Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
File:                     SqbchPRraQchSFpEBb_JOdolSWk.mft (raw, json)
Hash identifier:          6E1XToqSMVctpTX7xv2SE/CCKEWO+0k4xvRJRLzmMM8=
Subject key identifier:   B5:07:91:1B:6F:EE:5F:EF:1C:D8:31:7A:EA:AA:86:E3:1A:E6:06:45
Authority key identifier: 4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
Certificate issuer:       /CN=4aa6dc84f46b690721485a4405bfc939da254969
Certificate serial:       019746303FBE817B2A64E83E8BA1DC216273
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
Manifest number:          D0
Signing time:             Fri 06 Jun 2025 17:00:56 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:56 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:56 +0000
Files and hashes:         1: SqbchPRraQchSFpEBb_JOdolSWk.crl (hash: At1qox11CmPdsymHLWQOh7ln1gu6G6rs401PS7QIz0g=)
                          2: b__HqKu-AMKs2UTm6p-v2OEs7OA.roa (hash: f7396FR/6MUlNoG4o7cmoviarkI5X6EgtZeJr/g+J2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:30:3f:be:81:7b:2a:64:e8:3e:8b:a1:dc:21:62:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa6dc84f46b690721485a4405bfc939da254969
        Validity
            Not Before: Jun  6 17:00:56 2025 GMT
            Not After : Jun  7 17:00:56 2025 GMT
        Subject: CN=b507911b6fee5fef1cd8317aeaaa86e31ae60645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:49:8e:1a:63:f5:cf:09:82:2a:00:db:84:
                    60:41:39:32:c5:1c:5a:b4:87:a0:ec:38:50:ed:8e:
                    8b:01:ac:43:a2:ac:23:38:ea:00:30:28:47:9c:ce:
                    e9:7f:62:09:0c:dd:09:93:aa:51:8b:60:17:f2:75:
                    c6:2a:58:35:ba:40:c5:fe:ce:f0:c9:01:e9:61:eb:
                    5b:44:08:77:41:38:af:8a:d6:e0:e1:7d:fa:9f:90:
                    7a:5d:2f:47:01:16:6e:32:48:1b:64:57:e7:23:c3:
                    a9:e6:0e:8b:93:c6:f5:4a:5f:5c:c5:40:0a:1f:90:
                    18:f5:97:6c:b3:ca:0f:90:a0:86:86:63:09:c3:9c:
                    e1:9e:8a:c1:d4:32:a2:17:78:b5:92:7c:bc:dc:0c:
                    7a:d2:a3:90:f4:88:3c:44:e1:18:e8:a4:b8:44:6c:
                    45:48:a7:a6:f9:d0:f8:20:1a:71:c3:ee:f5:9d:9e:
                    4d:9a:8c:6c:6d:ec:21:89:ba:5d:7e:ff:56:3e:a8:
                    12:9d:2e:0a:32:88:03:25:dc:66:b6:f3:a5:fa:3e:
                    75:71:4b:c8:38:ff:f7:75:8a:06:1a:9f:b6:0f:a5:
                    15:96:b7:87:ac:88:46:81:a9:98:f4:2b:74:d7:50:
                    85:dd:f0:8f:52:63:bf:2c:00:85:41:37:af:ae:be:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:07:91:1B:6F:EE:5F:EF:1C:D8:31:7A:EA:AA:86:E3:1A:E6:06:45
            X509v3 Authority Key Identifier:
                keyid:4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:44:18:24:e0:b9:51:80:7c:1f:28:ff:44:47:e5:76:8d:12:
         87:9d:75:79:80:01:9f:60:a8:8c:af:73:e1:87:18:4d:fa:a9:
         38:8e:52:6e:2d:0f:38:f9:0a:d0:04:1c:3c:d3:87:1b:f9:1a:
         33:90:30:1e:42:ac:29:fc:7d:fb:23:4f:85:44:f7:3b:b4:4d:
         5d:66:35:d4:83:b5:45:0f:20:de:fe:f3:25:e8:76:2f:cb:92:
         2d:59:5b:2d:1b:4a:f6:ae:b3:5c:47:7a:77:e6:e1:36:cb:d8:
         bd:ff:ed:71:0c:1c:58:db:60:5f:91:ce:36:ba:68:aa:85:f0:
         a4:ca:58:bd:cc:cc:70:96:24:d1:7e:4b:ec:da:24:7a:98:9e:
         30:af:41:69:08:21:d6:e7:19:f6:21:36:8b:73:f7:f7:bb:a3:
         37:07:72:18:49:a8:50:62:f6:65:1c:bd:5b:29:53:cf:aa:bd:
         f4:4e:ce:a1:75:94:e2:39:b3:63:33:f0:30:85:0e:3e:e0:e9:
         31:52:98:1d:ee:f6:c4:22:97:0b:0f:af:83:81:8d:d5:f2:83:
         24:1d:8c:43:da:01:ef:e2:4b:69:fd:55:15:c2:6f:0a:98:12:
         50:51:8c:b6:a8:1b:fc:a1:f5:81:e7:e5:41:cb:ed:c3:65:e5:
         39:70:ee:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:53 2025 by rpki-client