Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File:                     STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier:          P6opZkymuK19zEKJWgn+GCiAfaavz0WyhGfSo0AGjIU=
Subject key identifier:   01:C1:7E:17:ED:AB:91:38:3A:2F:D5:A0:53:7C:60:19:8D:95:3F:A1
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer:       /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial:       0197580082F830958B5B801841662F1EB54A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number:          0446
Signing time:             Tue 10 Jun 2025 04:01:57 +0000
Manifest this update:     Tue 10 Jun 2025 04:01:57 +0000
Manifest next update:     Wed 11 Jun 2025 04:01:57 +0000
Files and hashes:         1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: R48LerfPK6cdJfMpPR0v0L2x9ZPwJa1clLHfv9maN4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:00:82:f8:30:95:8b:5b:80:18:41:66:2f:1e:b5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
        Validity
            Not Before: Jun 10 04:01:57 2025 GMT
            Not After : Jun 11 04:01:57 2025 GMT
        Subject: CN=01c17e17edab91383a2fd5a0537c60198d953fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:20:97:cc:9c:e6:96:91:f6:14:19:a4:09:
                    22:56:f8:1c:21:14:19:c7:cb:f6:bb:9c:a4:25:a6:
                    48:c3:b6:d2:76:ea:9d:b4:a5:32:ca:69:ae:d9:1d:
                    ed:75:b1:36:fa:17:e0:25:37:94:24:5c:ac:85:cf:
                    89:a3:c3:47:e9:11:4b:1a:ca:ea:17:e0:9e:4d:4f:
                    a8:e7:ec:97:c3:4b:11:0e:d6:01:b6:5e:56:1b:5c:
                    4d:01:dd:3f:51:3f:c2:d1:1e:1b:18:b6:4d:28:97:
                    5e:e8:b2:44:82:42:95:79:b7:14:e8:c9:f1:b9:e9:
                    b2:a8:2d:f7:5b:3e:29:31:b5:11:19:5e:1a:9c:9b:
                    77:70:9d:b3:b1:f7:67:03:49:f4:b6:aa:fe:f2:c7:
                    39:2b:3b:c8:49:e7:1d:99:f6:48:9d:be:14:f4:9e:
                    aa:35:cd:a4:64:d1:40:da:29:88:88:64:50:1a:d7:
                    21:00:0c:1b:f2:6e:8e:b6:c8:01:83:b3:4a:eb:90:
                    6f:02:d9:95:e9:1a:cf:86:e3:1c:7c:b9:a2:d1:0c:
                    79:13:71:31:34:56:93:56:69:56:af:88:57:6b:cd:
                    1f:f8:21:76:b4:89:bd:c3:08:19:7f:5a:e1:b0:2a:
                    b9:5c:6c:11:b2:26:f9:bf:6c:28:1a:c2:75:f5:a7:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C1:7E:17:ED:AB:91:38:3A:2F:D5:A0:53:7C:60:19:8D:95:3F:A1
            X509v3 Authority Key Identifier:
                keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:01:04:ff:76:08:39:d8:ee:68:61:a6:31:f8:07:ec:c0:f8:
         e2:01:c5:90:7e:51:5a:b2:78:03:ef:2b:33:00:fb:7e:cf:da:
         35:d5:d2:c2:71:80:cd:53:be:5b:97:44:63:39:ec:14:aa:88:
         e8:d4:66:2e:63:bf:03:95:78:f1:87:9e:b0:ec:eb:64:e6:50:
         de:24:c5:11:d5:c1:94:a9:65:88:0e:2a:22:16:d2:9d:2e:01:
         c1:e7:c4:b8:eb:00:3f:84:08:18:92:1f:8c:61:52:5a:d9:c4:
         54:97:39:55:56:cc:5d:56:49:56:5a:93:35:91:13:0c:18:d0:
         80:18:6d:09:83:6f:54:48:fb:77:79:88:42:62:34:15:3f:31:
         b9:06:f6:69:90:6a:0b:88:9a:56:64:7c:b2:c0:25:58:63:3d:
         cb:c3:e3:ed:19:df:1c:32:18:3b:04:b3:21:54:0e:3e:0a:2a:
         26:86:e0:eb:89:01:7d:54:1b:a0:33:a1:83:4a:a5:36:b2:c5:
         a4:55:8c:90:3a:c7:00:cb:75:b9:83:21:e9:59:12:d9:23:c5:
         c3:1b:88:9d:cf:88:ba:9e:5b:df:ed:11:4a:ee:73:71:a8:b6:
         08:f5:2f:0c:f6:50:1e:f6:75:36:3c:11:b6:c7:32:e7:b7:91:
         b7:17:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:49:44 2025 by rpki-client