Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
File:                     SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft (raw, json)
Hash identifier:          BPDO28V3GvlU/QsiJU8Yz+vBkxdBFum2zTyBHG/P7Ag=
Subject key identifier:   7D:6B:B1:E9:59:91:06:91:F9:BA:D7:40:C2:F9:59:00:C9:9A:A0:9F
Authority key identifier: 4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D
Certificate issuer:       /CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
Certificate serial:       019748C359329F83616652A4F42463D6D32A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
Manifest number:          06CE
Signing time:             Sat 07 Jun 2025 05:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:51 +0000
Files and hashes:         1: SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl (hash: HAq7behvtb8Wnkkg48k6CVyrVeQzH7HwoasiS15pjgY=)
                          2: Ss43uKVk12glj7GND1Q0DQOfOOI.roa (hash: afk/nkdp+pPj29GdfzUTdj7jJFKdBQ7g7Tl5QgpoC38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:59:32:9f:83:61:66:52:a4:f4:24:63:d6:d3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
        Validity
            Not Before: Jun  7 05:00:51 2025 GMT
            Not After : Jun  8 05:00:51 2025 GMT
        Subject: CN=7d6bb1e959910691f9bad740c2f95900c99aa09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d2:e2:b1:57:36:6e:4a:3f:7f:1d:36:f4:7f:
                    22:94:99:7c:8f:f9:c9:46:9a:ff:5d:45:d5:9b:99:
                    7b:57:0a:56:88:7a:15:4c:a1:74:a1:df:8e:f3:21:
                    f0:8a:35:fd:38:98:20:87:f5:a3:e2:40:99:cd:cd:
                    b1:9e:a1:7d:11:c8:b2:5f:c0:82:40:da:0b:71:05:
                    84:65:39:c5:ed:35:c3:74:c6:1a:5d:a5:6b:61:34:
                    9d:bd:46:a2:39:e5:bd:cf:86:18:f8:43:6c:a4:7f:
                    19:7b:63:f1:0b:44:bf:50:92:d6:a4:f7:7d:7a:a4:
                    79:3b:aa:f6:35:fa:4a:5f:6a:f6:0a:ea:32:db:45:
                    61:22:e2:dd:16:a5:9b:61:3e:c1:55:9a:2f:ab:2f:
                    8f:b4:40:3a:96:9e:cf:bc:6f:fe:26:f5:18:aa:de:
                    12:3b:2e:83:6b:e4:72:05:c0:f2:64:64:ac:66:82:
                    d9:48:0a:70:26:c4:92:70:54:14:f4:28:c6:6f:14:
                    35:11:11:b0:ff:12:a7:92:c8:1f:14:d9:e2:fd:9e:
                    fc:98:88:9c:76:86:6e:04:53:4a:f6:c9:9f:00:8d:
                    36:ea:54:e9:fd:2c:66:8e:d1:d3:ff:ca:29:b1:98:
                    61:5d:8d:b4:a5:73:ff:b2:eb:b5:bf:35:5a:e8:fa:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6B:B1:E9:59:91:06:91:F9:BA:D7:40:C2:F9:59:00:C9:9A:A0:9F
            X509v3 Authority Key Identifier:
                keyid:4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f5:45:80:de:96:81:66:34:88:46:8b:19:31:7d:a1:6d:16:
         b0:9c:58:ab:3f:d7:bf:d3:17:a9:b6:5d:1b:ac:68:23:58:db:
         21:31:1a:ca:18:18:11:39:64:43:8f:02:a5:01:39:52:1e:07:
         19:92:40:45:3b:a1:fa:42:43:0e:ad:f2:16:64:a1:46:e4:bc:
         c0:e3:28:22:f1:ee:f5:96:58:40:d4:62:66:28:8a:61:8b:4a:
         50:f8:55:21:fe:a9:02:f7:13:68:89:c3:60:90:68:fa:80:89:
         6d:00:f3:13:03:bc:8d:27:b0:1a:c1:92:a9:6f:61:79:1c:c6:
         4f:33:63:4f:61:13:46:0e:e6:63:c9:04:68:62:02:e6:21:2f:
         7b:af:fe:5e:af:79:17:dc:4d:29:46:0b:9d:89:83:f4:4e:f6:
         a0:a2:42:e4:36:d2:21:46:d8:4b:5c:42:f1:1f:0c:d5:eb:55:
         32:9c:dc:55:9d:f3:dd:26:ea:39:a3:91:b5:15:2d:5e:2b:e7:
         74:c8:6e:e3:fe:0a:3a:b6:36:53:56:84:80:e3:c5:18:88:75:
         53:8e:10:bb:db:9e:5c:f8:60:da:f9:9e:10:59:99:4c:40:8f:
         57:35:b1:ee:6c:35:da:db:c7:d2:66:d2:7e:de:9c:6d:0c:0b:
         fc:ab:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:16 2025 by rpki-client