Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
File:                     u-Sqx31jiC90NiBwTCTb7bGIDXo.mft (raw, json)
Hash identifier:          eLr51XxEnRWb469ef/dBZOvKts1ibueyykG1mjn9zkM=
Subject key identifier:   9F:5B:A3:E4:B2:2B:CB:50:F0:84:6C:2A:9D:5E:1A:B0:98:0C:F8:17
Authority key identifier: BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
Certificate issuer:       /CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Certificate serial:       019778D4E15D13C13F4654867D27138E5FAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
Manifest number:          04EF
Signing time:             Mon 16 Jun 2025 13:01:46 +0000
Manifest this update:     Mon 16 Jun 2025 13:01:46 +0000
Manifest next update:     Tue 17 Jun 2025 13:01:46 +0000
Files and hashes:         1: u-Sqx31jiC90NiBwTCTb7bGIDXo.crl (hash: MMTuBrEb+aDisVV3B9YbQagOp1pCkS7qYRmBf92EdrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:d4:e1:5d:13:c1:3f:46:54:86:7d:27:13:8e:5f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe4aac77d63882f743620704c24dbedb1880d7a
        Validity
            Not Before: Jun 16 13:01:46 2025 GMT
            Not After : Jun 17 13:01:46 2025 GMT
        Subject: CN=9f5ba3e4b22bcb50f0846c2a9d5e1ab0980cf817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1f:03:b6:a6:31:8b:24:02:c6:74:7d:e5:1e:
                    eb:54:f4:83:4f:b6:f3:61:f0:82:7f:8f:2e:5d:a6:
                    35:51:da:56:b6:2d:c0:ec:42:3e:b8:b9:c8:b1:8f:
                    96:54:5a:d3:12:39:96:51:b8:2c:28:88:cd:2b:07:
                    bc:bc:19:f1:6c:71:a3:63:3a:c7:55:6e:27:73:e0:
                    13:f4:d3:30:2b:2e:5b:5f:72:8e:34:9a:fb:2a:95:
                    f6:67:15:e7:ff:d6:ff:dc:d1:e6:43:0d:f6:f6:11:
                    20:1d:b6:78:16:91:a2:5e:25:b1:c6:26:7b:4c:0f:
                    44:f8:60:94:49:99:dd:a6:ff:d6:cf:c5:5b:48:c4:
                    2e:f4:79:04:72:2b:db:46:96:c5:bb:e7:7a:2d:f3:
                    a3:18:70:20:09:4b:1f:5f:4c:2f:44:d6:1a:4f:ce:
                    79:a3:0a:c5:24:0e:79:e5:8a:34:67:44:90:e6:90:
                    82:27:be:c7:01:99:36:bd:56:de:e1:32:aa:2e:c0:
                    01:24:d2:34:62:5c:75:f8:80:ad:fa:8c:9c:81:f0:
                    da:d8:49:a4:e8:71:fe:88:d1:72:3b:20:2c:12:f9:
                    6f:0e:87:7f:dd:12:7f:15:98:79:6e:58:17:ee:50:
                    f1:e8:fb:a2:65:a3:50:e1:73:ee:13:21:0c:9a:3b:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5B:A3:E4:B2:2B:CB:50:F0:84:6C:2A:9D:5E:1A:B0:98:0C:F8:17
            X509v3 Authority Key Identifier:
                keyid:BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:27:70:f0:77:06:30:10:f0:6c:f7:7b:9e:65:a8:82:fd:
         ee:db:0c:24:7c:c7:29:a1:0e:67:4c:af:5e:e3:03:f2:dd:66:
         b0:61:9e:e0:8e:c0:c5:b8:e7:ec:1f:27:c8:d3:6f:ab:67:d0:
         59:46:09:11:fb:1a:8a:ac:27:fd:cc:13:b1:8a:2e:f7:13:b4:
         97:92:9d:58:d2:41:6d:f3:a9:c1:e3:af:10:c5:6f:f4:7c:ce:
         b6:36:10:03:ed:14:b9:08:aa:d3:0f:7f:31:86:34:61:56:d6:
         0c:23:2f:7f:fc:dc:f0:3d:b7:55:ee:5d:b9:36:ed:1b:c4:6f:
         0a:21:03:ed:78:2c:9a:5e:b6:2e:e1:3b:c9:91:7e:f3:19:c1:
         6d:02:b9:29:72:4e:f8:e2:42:3b:f9:e7:0d:9b:88:9f:5c:76:
         99:c2:f7:bc:53:9d:29:9d:dd:a8:84:d3:ea:2d:06:ae:b6:22:
         6a:c9:4c:3d:53:13:c7:98:9b:dc:7c:d4:78:36:d1:e4:43:27:
         f7:a9:ff:96:15:09:72:47:6b:9b:2d:1c:96:ed:2f:df:0f:15:
         0b:8d:24:8a:69:db:a3:bf:cb:5b:67:77:fd:dc:80:69:44:49:
         23:63:9b:16:c8:12:72:16:b5:e2:a0:25:c5:fc:56:b6:24:7d:
         e4:11:85:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:26:55 2025 by rpki-client