Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File:                     SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier:          pLpyOFeswHveD7O5G4kRQRCELBqA5T3Z7894ztj46OQ=
Subject key identifier:   49:EE:7F:64:00:40:5E:23:EF:88:C3:07:23:FA:36:C4:45:DA:C0:2A
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer:       /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial:       01976F2CB1AB9C1BDF5C32BAC728638B50CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number:          1085
Signing time:             Sat 14 Jun 2025 16:01:29 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:29 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:29 +0000
Files and hashes:         1: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (hash: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=)
                          2: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: MKPL4qgPYrUISIgBw/8GvgSZCa8MexLyGtRyPxVlrYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:b1:ab:9c:1b:df:5c:32:ba:c7:28:63:8b:50:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
        Validity
            Not Before: Jun 14 16:01:29 2025 GMT
            Not After : Jun 15 16:01:29 2025 GMT
        Subject: CN=49ee7f6400405e23ef88c30723fa36c445dac02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:41:57:58:94:38:f0:9d:f8:51:62:6f:40:
                    7d:52:a6:c8:5b:32:c1:55:ae:1c:2c:4a:a1:4b:89:
                    06:58:70:f9:34:de:37:ef:bc:63:4d:b5:2b:1d:ea:
                    10:6e:c1:6c:43:5e:c7:77:08:35:2e:ca:11:3c:d6:
                    66:55:0d:1b:a1:39:a1:e1:9a:e0:fe:77:86:98:df:
                    a3:36:85:64:89:98:c9:5a:cc:eb:40:a4:2e:04:32:
                    fd:e7:e1:31:98:fc:b3:f8:c4:7c:1d:56:10:59:87:
                    8a:76:94:ce:f8:55:fd:09:80:37:08:6f:16:08:9e:
                    86:78:74:e4:b7:38:e6:06:ac:4d:10:5d:1e:3f:93:
                    95:28:4b:b6:0f:0d:0f:c1:65:7a:ce:e3:a8:5c:3c:
                    b3:27:b7:e8:1c:09:cd:53:ce:d9:3f:28:4f:d8:5f:
                    f0:ce:9e:d4:8d:f7:67:9e:23:a0:76:cd:e1:d3:2e:
                    9a:ee:f6:33:c1:ab:27:9a:e2:4c:f6:63:92:3a:3b:
                    33:1b:ea:92:91:4b:3c:7d:51:6c:b9:6e:eb:c5:a7:
                    93:8f:4d:b1:c6:30:08:46:b3:7b:4e:a2:bf:66:a2:
                    60:7b:bb:b4:e6:24:fe:f5:df:5f:43:4a:c4:a7:27:
                    fd:47:34:f1:c0:ae:a6:c3:30:ff:f3:94:7d:f7:38:
                    ba:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EE:7F:64:00:40:5E:23:EF:88:C3:07:23:FA:36:C4:45:DA:C0:2A
            X509v3 Authority Key Identifier:
                keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:4c:9e:4d:c0:10:26:a4:8d:1e:b0:58:91:27:3d:68:e7:af:
         a4:7a:1b:d9:63:27:43:9f:cf:52:a9:e7:7d:22:ff:f7:f5:05:
         54:91:de:9a:1c:a1:ad:03:58:85:e7:d8:99:1c:fe:cb:d2:b3:
         02:77:95:a9:f4:ee:bf:cf:37:ec:ad:59:13:9e:be:1a:af:09:
         12:48:c8:b9:04:bb:42:7d:66:97:3e:d7:ea:bd:75:03:4b:26:
         ad:fd:03:9d:72:79:8e:6a:26:80:8c:99:d6:49:d3:d2:5f:c3:
         2a:45:5e:bd:a4:80:99:dd:71:99:ed:3f:e3:e0:24:83:43:f8:
         74:62:a3:b4:ae:fb:88:cc:77:6c:87:5c:2c:32:05:34:5d:2b:
         f3:fa:a4:0f:70:cb:13:b8:3b:91:8d:d3:1f:b2:f3:0b:e8:21:
         25:f0:56:5b:07:40:09:32:b9:2e:b3:83:1a:70:37:8b:3b:93:
         f7:79:05:3f:73:65:4f:4e:fe:7e:1b:e0:9d:ea:80:99:bf:80:
         dd:0c:76:bd:48:d0:cd:f0:d8:d8:f1:95:b3:1b:c2:5b:1f:b9:
         ba:ac:35:2f:8d:b2:eb:ad:32:b3:79:77:dc:56:d6:6a:22:dc:
         94:14:2c:e3:eb:a2:68:a7:bb:b0:69:00:f2:13:15:5d:90:34:
         0d:9e:b1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:21:02 2025 by rpki-client