Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
File:                     SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft (raw, json)
Hash identifier:          HjTMlUBzxt+eT+NCH/vaoKSa8F3PQD8vDrd49WX4Wos=
Subject key identifier:   3E:09:BC:DA:F2:93:EF:BD:6D:9D:64:B6:9A:90:BA:7A:9E:0A:A0:91
Authority key identifier: 4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
Certificate issuer:       /CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Certificate serial:       01968210295E6213BF70140966A8FEEB4ED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
Manifest number:          0E11
Signing time:             Tue 29 Apr 2025 15:00:19 +0000
Manifest this update:     Tue 29 Apr 2025 15:00:19 +0000
Manifest next update:     Wed 30 Apr 2025 15:00:19 +0000
Files and hashes:         1: JTPc5_QTZJxWgsLJFBAm1KUSpd0.roa (hash: ODeawNoXLkHerXTl+flqRC6XG80opVvKSVEN1ax5xro=)
                          2: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl (hash: zd069snnYYC52d+4+rGAxWo6rtkUcPQ73SfYzoaBtD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:10:29:5e:62:13:bf:70:14:09:66:a8:fe:eb:4e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a54821a91b1dbdc73bdda34bced7107067964ad
        Validity
            Not Before: Apr 29 15:00:19 2025 GMT
            Not After : Apr 30 15:00:19 2025 GMT
        Subject: CN=3e09bcdaf293efbd6d9d64b69a90ba7a9e0aa091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:67:5e:6f:41:3e:bb:26:a2:a4:49:9c:1e:
                    24:ff:d8:c8:9b:4c:bb:ad:fa:da:3f:a9:4d:45:75:
                    6c:f2:0e:c8:6b:3b:d0:76:66:4b:6b:1e:95:01:10:
                    23:ef:f1:db:27:81:60:32:67:3d:e6:2f:74:d4:6f:
                    65:ea:50:78:77:2e:02:d2:6c:22:78:80:59:c9:ed:
                    60:5b:f8:fa:e0:2f:28:f6:c5:28:2a:d2:84:14:73:
                    f6:98:4d:5f:07:db:05:63:94:64:f5:e2:e5:f9:96:
                    38:10:70:73:4b:45:48:2f:07:06:cb:f3:9f:27:51:
                    b5:f0:9a:ea:1e:db:0d:d4:d7:56:f2:d1:33:6c:06:
                    b5:65:db:7e:ba:21:67:4d:6f:63:6c:ce:30:61:9a:
                    31:b6:89:cd:7c:f4:f7:05:b0:80:d9:79:47:72:42:
                    3d:61:0b:6d:72:f9:97:33:58:ba:ba:90:49:d7:c2:
                    b9:22:77:35:e2:04:3f:38:4b:1a:77:05:fc:d8:5e:
                    ec:91:6f:e4:52:9e:9d:7a:d6:7b:23:cc:b4:cd:6b:
                    3f:40:6c:21:4b:aa:a1:78:8a:a2:0b:e4:ac:06:29:
                    10:5b:90:4d:6f:c3:1f:d0:b3:3e:4a:ea:84:6e:f1:
                    88:64:f9:f7:c8:7f:b7:3c:e4:79:9d:0a:70:30:f7:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:09:BC:DA:F2:93:EF:BD:6D:9D:64:B6:9A:90:BA:7A:9E:0A:A0:91
            X509v3 Authority Key Identifier:
                keyid:4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:18:d0:6e:cc:54:85:51:41:dd:38:41:36:75:54:54:9d:1d:
         66:eb:ba:4a:30:99:9a:41:f1:fe:cb:5a:d0:28:93:94:3c:6e:
         22:f8:05:0a:bf:32:73:b4:29:c2:41:bc:12:0b:4a:96:97:f1:
         fc:96:cd:c1:0f:42:51:ce:a3:58:ec:88:f8:2d:1c:dd:00:23:
         df:d4:cf:9f:65:44:64:5c:a5:ce:ed:e9:85:fb:1e:1b:6f:5a:
         5c:28:cd:0d:13:e5:dd:8d:e1:fd:d7:6e:a2:af:c9:01:f2:ba:
         cc:dc:66:13:96:69:1d:e0:42:1d:02:60:cd:d8:dc:65:84:bc:
         53:1d:29:c1:ee:ef:98:73:3d:90:43:ec:3f:70:ab:38:21:27:
         b5:67:ea:c3:2f:6c:10:9d:9c:a7:a4:67:d3:b5:77:f8:af:ed:
         bc:0a:a6:cb:45:8f:a9:61:08:15:25:22:ca:68:ce:87:7b:ae:
         4c:9a:2f:59:11:3b:ae:0a:c7:d1:15:93:d4:88:25:77:26:ea:
         3b:fe:b6:6c:97:f5:73:e6:d4:ab:3a:a7:0d:86:b9:2d:b8:36:
         18:e1:99:a7:58:33:97:d0:1b:d2:4d:63:24:17:57:1d:b2:13:
         69:89:1a:ac:e8:99:26:e9:0d:1c:11:66:41:e2:54:e0:7a:5e:
         fc:e3:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:44:30 2025 by rpki-client