Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
File:                     SkcTzDG36jiRvhRV3hHcwvMp1RU.mft (raw, json)
Hash identifier:          xPr/J5o07zCB+ldvGkwe8GXz0vWloNGTDHxNSuwJ/mw=
Subject key identifier:   23:B4:40:FC:4C:63:92:B3:D6:9F:63:CF:8E:CE:92:FE:C1:C8:36:12
Authority key identifier: 4A:47:13:CC:31:B7:EA:38:91:BE:14:55:DE:11:DC:C2:F3:29:D5:15
Certificate issuer:       /CN=4a4713cc31b7ea3891be1455de11dcc2f329d515
Certificate serial:       019786611173CDB88EB2C0DD30A3D8856307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
Manifest number:          0C26
Signing time:             Thu 19 Jun 2025 04:09:57 +0000
Manifest this update:     Thu 19 Jun 2025 04:09:57 +0000
Manifest next update:     Fri 20 Jun 2025 04:09:57 +0000
Files and hashes:         1: SkcTzDG36jiRvhRV3hHcwvMp1RU.crl (hash: /G6XUUuv1tEHkkUoUa7UGqObh17a4JpsFBke01AQEzU=)
                          2: gF8ZN3C0a45HX0BtFSTg6shwTi4.roa (hash: YzHFKuHmdK7saGrTnv4LM1NaquoFvehSW3aShl6a+YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:86:61:11:73:cd:b8:8e:b2:c0:dd:30:a3:d8:85:63:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4713cc31b7ea3891be1455de11dcc2f329d515
        Validity
            Not Before: Jun 19 04:09:57 2025 GMT
            Not After : Jun 20 04:09:57 2025 GMT
        Subject: CN=23b440fc4c6392b3d69f63cf8ece92fec1c83612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b1:44:5a:4e:e6:86:09:3c:8b:d5:47:15:fa:
                    83:f4:7a:1a:90:17:21:5b:3e:ed:d9:7d:0b:25:ef:
                    dc:c4:60:34:38:34:9f:9a:cf:80:4d:33:21:8a:09:
                    74:37:51:7e:b1:c7:e1:c5:b9:6c:e2:75:02:3b:bf:
                    18:39:c3:9f:4d:b7:a3:0d:33:01:7e:1e:be:36:8f:
                    32:bd:d1:b8:8a:02:53:47:b5:7d:1c:a6:4d:01:6c:
                    bc:15:57:91:74:40:63:30:f2:4b:ed:7c:dc:e0:98:
                    76:f1:c6:da:59:37:0e:f9:1d:7f:78:bb:6e:d0:ae:
                    da:c2:97:77:8b:86:e6:4f:3c:1b:1e:76:cc:b4:83:
                    fe:f6:93:7c:63:20:d2:a8:d0:fc:e5:d1:01:c7:7d:
                    9e:2b:3d:be:f6:03:45:81:60:9d:55:49:94:ba:89:
                    92:80:6a:a6:59:cf:a6:30:31:f4:fa:d3:6c:1b:9f:
                    62:db:0e:a6:0f:8c:f6:85:3b:67:8d:df:fc:02:2a:
                    fe:7d:d7:97:a9:03:c6:fe:db:35:68:04:5d:d9:38:
                    b5:6b:1c:b1:69:ea:e9:d6:28:26:a7:33:be:a2:08:
                    96:03:49:00:78:a2:c4:40:27:5b:f2:c2:06:79:a0:
                    8c:a4:b8:06:24:9e:22:99:7d:10:02:64:d3:24:c9:
                    8a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B4:40:FC:4C:63:92:B3:D6:9F:63:CF:8E:CE:92:FE:C1:C8:36:12
            X509v3 Authority Key Identifier:
                keyid:4A:47:13:CC:31:B7:EA:38:91:BE:14:55:DE:11:DC:C2:F3:29:D5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c6:94:8a:2d:e2:ed:da:aa:df:f3:ca:30:32:17:0e:d4:a8:
         dc:7f:84:76:2e:f1:72:82:16:40:e9:48:06:a0:4c:65:3d:f5:
         17:a7:c1:e2:f2:e7:f1:1f:70:af:be:aa:66:d7:0b:e5:ab:6c:
         52:00:a5:73:e0:48:fa:fb:14:e2:d4:1d:03:1e:db:d4:91:4f:
         b4:a8:42:94:19:e8:53:af:3d:e4:ec:d9:31:50:eb:56:02:8d:
         79:a9:81:7d:d4:11:77:cf:29:4a:c8:78:89:24:eb:8a:8f:7b:
         7b:77:98:32:77:aa:99:0a:6e:30:59:57:9e:71:f0:e4:7f:af:
         53:ce:b8:d9:dd:c9:11:65:15:b6:c4:1a:98:48:5f:1f:05:3c:
         fb:7d:0b:22:0b:c3:64:80:d9:46:b5:df:08:e6:ff:38:44:29:
         90:a5:4b:c9:90:95:f9:da:31:d8:3f:5e:48:64:bf:6b:ee:c5:
         cc:f8:b6:9d:4e:1d:a6:05:6d:e0:9d:9f:01:f5:bf:d7:9c:36:
         38:3e:c5:e7:22:0b:9e:67:22:94:69:fc:ae:d7:b7:00:fc:7a:
         21:20:b7:cb:7c:ef:f2:10:7f:3b:41:b6:f2:02:bc:3f:d7:c9:
         eb:9f:ab:f8:ee:05:60:72:9f:c9:66:99:9a:f6:16:67:00:42:
         12:29:d8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 10:22:16 2025 by rpki-client