Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File:                     SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier:          R22IcF5vi/FDlDjmYne/W5YUauGiIe3UWJ8PHY7Jq1k=
Subject key identifier:   79:9D:7D:19:AB:1F:5B:5C:BC:7B:0C:2F:87:69:55:90:72:41:6F:DF
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer:       /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial:       01976DAB1AB3F87BB63D3E49E007238FF79B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number:          0C6F
Signing time:             Sat 14 Jun 2025 09:00:19 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:19 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:19 +0000
Files and hashes:         1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: wI+TBWPQHfYSDPepP9z94N3+a2MbGd7AnPTtHB9Acx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:1a:b3:f8:7b:b6:3d:3e:49:e0:07:23:8f:f7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
        Validity
            Not Before: Jun 14 09:00:19 2025 GMT
            Not After : Jun 15 09:00:19 2025 GMT
        Subject: CN=799d7d19ab1f5b5cbc7b0c2f8769559072416fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:11:22:c8:6c:20:ce:87:ca:1d:00:b4:97:
                    39:cc:5f:f7:9a:10:8f:0e:37:ef:a5:d8:aa:a2:f5:
                    b4:1b:d6:26:c0:dd:9c:69:99:46:ce:94:7c:31:30:
                    8c:81:a4:14:98:b9:14:c9:48:da:7e:ad:70:f9:b1:
                    5e:79:49:79:c4:66:bf:d4:54:24:ad:b0:e1:08:45:
                    62:ae:dc:73:77:a4:33:7d:80:b8:e4:1d:0c:88:ac:
                    ed:08:a0:37:11:ff:10:ee:3f:f3:aa:2f:d9:15:8a:
                    e0:cd:4d:25:c7:ff:25:4d:df:4c:1e:1d:ad:fa:44:
                    91:e1:0b:51:7f:df:1d:64:0e:08:27:08:9f:60:69:
                    6c:2d:1a:56:ad:ff:7b:9f:cf:17:e4:89:0b:5b:2a:
                    f4:05:9e:9a:4f:b3:f0:00:c9:13:1d:ee:66:3a:18:
                    e3:3e:3c:38:c7:59:c7:2f:2f:75:ab:49:ff:14:13:
                    16:7a:df:73:f9:b0:32:60:28:7b:a5:d6:24:cd:68:
                    4a:20:1c:bf:1f:a0:86:39:1c:a3:a4:89:3a:2e:b8:
                    cc:e0:9b:68:b1:f1:14:61:5b:a9:fa:2f:7c:48:ed:
                    fa:1c:51:d0:87:a9:da:77:21:40:f5:70:13:f4:d2:
                    9f:7c:7e:16:41:76:d2:0b:fa:7b:51:6c:d9:bc:40:
                    2a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9D:7D:19:AB:1F:5B:5C:BC:7B:0C:2F:87:69:55:90:72:41:6F:DF
            X509v3 Authority Key Identifier:
                keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a5:7f:19:86:95:6b:84:0c:c4:e0:de:5c:97:b1:92:76:41:
         a2:08:2d:31:d3:fb:ba:5b:7d:08:2a:8f:7c:6a:eb:95:58:18:
         91:4e:b7:8a:8b:88:b9:12:a9:f6:4d:d4:2f:93:16:0f:70:1a:
         78:45:2b:07:13:c7:b8:87:cd:7d:2e:16:58:0e:13:97:44:81:
         ed:ef:69:d4:b4:45:41:9f:c9:6a:ba:40:bb:2b:1a:8c:55:f6:
         98:d2:06:f3:27:23:12:10:30:8b:16:03:36:3b:f2:37:7d:21:
         9d:31:f7:fb:19:60:60:c4:da:3c:40:93:a2:81:41:66:28:87:
         73:07:23:87:2a:ef:4a:4c:f0:b2:8a:cb:cd:74:ff:18:0c:f1:
         ef:d8:29:61:ad:64:96:5c:94:6a:cd:29:fd:ea:54:41:e2:3c:
         a2:2a:be:52:47:03:4c:2f:15:f2:e6:f9:89:b3:55:01:a3:23:
         ac:06:f7:d8:b7:05:5e:18:3a:ef:af:6f:5a:49:bd:8b:68:cd:
         32:d0:38:48:ec:b4:fa:50:ce:71:81:cd:58:2b:31:04:37:a7:
         a1:ae:2e:0a:1d:44:f3:f1:63:00:31:c8:75:3d:3e:c3:bf:5f:
         02:59:eb:ae:fb:f1:c8:26:d5:8e:4c:ad:f8:12:7d:c7:a9:40:
         62:d2:fa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:19:32 2025 by rpki-client