Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
File:                     SOmaP-7GTWutCY0bLfC1NqA4jqM.mft (raw, json)
Hash identifier:          OOMT0ZhEeUf67kwIIaPZnURpFjEqNbAN/mmfXxS8Tlg=
Subject key identifier:   38:9B:E5:28:B5:47:AE:CE:65:C3:3C:FA:3A:8D:37:45:20:7C:2F:C8
Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
Certificate issuer:       /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Certificate serial:       01974F332E3F288A0CFAB4036ADC80066C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 11:00:43 +0000
Manifest this update:     Sun 08 Jun 2025 11:00:43 +0000
Manifest next update:     Mon 09 Jun 2025 11:00:43 +0000
Files and hashes:         1: JqTAJDe2OYCUvbJc8miiDJhn9ck.roa (hash: XOVcEkw4qLtgeZZ1W3TII3S4x02laIR1b6T9nld7824=)
                          2: SOmaP-7GTWutCY0bLfC1NqA4jqM.crl (hash: lgbT0KeN6ZvG2n+smihPBOwPSM8Zhywq5ALUwnHb1H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:33:2e:3f:28:8a:0c:fa:b4:03:6a:dc:80:06:6c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
        Validity
            Not Before: Jun  8 11:00:43 2025 GMT
            Not After : Jun  9 11:00:43 2025 GMT
        Subject: CN=389be528b547aece65c33cfa3a8d3745207c2fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6b:88:37:5d:8d:42:ee:f4:59:7e:fb:fe:05:
                    2f:49:2c:ff:50:4e:de:50:c3:03:e9:da:cc:80:8b:
                    b2:16:d3:bb:1b:0e:a3:83:e7:91:40:f9:bd:ab:c4:
                    d9:5f:c8:5c:5c:ff:95:8e:f8:79:dd:71:1c:b3:05:
                    17:ad:b8:a0:95:65:65:5f:1b:36:2c:ec:bd:9b:61:
                    0e:40:1d:78:3e:ab:68:bc:4a:b0:e4:8f:65:58:79:
                    b6:89:7a:90:98:5d:9d:ff:a5:54:a3:0a:27:34:bf:
                    f0:f8:72:be:3c:27:55:7b:af:c8:54:b7:35:9a:64:
                    99:6d:b2:11:8a:87:06:1d:01:7e:df:a6:fa:59:ff:
                    52:3d:d7:50:c8:96:73:4e:6c:46:4a:fb:ad:d3:a2:
                    05:00:2e:d0:9a:5e:c4:d5:1a:ff:3a:d4:e5:ac:a5:
                    5e:3b:cb:05:4c:e6:ac:9c:77:34:c0:c3:a4:c6:9e:
                    d9:c9:14:ef:b4:23:a2:80:72:2c:89:2a:43:e0:3c:
                    d5:31:7e:4c:82:9d:33:d3:d7:03:e4:3d:b0:52:3c:
                    a4:ee:62:79:3f:f5:a6:4e:ff:e4:c3:a4:10:71:0a:
                    57:3f:5e:9f:a5:3f:f6:8b:f1:40:f7:46:96:65:65:
                    f7:bd:a9:9e:5b:a8:bb:15:fb:96:4e:51:dd:24:74:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9B:E5:28:B5:47:AE:CE:65:C3:3C:FA:3A:8D:37:45:20:7C:2F:C8
            X509v3 Authority Key Identifier:
                keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d0:f7:2a:79:bb:61:f2:77:ad:62:3d:10:c7:be:c1:42:0b:
         40:ef:cb:22:a7:51:a9:11:65:7e:2e:42:99:d6:f1:e3:ec:67:
         b8:84:f2:30:ff:fc:d5:27:bd:49:c0:82:ad:3a:1d:50:4a:5b:
         f8:83:68:92:7c:e3:4c:3b:70:17:7d:b8:b4:28:fb:0c:dd:5d:
         44:bb:3a:a6:48:44:48:3d:d6:14:33:90:f9:cb:5b:31:94:6f:
         95:86:c9:7a:97:ca:f1:19:b9:2e:f0:d2:bf:d1:27:60:7c:97:
         0f:f5:8c:e2:05:ef:b6:94:a4:94:a0:fa:27:aa:ee:f6:70:01:
         88:08:7c:00:68:82:56:a9:ec:d9:2a:50:2e:4a:62:41:8f:23:
         74:98:98:0a:bf:23:8d:f1:b7:9b:f2:b0:b3:37:09:a2:d5:fb:
         02:7f:5f:70:9c:8f:b9:2f:87:1c:0f:a9:02:25:68:67:9b:95:
         1d:85:6e:82:80:62:d1:63:f4:8c:5f:b2:b6:18:99:16:64:f4:
         8f:5e:11:c0:51:78:b6:29:e6:e0:54:f8:20:75:c6:0b:a8:e8:
         43:59:7d:64:1a:fe:1e:67:a1:1d:05:86:9f:aa:0d:47:5b:36:
         50:1a:1c:a5:30:84:10:75:bf:27:30:01:bd:53:60:12:0f:eb:
         13:99:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:33:32 2025 by rpki-client