Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
File:                     SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json)
Hash identifier:          Y+ZExP3rWt+WaEcvqsR45ZMfTpVsAPYwVqxqXEs6D3c=
Subject key identifier:   71:EC:6F:87:D9:A7:BE:57:07:A2:20:1E:A6:B0:1F:90:9E:E1:C7:06
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Certificate issuer:       /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial:       0197782F3178828354B01D69E5C2F5C24196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
Manifest number:          03F7
Signing time:             Mon 16 Jun 2025 10:00:47 +0000
Manifest this update:     Mon 16 Jun 2025 10:00:47 +0000
Manifest next update:     Tue 17 Jun 2025 10:00:47 +0000
Files and hashes:         1: 5GNPm8h48A-gwMWqDZ4JoMYcVZc.roa (hash: 9ZBWY++nE/D6/RJTqjkk/4Q4ufkyFaszCX0qNKOcYVk=)
                          2: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: fWTAABCEccB2jAmnEAhKY8T3xQlVrDcsCKDnTxKUPfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:2f:31:78:82:83:54:b0:1d:69:e5:c2:f5:c2:41:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
        Validity
            Not Before: Jun 16 10:00:47 2025 GMT
            Not After : Jun 17 10:00:47 2025 GMT
        Subject: CN=71ec6f87d9a7be5707a2201ea6b01f909ee1c706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:a1:19:5e:19:fe:a2:d9:5e:09:f1:9f:3b:
                    e4:f8:b2:52:20:fd:9e:76:f6:2f:78:ab:33:c1:e7:
                    83:4a:ed:7c:e9:7f:e3:56:d1:90:bc:5d:6f:97:78:
                    a0:82:69:f0:db:c6:8d:e4:e0:0c:8a:27:10:18:68:
                    70:af:b8:55:7e:62:cb:2d:70:79:bd:0d:29:e1:75:
                    76:ec:d0:fb:81:e3:b9:d0:8f:5a:1b:a3:41:6c:3f:
                    de:44:5d:76:29:e7:13:26:45:b1:70:38:db:e3:68:
                    14:92:41:0a:ee:9f:f9:14:bc:12:f4:36:c5:00:a8:
                    f1:85:52:5e:23:6b:9a:47:1a:6d:4b:b0:85:a0:f2:
                    0a:43:e8:13:6e:c3:9d:f0:16:2e:55:0c:44:c3:00:
                    55:74:84:62:58:7c:0a:d6:50:b9:28:98:f8:1e:78:
                    7b:10:c1:31:ca:8a:ae:ad:8f:6e:d9:bc:26:99:36:
                    89:90:c8:c8:a7:8e:d7:5b:8e:d8:a4:5c:aa:55:00:
                    41:05:f4:5d:9e:1c:50:79:4c:de:e3:e9:2b:3b:79:
                    c9:18:ef:aa:5c:4b:b7:31:96:19:e2:de:86:e2:5b:
                    24:33:bf:0f:4b:54:c6:31:6c:67:43:a3:5c:88:4a:
                    38:03:24:25:ee:c5:e7:a0:58:0b:22:d9:18:c4:21:
                    f0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EC:6F:87:D9:A7:BE:57:07:A2:20:1E:A6:B0:1F:90:9E:E1:C7:06
            X509v3 Authority Key Identifier:
                keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cd:8e:66:6d:c9:06:2a:cb:78:4b:80:5b:f5:bb:c3:52:88:
         0e:84:35:9b:9b:4a:8b:49:24:aa:0f:8c:cb:b7:71:ea:30:ff:
         96:66:d8:77:31:43:90:58:41:19:86:65:03:7a:35:11:cf:09:
         8c:ad:d3:cb:aa:78:62:e7:3d:58:f3:6e:fd:2a:b3:dc:e3:b6:
         58:dc:c1:57:21:e0:e2:21:bc:a2:1b:75:74:07:4f:27:db:51:
         ea:fe:94:f5:72:dc:32:e7:b0:58:27:8b:56:e3:30:70:bb:ec:
         1a:a6:c8:db:b9:bf:99:4b:60:5a:fd:b1:8d:34:b3:7f:33:ef:
         0b:68:cc:da:d8:41:c4:7f:de:44:30:4d:cf:84:93:80:69:a5:
         3e:ea:c0:48:79:0a:d9:aa:10:ce:60:66:89:45:b4:e5:e9:41:
         1f:0c:51:64:a1:05:ac:27:54:57:77:2e:b8:33:16:6f:30:4d:
         71:6e:c6:f4:d2:a6:c1:7f:0f:ca:df:0b:ae:c0:89:97:0f:63:
         5b:da:f3:87:8f:2f:49:f7:4a:82:18:fb:73:11:9d:c5:d3:01:
         bc:b7:46:49:8b:f7:8c:4e:5c:ea:b9:08:41:09:0a:d7:50:ed:
         f8:95:95:12:6c:b3:2e:01:09:03:74:78:b2:7b:40:7e:16:5b:
         02:56:ae:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:34:38 2025 by rpki-client