Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
File:                     SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json)
Hash identifier:          qX0wx81CDoYM9igvF1lYa5h9ARVe/cVzsY08H9i1vOg=
Subject key identifier:   D5:B4:E8:32:07:76:5B:50:0F:32:EE:DB:A0:68:D6:08:DC:08:F2:44
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Certificate issuer:       /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial:       0197499F035C99C3E4CB9EA72A252A460E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
Manifest number:          09FC
Signing time:             Sat 07 Jun 2025 09:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:47 +0000
Files and hashes:         1: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: VT6IAmtoNrhud/GScUp47Lr3gX9flvl+M4i7w86UYAI=)
                          2: XlwydODeF8gcZq2lEX8o8gcX3v8.roa (hash: TCKQsk1WAUMm3psVkuDPcRNKeGExKBO69fhhu70s8wY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:03:5c:99:c3:e4:cb:9e:a7:2a:25:2a:46:0e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
        Validity
            Not Before: Jun  7 09:00:47 2025 GMT
            Not After : Jun  8 09:00:47 2025 GMT
        Subject: CN=d5b4e83207765b500f32eedba068d608dc08f244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:0a:9f:a2:a9:4f:ae:b8:44:4d:21:56:1a:
                    08:ad:1c:8e:39:7c:97:ff:ce:0f:59:bf:03:46:b6:
                    c2:10:ea:0a:7a:2b:0c:80:08:c3:02:b5:0a:f3:cf:
                    2f:75:32:d6:45:00:6d:23:dd:36:b0:ad:cc:22:47:
                    ea:47:d3:67:83:15:c0:b1:9f:2a:aa:17:07:d5:f1:
                    a3:20:06:4c:9d:fd:5d:f5:81:af:c4:be:83:89:15:
                    d5:9d:43:07:79:a9:69:fa:fe:95:8c:82:3a:7f:05:
                    87:e2:0c:7c:77:e5:2a:80:f6:b6:11:d4:7e:17:49:
                    42:a8:5b:ed:10:6c:38:05:90:f8:a5:50:f6:e5:25:
                    c8:d4:6a:15:90:c6:6c:2a:15:20:65:e8:e7:b7:7e:
                    70:62:d5:8f:a2:94:95:29:ff:4b:b6:25:df:c8:02:
                    52:d3:8c:e3:ce:7a:c9:12:c3:bc:a8:57:ea:3e:09:
                    b0:b0:32:fc:5f:1c:fa:02:78:2b:2b:57:cc:d2:81:
                    c6:37:1a:e3:2a:5c:f0:f8:13:5c:83:cb:e1:ad:81:
                    3d:bd:66:5c:6f:52:90:77:28:85:9e:a0:cc:c7:6f:
                    2b:44:e7:07:17:b9:90:02:be:b0:d8:dc:0c:0d:13:
                    35:a1:33:4f:5d:81:22:70:36:35:a7:b6:91:49:07:
                    29:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B4:E8:32:07:76:5B:50:0F:32:EE:DB:A0:68:D6:08:DC:08:F2:44
            X509v3 Authority Key Identifier:
                keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:23:7d:96:d2:06:85:61:98:4f:ff:5b:c5:c1:e8:69:4d:80:
         19:28:40:7e:d9:60:b6:7c:ed:a3:8f:04:30:da:ef:b3:d8:66:
         c1:cd:68:b7:e7:bc:f9:6e:a3:5d:34:4d:56:c3:25:c6:44:74:
         ad:ea:a4:67:f8:ef:99:34:f8:41:be:73:22:05:83:69:15:62:
         14:f2:4e:b9:10:d2:e2:14:ad:9d:2a:5f:8e:48:08:29:3b:df:
         72:87:82:ff:f5:44:42:7e:2d:7d:95:13:ad:53:e1:ad:fb:d3:
         29:b2:27:d9:5c:32:eb:f1:7c:ea:4a:bf:27:4f:d2:d4:2e:12:
         c4:d9:f1:85:08:87:7b:f1:f0:d7:b2:e3:26:fa:f1:91:32:e8:
         09:fe:39:c5:4c:1b:7f:eb:7f:4b:47:70:77:f0:3a:38:d2:fa:
         8b:60:8c:e8:5c:e5:2b:bc:1d:e5:20:94:28:1f:4e:f7:98:58:
         ef:a8:65:0c:5a:bc:69:78:f2:f7:52:44:14:df:7e:9f:82:d1:
         bd:ff:64:6d:3f:16:aa:05:fb:5d:4c:e9:33:a7:02:d5:21:d5:
         d7:96:b7:76:53:24:0e:28:a2:05:42:f4:26:1d:9f:30:d7:4d:
         78:19:26:34:55:ed:e5:08:7e:ad:47:07:5d:49:ed:5d:ba:53:
         af:09:4f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:20:58 2025 by rpki-client