea:8b:d0:b9:6c:3a:a7:84:6e:2b:2d:a5:e3:5f:
         ca:c1:49:25:59:d9:5f:2b:04:f8:45:8a:de:02:f5:88:d9:f3:
         75:87:bd:c3:c0:fd:2d:04:de:93:90:0b:9e:0e:99:61:7e:2e:
         01:3f:89:f4:4d:f2:64:20:c9:81:44:30:9a:fc:38:44:61:c5:
         46:7c:3f:2a:79:b2:0c:c1:ce:e6:6c:82:b6:3b:4c:a5:99:a3:
         f0:83:b7:48:77:b2:93:d9:f1:0e:23:52:97:53:fb:17:b9:c7:
         fb:d6:26:48:d3:eb:a3:ca:ed:e2:f3:05:34:a6:dd:8f:8f:6f:
         0b:36:0e:82:d3:3e:74:23:ce:40:52:13:2b:f6:64:b1:ee:12:
         91:6a:80:ff:b5:8d:07:47:8c:20:09:c1:ea:50:8e:8d:f2:9c:
         36:b1:19:fe:4c:99:65:a4:c1:49:41:da:a8:aa:e0:94:c8:fb:
         c2:6c:8f:48:f6:fb:b6:a7:fe:ff:7a:ce:95:a0:66:04:f1:ba:
         57:4b:2e:6c:8f:d4:70:f6:2b:f0:15:5d:d8:81:9f:64:6b:d4:
         97:fc:6a:d4:59:45:08:b1:67:bf:89:4d:ae:a7:f6:ff:80:a7:
         d3:3f:9c:cb:66:3c:68:b7:e2:af:ec:9e:f5:af:f9:0c:78:d0:
         93:72:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:41:22 2025 by rpki-client