Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
File:                     SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft (raw, json)
Hash identifier:          sJiN21q1E4ugU3yW8DxAMszcSWH0KDLXXhA3KV1hn4k=
Subject key identifier:   C6:2C:AF:1D:D6:AA:27:42:E9:75:6C:8F:2C:CF:AC:85:AE:DD:D0:18
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Certificate issuer:       /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial:       01977E67C1F8BA7AEDDF18495993151B1383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
Manifest number:          0CB4
Signing time:             Tue 17 Jun 2025 15:00:18 +0000
Manifest this update:     Tue 17 Jun 2025 15:00:18 +0000
Manifest next update:     Wed 18 Jun 2025 15:00:18 +0000
Files and hashes:         1: SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl (hash: YTwiN/gh0je6+iIQ9LFe/Oj3Hz+Kq7HlW04+m1SsGUc=)
                          2: q3FDx21p8smEfAYPTo0ZQLgPkqo.roa (hash: 2Du6IDXw8hGPYtGe+KE8+hTPSOOHZMlNjWnrWGKbnPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7e:67:c1:f8:ba:7a:ed:df:18:49:59:93:15:1b:13:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
        Validity
            Not Before: Jun 17 15:00:18 2025 GMT
            Not After : Jun 18 15:00:18 2025 GMT
        Subject: CN=c62caf1dd6aa2742e9756c8f2ccfac85aeddd018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f9:c4:e7:96:d3:9e:f4:d3:85:0c:03:a4:3c:
                    00:ea:9f:11:1b:d1:3e:63:18:7e:df:26:1f:2b:60:
                    9d:ff:97:4e:60:4f:74:a8:72:22:6b:3b:8b:42:1b:
                    78:1b:10:0f:d8:fc:dc:47:5a:4f:b2:f7:00:cb:30:
                    70:66:ba:c7:c1:27:c4:0e:49:b0:50:09:1f:33:25:
                    ca:d0:b7:b9:7f:33:e2:76:5c:f9:7a:00:ec:d1:a5:
                    5c:72:83:d9:ac:c6:dc:97:50:c2:2b:a8:f8:93:db:
                    2a:30:ab:cb:8f:e7:83:ab:00:e4:de:02:38:8d:69:
                    75:7d:52:61:c7:88:d2:ac:f1:f9:e8:4c:0b:99:04:
                    6b:cb:4a:b8:27:3a:ef:fb:bb:1a:21:cc:d3:59:a1:
                    44:9d:16:17:d9:ce:fb:8c:da:3f:27:72:09:8c:15:
                    8f:fa:e6:6d:fd:c2:e0:4c:ad:8d:89:d0:e6:ae:1c:
                    53:0d:61:59:59:5e:00:76:66:fe:c9:67:af:4a:04:
                    4d:9a:55:bd:49:88:6d:54:27:5e:9d:4a:9d:92:28:
                    00:29:ca:a5:3f:42:92:17:a7:5f:a6:a1:c0:a6:86:
                    ad:19:b1:02:54:20:13:08:bf:5c:e4:46:8d:18:96:
                    bb:fe:bf:ed:6c:bc:36:7e:d6:4d:f6:6d:43:83:02:
                    80:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2C:AF:1D:D6:AA:27:42:E9:75:6C:8F:2C:CF:AC:85:AE:DD:D0:18
            X509v3 Authority Key Identifier:
                keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b1:4c:9c:25:4b:a2:c7:eb:7a:55:10:b6:28:9f:89:45:bc:
         2a:70:97:49:88:6d:84:aa:ea:b6:4e:0e:d6:a6:70:7f:c4:b5:
         5f:c3:fb:b0:46:b2:c0:f1:90:f5:3a:ad:a8:3b:6e:85:b0:03:
         1b:6b:cd:b7:a8:4f:c6:ec:23:47:ed:ba:d1:99:26:30:dc:1c:
         49:a0:08:05:d9:97:35:a0:11:5c:79:cb:84:24:89:c5:92:06:
         5c:cf:ff:b1:d2:05:58:44:e3:67:bb:9e:25:bd:ea:d1:eb:fa:
         6d:63:cb:56:23:62:fe:b6:86:bb:67:f8:e8:c5:f3:72:51:a2:
         02:b3:5c:99:32:ac:c5:16:0f:60:09:12:ae:b4:5d:0a:8b:f6:
         45:05:40:99:72:1c:1c:cb:87:17:9a:b5:9a:5b:1c:b4:cc:9f:
         40:ec:84:5a:13:c3:f3:41:f8:5a:c8:f9:f1:88:36:7e:1e:a9:
         a1:b4:9e:c3:77:62:d6:79:47:ec:a4:4e:c4:46:fb:e9:48:29:
         d2:a9:09:92:e5:4e:e4:bb:ef:7a:39:d8:50:36:ad:2c:b9:ca:
         16:d8:26:02:d3:52:09:0e:ab:5f:6d:ef:67:73:1d:89:4d:bc:
         b7:0b:af:03:49:e1:c1:32:f1:35:d0:bc:fd:de:2b:49:fe:a5:
         96:2e:3f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:27:02 2025 by rpki-client