Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
File:                     SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json)
Hash identifier:          b51ufGRY6K/Pfqq19OB+5GDV7xF51DaIFRMiWbTdyPM=
Subject key identifier:   F6:4C:48:A9:98:44:7D:99:6B:36:64:3E:5F:3C:A6:88:59:76:64:CB
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Certificate issuer:       /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial:       0197684E3A1044629574562C574BEBC1E032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
Manifest number:          0FFB
Signing time:             Fri 13 Jun 2025 08:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:46 +0000
Files and hashes:         1: 1JBbxjT9LW1M45TfUBltflWXjYo.roa (hash: +kWM+UT9oOWnxVo332YivS+2g4/PD34pohQWp5gFo5E=)
                          2: Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa (hash: zHFP35lrOV5ykmqGRdLeDFScFpQtr+Xab1k7m30xSdw=)
                          3: OANXXNT4d7OJ6o497Ctf48xykTY.roa (hash: aZ2NtskCeNGxotOVm0/S/doAkEWhZqM1q8mtGb9yHS0=)
                          4: RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa (hash: nk2g70SgrOg1E7ZHO+z50BOPQEJsdzJ7hk5jt1A6+b0=)
                          5: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: 7FsxyjCCK902BmRonSs8OdaiiX1bJZzCIIu907ccZvY=)
                          6: X6bDse8LmUftPmqQf4kw_btsOvE.roa (hash: j651kWeKBdPGwLMPF+EPghkkL3051eJwiT7QuhCps4o=)
                          7: _GcWVg1NloetvFlVnnsXCsqW9jA.roa (hash: 8fDT+HFMs22XfNV5rWe49DrDAkwxKtbv8tRmabSl16Q=)
                          8: h6nXxCojgmG6H44QUolSl46rG3Q.roa (hash: Jg0E3EWR0gqOThcjNWzxcD0juv44xUicy/wOavdwVH4=)
                          9: kLzXL1ZkV5i7SczjHie-nPdTakk.roa (hash: KSQB5UsbV0dtTyrjqQ8bJx4qGPsJFrVxBc1ZJaVStDg=)
                          10: zGWw5y3QtBedo3lJVh0hQTzv87w.roa (hash: LJqgZZZrONstDDkOQIUQr4bq2xXQX5fdOe5gdv77tuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:3a:10:44:62:95:74:56:2c:57:4b:eb:c1:e0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
        Validity
            Not Before: Jun 13 08:00:46 2025 GMT
            Not After : Jun 14 08:00:46 2025 GMT
        Subject: CN=f64c48a998447d996b36643e5f3ca688597664cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:28:b2:df:3e:53:ca:40:7a:8f:f0:6c:c4:
                    56:58:9e:a0:f6:c6:01:1e:9a:83:e5:c6:22:77:f8:
                    3c:0b:89:f5:0c:ad:c5:bf:ee:76:25:21:d6:fd:d9:
                    ba:23:6d:b6:48:b9:7e:d6:35:db:36:23:24:bb:14:
                    35:92:0f:32:dd:ca:5d:32:9e:ac:57:0f:61:9f:ec:
                    e7:13:1a:1e:ea:07:d5:fc:7e:2e:45:c0:5a:5f:bc:
                    74:23:de:3b:7f:71:34:b0:94:c6:ec:91:9b:35:5a:
                    cd:25:76:b2:f4:a4:58:9b:79:f9:43:38:64:37:89:
                    01:64:93:ff:80:8d:43:f3:47:4e:9c:8e:23:08:a4:
                    1c:e8:c3:19:c9:e5:52:df:25:a5:dc:56:12:d5:0c:
                    99:46:05:81:f0:aa:96:33:90:c4:62:61:ab:7f:e3:
                    35:e3:e1:15:c0:d3:df:3b:51:33:9e:f6:44:e4:59:
                    2a:32:74:d2:b8:fe:e0:b0:00:f7:e2:14:a4:9a:bf:
                    6f:c5:12:8a:85:f1:dc:22:13:3d:82:b1:50:39:97:
                    40:cb:4c:1a:e7:76:7e:8a:35:24:ca:6a:50:9b:8a:
                    b9:6b:58:de:1c:d3:8d:03:a3:7d:0e:c7:1d:26:aa:
                    c6:d9:fe:59:0a:61:73:2a:5f:57:a3:80:d7:02:f4:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4C:48:A9:98:44:7D:99:6B:36:64:3E:5F:3C:A6:88:59:76:64:CB
            X509v3 Authority Key Identifier:
                keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6e:68:a9:89:45:9d:41:4d:01:49:71:cb:40:a2:44:f9:97:
         67:c7:bd:00:03:df:09:95:98:80:a0:db:27:5f:41:78:03:46:
         fc:d1:c0:24:49:20:8e:75:de:f1:e3:58:b0:2a:8a:37:ba:72:
         d7:8c:08:69:ac:48:6d:f4:5b:9a:dc:81:42:cd:6a:e1:ca:41:
         de:71:b9:91:29:34:7a:ac:bb:06:23:c3:3b:e2:38:4b:27:93:
         56:32:87:c7:60:42:2e:20:6e:ac:02:18:eb:71:ad:a8:aa:e0:
         1c:1f:af:d9:c2:2c:e8:06:6d:aa:f6:75:56:14:7c:e8:cb:0b:
         9b:b3:74:76:bf:2e:d1:46:93:7c:97:a7:b3:37:e1:6b:eb:49:
         89:f9:54:65:82:fc:bc:7c:19:3a:47:2b:cc:68:f4:a2:17:e9:
         bf:cc:73:37:60:c8:69:f6:3e:24:57:7f:ae:d0:dd:0c:3d:a8:
         04:41:7c:e2:46:91:35:26:54:76:10:ed:e2:e2:9a:79:6d:ce:
         2a:ac:f9:00:1d:51:a8:41:58:d5:54:56:73:40:6d:4e:30:4e:
         c7:ac:26:30:ca:09:aa:f6:6d:ce:84:c7:a0:a6:11:a3:a0:0a:
         08:a8:c2:8b:2f:0e:e7:13:b7:7e:f5:30:4b:dc:64:0a:cb:24:
         a2:cc:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:39 2025 by rpki-client