Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
File:                     1-SB1W_Z7p9e009ABAnYE6imyPtE.mft (raw, json)
Hash identifier:          2z68IElHYB/msJdeFS2/GN5I2/JPXr1lD5dW5LUJWFE=
Subject key identifier:   41:FC:6A:D2:67:FC:9D:49:E9:62:7B:BC:2C:48:F6:AB:E1:25:59:14
Authority key identifier: F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1
Certificate issuer:       /CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
Certificate serial:       01974D7BD8D750BB34ABF2D88558B18036F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
Manifest number:          01D4
Signing time:             Sun 08 Jun 2025 03:00:51 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:51 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:51 +0000
Files and hashes:         1: 1-SB1W_Z7p9e009ABAnYE6imyPtE.crl (hash: cEzTNd4n2lnu5DQAhmTRE58rQ5QR3RqX7Znu315N2Ck=)
                          2: 8nQwwbTKR2QHt6Bol-B0GBvbksM.roa (hash: SHforER0sbIvAI5iADwv0gU7LdmKAhXUjkcLwpFZRTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:d8:d7:50:bb:34:ab:f2:d8:85:58:b1:80:36:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
        Validity
            Not Before: Jun  8 03:00:51 2025 GMT
            Not After : Jun  9 03:00:51 2025 GMT
        Subject: CN=41fc6ad267fc9d49e9627bbc2c48f6abe1255914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:f9:9f:df:f3:03:cd:f2:83:c2:02:19:3f:
                    37:b0:6b:9b:6c:eb:93:9f:ee:cb:a8:d8:c2:38:65:
                    50:a5:3c:16:04:40:cd:25:72:8b:b1:76:2d:c3:32:
                    80:e0:5d:69:26:02:8b:49:7c:f4:fc:87:0a:d0:bd:
                    7d:a7:eb:51:a3:34:49:24:2d:64:fb:5b:75:b0:68:
                    2b:f0:a1:85:8a:72:cd:c3:77:63:14:6d:b3:04:92:
                    b1:3d:d5:25:18:c6:e6:55:bd:b7:f1:de:63:4b:56:
                    ff:44:3d:63:09:a3:87:76:65:71:61:2d:bf:a9:fe:
                    39:aa:83:60:67:96:f2:da:fa:2f:c5:e5:2f:46:9c:
                    9e:de:1f:07:f0:26:f4:a9:4b:a1:d9:10:85:3d:f0:
                    5c:2c:db:90:81:36:85:83:d3:27:99:a1:cb:4a:7a:
                    49:66:4c:24:44:40:d7:2b:fb:f3:26:43:8c:ed:ec:
                    ab:46:7d:66:a4:2f:2c:b6:69:8c:bf:47:b0:4a:41:
                    6d:dc:4b:42:65:e7:58:af:a7:dd:73:98:17:42:93:
                    c1:ab:56:be:73:79:41:da:48:75:5d:9f:05:e7:2c:
                    43:0b:bf:59:a5:1a:66:3f:9e:d1:62:60:9f:7e:9d:
                    97:f4:5a:14:3c:a4:12:3e:b9:0d:23:e0:ce:52:24:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FC:6A:D2:67:FC:9D:49:E9:62:7B:BC:2C:48:F6:AB:E1:25:59:14
            X509v3 Authority Key Identifier:
                keyid:F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8e:b9:3d:8e:b5:6e:04:58:1d:14:99:94:f4:c5:18:ab:8a:
         47:cf:cd:7b:7e:23:3b:f7:dd:1e:0c:65:c8:79:46:fd:61:f1:
         61:c3:0d:a9:56:16:f7:65:bf:b9:70:7e:be:91:06:7e:4e:40:
         33:74:f3:10:20:45:28:c3:ad:9d:71:cf:10:67:96:ed:e6:a6:
         70:c5:8d:01:11:f8:68:bc:4e:11:c8:38:5e:fa:03:ef:a7:54:
         f2:99:33:a3:92:83:eb:54:22:cb:34:12:0b:33:be:11:3a:c4:
         16:52:a2:21:e5:3d:9a:08:64:90:0c:4d:94:25:27:1f:42:9c:
         74:dc:d0:86:af:b3:9c:29:f6:18:b2:db:bb:0e:7e:f1:b4:65:
         62:af:d6:50:47:cd:b0:4d:44:63:fb:aa:45:52:46:eb:1e:4a:
         6c:47:c3:cd:77:42:6b:95:25:eb:b4:49:6f:f8:6a:71:e5:0d:
         a4:06:dd:d3:7d:a8:48:fc:04:b0:00:a4:1c:fb:33:b6:d9:00:
         db:fb:eb:17:46:8a:d0:d6:36:29:1d:13:e3:5b:fa:a7:d7:76:
         ba:5e:5d:e1:1a:28:bf:20:5d:fc:9f:c2:f9:19:8a:05:d6:93:
         69:8d:1d:22:be:f6:78:b4:5a:ef:2a:4b:75:1e:70:4e:bb:5a:
         9c:78:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:25:14 2025 by rpki-client