Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
File:                     s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft (raw, json)
Hash identifier:          ws7Cb79eyM3eINGZoGtb8HNlM2QzedT5/8LK2JlSrIs=
Subject key identifier:   49:42:F6:E0:04:AA:49:1D:A3:C5:EC:62:29:11:41:AE:27:7C:CB:0F
Authority key identifier: B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
Certificate issuer:       /CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Certificate serial:       01976BF419E9F33DA018A9020F1D335371C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
Manifest number:          0BAC
Signing time:             Sat 14 Jun 2025 01:00:48 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:48 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:48 +0000
Files and hashes:         1: s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl (hash: +XYcoAoUOUmSW6qEQuccUYwdJvK2C2PEVbWB/4BdYUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:19:e9:f3:3d:a0:18:a9:02:0f:1d:33:53:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
        Validity
            Not Before: Jun 14 01:00:48 2025 GMT
            Not After : Jun 15 01:00:48 2025 GMT
        Subject: CN=4942f6e004aa491da3c5ec62291141ae277ccb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:58:2b:d3:56:70:41:7e:18:b4:6f:96:e4:
                    60:9b:d8:f1:d7:ca:78:52:5e:34:16:f4:79:fc:44:
                    fb:78:89:63:bd:81:4c:9e:47:f8:09:94:38:b3:44:
                    8b:5c:3e:28:92:01:90:af:90:14:f8:d4:59:38:18:
                    fc:c3:f6:c0:f3:37:fe:38:53:ab:d2:7a:66:d8:52:
                    8b:97:9e:1e:21:a1:b2:3a:b3:c8:d3:48:36:d8:19:
                    d6:f3:06:ee:f9:ea:72:43:a6:6d:d9:e8:31:5c:ce:
                    46:6e:1d:59:16:e2:11:91:e5:a6:a9:0f:58:ba:b2:
                    71:f0:c4:1c:d9:b9:2c:a8:fb:e9:41:a8:3e:69:a9:
                    79:77:03:4e:dc:8d:ad:3c:44:29:e9:82:1e:b7:f8:
                    1e:84:fa:bf:d3:6e:94:0f:e3:82:9f:46:4e:1a:c9:
                    05:03:46:5b:dc:c5:44:41:09:94:d7:ba:27:78:14:
                    f1:15:50:6e:a5:fa:44:2a:ed:19:14:b1:b1:a4:07:
                    f5:dc:c5:84:9e:be:8b:f2:63:e2:5c:93:82:6b:69:
                    de:e4:f4:f8:ed:72:e0:fa:69:73:3d:d1:c4:b5:3a:
                    bb:06:e7:50:c4:3d:c8:c9:d0:f6:d4:2d:ea:9b:6a:
                    fe:09:21:e5:54:07:9c:db:74:17:a4:63:12:4c:50:
                    9f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:42:F6:E0:04:AA:49:1D:A3:C5:EC:62:29:11:41:AE:27:7C:CB:0F
            X509v3 Authority Key Identifier:
                keyid:B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:e3:cd:bf:00:18:31:90:95:b6:60:49:33:2f:28:41:82:
         17:5e:10:08:90:67:89:36:7e:b4:be:e6:62:f7:11:d2:53:20:
         0e:87:f9:7c:d3:4e:d7:92:f4:38:94:27:ba:6a:5b:4d:96:c8:
         f5:ba:b1:64:ad:ff:f0:de:15:48:b5:e5:80:d0:19:d5:7d:5f:
         ae:b9:de:95:98:ba:88:71:1a:b5:26:5a:8c:a9:8d:bf:a4:3c:
         76:28:18:5e:8c:28:8c:f6:7c:40:87:1b:38:20:11:02:5d:17:
         e0:69:ce:15:94:f9:a1:10:a8:b7:99:6f:16:70:e9:b0:26:6c:
         92:47:c7:02:34:1e:e6:81:8d:6f:cd:25:13:48:2d:98:11:9a:
         3a:50:25:f0:11:16:69:01:6b:8c:71:15:55:9a:05:b3:5d:39:
         3c:da:ea:0f:c7:27:e5:81:00:4a:98:2b:0c:5a:e4:07:8a:06:
         ac:e4:1a:f3:27:93:3e:b7:fa:61:bc:1a:cf:7c:80:4d:f8:89:
         7d:80:ad:42:00:0c:4b:09:8b:b8:7e:d3:61:a9:00:7f:a5:8b:
         cb:c0:1c:e8:e9:16:e8:9f:87:5d:0e:7d:a9:16:5a:63:06:92:
         5d:ec:6d:bc:40:3b:ba:6a:a6:65:be:43:0b:f7:85:3c:7d:26:
         c3:31:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:20 2025 by rpki-client