Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File:                     SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier:          gR1UY2obLm1G4XZBgNTwr5nxyhR7DL1hdB40QxpJmJA=
Subject key identifier:   BC:D9:6A:66:EE:BE:F5:53:0A:23:C5:67:DC:46:B1:17:98:87:B7:FF
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer:       /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial:       0197567E89FB2AD9E6E35E91B92C359DD990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number:          0C63
Signing time:             Mon 09 Jun 2025 21:00:22 +0000
Manifest this update:     Mon 09 Jun 2025 21:00:22 +0000
Manifest next update:     Tue 10 Jun 2025 21:00:22 +0000
Files and hashes:         1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: KvrlEZ7BqiRAfyPXPnt1tqV1yQShCYsq5npPiv4pzJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 19:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:56:7e:89:fb:2a:d9:e6:e3:5e:91:b9:2c:35:9d:d9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
        Validity
            Not Before: Jun  9 21:00:22 2025 GMT
            Not After : Jun 10 21:00:22 2025 GMT
        Subject: CN=bcd96a66eebef5530a23c567dc46b1179887b7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:c6:bf:29:74:c9:56:b0:48:1c:90:7b:49:
                    d7:02:ed:e6:26:60:63:35:cc:c9:c6:bf:92:27:b1:
                    ba:bc:9b:1d:7b:f9:03:37:a4:a0:ae:ee:44:3b:54:
                    ab:2a:99:68:7e:12:3d:74:49:45:04:e1:c8:de:ad:
                    d4:4d:30:23:89:91:a7:0e:f0:04:51:06:be:80:24:
                    a1:23:0c:7f:4b:0c:ac:89:c6:ed:ff:b8:b4:3f:15:
                    9e:96:5f:44:25:be:10:40:77:c6:d5:94:ed:cd:db:
                    f3:82:20:0b:b3:0d:15:4e:e0:ee:19:02:27:01:58:
                    7b:a0:f7:43:88:38:62:5a:37:8f:28:4c:7d:b5:3c:
                    cb:e9:93:1a:b6:5d:0e:0f:d8:a9:10:41:54:ee:98:
                    04:26:b5:63:61:de:fc:e7:6e:57:9a:79:38:94:ab:
                    cd:0d:91:84:d7:09:fc:b8:1f:3e:80:30:a8:06:63:
                    71:b5:97:a2:a6:94:d0:00:ae:99:88:55:fc:43:87:
                    47:64:19:af:c3:2d:9b:b4:99:a6:6f:54:1a:2f:c1:
                    5f:0d:3b:2e:36:6f:04:b2:63:ee:8a:c2:7b:1f:45:
                    9e:b2:35:59:b1:55:e3:e2:a7:f1:60:0e:96:86:7b:
                    fc:ce:14:b2:b0:32:97:f2:23:ed:9f:70:51:39:dd:
                    b9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D9:6A:66:EE:BE:F5:53:0A:23:C5:67:DC:46:B1:17:98:87:B7:FF
            X509v3 Authority Key Identifier:
                keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:28:58:0f:48:c0:01:0c:6f:d1:ad:bb:0f:fe:3f:46:ee:05:
         de:11:13:7d:c9:ff:3d:1d:0a:18:51:3d:df:a6:b8:c5:58:9d:
         21:cb:2c:02:ec:85:bc:f6:4d:e8:d3:85:1b:07:51:22:5d:15:
         32:4a:1e:94:a7:a1:5a:77:a5:e7:63:81:bb:4a:b0:87:a9:a7:
         42:3e:62:a0:40:af:8b:1b:34:b7:c0:17:ac:10:a0:98:6e:59:
         54:b7:af:02:0b:6e:95:18:5b:dc:fd:d3:d5:21:fb:c4:ca:8b:
         55:42:a4:23:73:bd:17:11:87:e9:82:fd:93:49:60:4f:d8:f4:
         22:24:81:62:39:e8:74:fc:2f:2f:64:78:b7:86:cf:02:70:48:
         e6:96:e1:88:d8:0b:4b:a5:59:f8:fe:58:09:01:77:54:0a:d5:
         4a:65:e7:ac:63:4a:3f:e1:9a:26:75:78:5c:d8:34:e3:c6:e1:
         ce:16:e8:ce:10:24:55:01:5c:0a:40:60:02:c1:55:27:78:c1:
         3f:8f:43:35:75:aa:5c:fc:cb:23:c5:47:1d:d6:da:fb:0f:f6:
         1a:05:23:e2:59:2d:d8:9a:3c:4e:08:83:11:91:44:b1:89:d7:
         e5:52:57:74:c1:12:af:40:29:f7:d8:6f:1c:b2:80:d5:a2:cd:
         9b:cc:ed:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:29:20 2025 by rpki-client