Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
File:                     Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json)
Hash identifier:          t2MwglntfPSmjFV07MrTFPXN6PyDgbZepv622EfZMQ0=
Subject key identifier:   12:0A:C0:94:CE:0B:69:6A:BD:44:3E:05:94:D6:D2:26:DC:FD:D8:04
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Certificate issuer:       /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial:       019785B3D1846370CD9B5F57E529F716E65A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
Manifest number:          152E
Signing time:             Thu 19 Jun 2025 01:00:43 +0000
Manifest this update:     Thu 19 Jun 2025 01:00:43 +0000
Manifest next update:     Fri 20 Jun 2025 01:00:43 +0000
Files and hashes:         1: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: +574dgXn4TXCjoW5luiN2IX9AXmx1tunNW7m/6KKN4Y=)
                          2: p61VML8uLf1Dr4htLC12P2Sv8GU.roa (hash: RPd5GMtMlOZE/03iU2ovXiDZPGo3A/MLaIBoa6BmxD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 23:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:85:b3:d1:84:63:70:cd:9b:5f:57:e5:29:f7:16:e6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
        Validity
            Not Before: Jun 19 01:00:43 2025 GMT
            Not After : Jun 20 01:00:43 2025 GMT
        Subject: CN=120ac094ce0b696abd443e0594d6d226dcfdd804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:bf:66:74:4b:71:76:d4:fd:9e:90:20:9c:
                    7c:ec:b6:4f:25:ad:ea:cd:5c:c4:66:14:2a:41:ef:
                    1f:be:b8:49:96:40:0d:83:3b:73:d4:30:34:2c:9b:
                    20:f9:ff:8a:cb:76:ab:5f:d4:cb:3b:86:c6:35:2d:
                    48:f1:cc:eb:d9:d8:78:9a:d5:37:10:37:00:f0:8a:
                    99:98:bb:c6:40:ae:a6:e2:24:5c:45:44:48:48:19:
                    de:a7:61:a2:40:48:d8:c4:32:f1:ec:27:b9:aa:53:
                    73:7f:07:20:d5:97:a0:a8:d8:09:b3:58:2b:2a:6e:
                    cf:67:09:b6:20:75:8f:ee:16:dc:2a:1e:ed:f6:d8:
                    f1:3a:cb:ed:88:c9:77:75:04:d1:8f:cd:42:d1:b8:
                    b6:38:e3:92:17:34:6d:92:de:dd:06:c8:28:be:28:
                    61:2e:d4:6f:73:39:02:5c:bd:1e:81:bc:5e:11:31:
                    11:92:5d:1d:c7:7f:03:44:eb:40:40:87:dd:7f:4e:
                    1f:ff:75:54:45:3b:ae:c7:f8:76:b4:86:a6:ab:5c:
                    1a:9e:28:75:c1:1c:02:46:c8:4b:d8:42:ff:d8:36:
                    35:af:d3:4a:30:35:7a:ec:6f:61:e8:09:b1:2e:29:
                    f8:f2:bc:22:28:bc:11:0b:00:b7:e5:31:87:a8:bb:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0A:C0:94:CE:0B:69:6A:BD:44:3E:05:94:D6:D2:26:DC:FD:D8:04
            X509v3 Authority Key Identifier:
                keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:da:65:d1:2a:28:89:1d:74:b2:e5:01:82:05:29:cb:ad:68:
         67:cb:0f:08:8a:16:2e:c1:88:b7:e1:c9:bc:f7:04:72:70:9a:
         9e:06:2f:dd:1d:e8:90:d3:23:a6:94:ff:22:48:f3:21:b0:91:
         97:68:16:c4:3d:1c:54:9f:e8:bf:00:9b:7f:b7:e4:5a:58:59:
         82:62:0c:11:d5:a1:e5:f8:f7:b2:b5:27:3d:bb:78:ce:ea:63:
         fa:47:6b:5c:23:42:22:d9:05:e9:a4:e6:89:bf:48:7e:43:6f:
         77:53:7f:e6:7a:79:5a:b3:46:5c:c2:e5:0b:ac:3f:0c:79:89:
         4b:1b:dc:a1:7c:32:9f:7a:c5:18:dc:20:94:55:5e:69:b5:ce:
         c9:29:70:2e:fa:31:3a:95:89:04:e9:6c:11:2d:d3:c8:0f:0d:
         9d:f0:da:14:0b:52:29:49:86:54:d1:62:d2:30:30:04:2b:ed:
         1e:de:6c:4a:d9:d1:6d:4b:a6:71:6e:35:a2:f1:c2:93:45:cd:
         34:3b:17:c7:75:d2:75:ba:e4:6e:6d:e9:a5:86:7b:bd:cd:df:
         00:4c:5c:e4:e8:e0:6c:ad:68:7e:c4:3e:13:e1:11:ec:67:31:
         84:85:50:2a:44:e8:08:1e:37:14:ac:31:31:18:d2:b4:e4:76:
         aa:59:60:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:20:01 2025 by rpki-client