Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
File:                     SiHJG2O7vaiASnSfPWEOiyF_m3M.mft (raw, json)
Hash identifier:          rZcnT9+gzLjJ7ikAOptDV6f5IYPQ5gMy8MyEsJ1r/Bc=
Subject key identifier:   09:E8:83:6D:42:94:C8:60:CD:30:C1:92:1E:34:FB:38:10:4B:61:FC
Authority key identifier: 4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73
Certificate issuer:       /CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
Certificate serial:       01976FD13F5D74327017A7A383751A98272C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
Manifest number:          118E
Signing time:             Sat 14 Jun 2025 19:01:13 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:13 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:13 +0000
Files and hashes:         1: 1Z1yWNgRSnqR3pt5WlApDelQe4o.roa (hash: 7G52qXZFDFq0XDjJ+/lW8m4SCa70rkFS2r1Ec1zORA4=)
                          2: SiHJG2O7vaiASnSfPWEOiyF_m3M.crl (hash: rWA5K6eHwWDpaOsTqapwJJFx2t7gPT7UzXUp+sxQUSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:3f:5d:74:32:70:17:a7:a3:83:75:1a:98:27:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
        Validity
            Not Before: Jun 14 19:01:13 2025 GMT
            Not After : Jun 15 19:01:13 2025 GMT
        Subject: CN=09e8836d4294c860cd30c1921e34fb38104b61fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4a:43:8b:f4:03:d9:0d:0b:9a:5e:f7:d5:2b:
                    2d:b5:47:65:d1:56:e9:7b:ae:04:3e:da:92:e4:e4:
                    68:fa:09:3b:9f:e4:eb:79:a0:4b:87:d5:31:81:0e:
                    c3:5b:10:81:cb:a2:d0:d5:0a:f0:37:60:f4:a2:37:
                    cf:e0:c1:5e:1f:4c:f3:17:dd:e1:91:0e:04:fd:eb:
                    63:ca:d2:3e:13:68:84:0b:15:92:74:39:6e:31:f9:
                    86:ae:be:31:37:3a:18:1e:d4:51:a6:e4:03:2c:29:
                    65:dc:e0:20:c9:46:00:b8:bf:0f:f6:d0:cc:4b:27:
                    5f:31:54:16:4b:da:ed:b8:20:16:b4:ec:9a:34:8e:
                    4a:12:1c:4f:38:dd:36:c0:03:4a:28:e7:e0:a4:9c:
                    c0:0e:15:e4:94:ef:64:2a:18:e3:c5:41:e3:94:e6:
                    7d:04:33:b3:49:74:e4:ab:57:96:2a:ca:c3:0c:5e:
                    34:91:de:59:ce:26:39:6d:78:d8:c4:bf:48:a4:a0:
                    20:46:28:34:5e:a1:28:de:a6:94:54:ab:7a:94:43:
                    f9:03:6e:7b:41:fd:00:65:9e:48:0f:13:18:b4:40:
                    3c:5e:ff:c4:dd:e5:95:5c:98:cb:6e:00:16:f1:41:
                    b2:6a:1e:06:58:5d:24:33:1e:cf:9a:e8:a1:73:73:
                    c0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E8:83:6D:42:94:C8:60:CD:30:C1:92:1E:34:FB:38:10:4B:61:FC
            X509v3 Authority Key Identifier:
                keyid:4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:01:1f:ec:ea:c5:8a:49:59:1e:de:ab:78:de:48:64:ea:fa:
         3d:a2:e8:5f:2d:2e:64:82:63:7c:68:00:7f:fc:55:18:3e:66:
         56:67:28:a9:96:7f:85:19:eb:4b:0d:46:dd:0c:3e:7d:a9:d3:
         12:03:37:03:8e:f8:79:55:b0:c7:7d:d3:96:4c:91:b9:98:53:
         9b:1a:f1:7c:45:8d:2d:00:4c:7c:6f:5c:e7:5f:0a:36:43:b9:
         03:b8:53:44:75:38:c0:22:82:99:68:5e:26:d7:21:d5:4a:dc:
         c4:6f:38:a6:5b:62:67:53:9b:9e:27:4c:2d:ca:be:c6:90:7f:
         91:9a:e5:b5:8a:66:ff:36:10:d9:25:b7:d9:53:b0:33:1f:d8:
         a7:5b:0f:2e:6a:d3:c4:84:50:b4:8b:94:72:8b:8e:d3:c1:29:
         44:25:53:9d:52:c9:2e:2b:d5:b0:c7:ec:ac:91:a5:fb:b9:95:
         c9:0b:fe:36:35:f5:2c:f2:6a:b1:09:0f:62:70:49:65:31:46:
         12:07:31:4f:eb:38:9e:12:5a:fb:5f:33:e6:c9:80:e4:65:bf:
         9e:ae:2a:26:60:2e:af:f6:54:9b:78:a4:6b:ca:cb:87:4c:46:
         a0:25:f4:7e:24:a8:c1:06:1d:d0:29:11:62:48:7d:1e:2c:55:
         f4:8f:9f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:06:06 2025 by rpki-client