Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File:                     SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier:          z3xHkZdfPrzoa5FnNY70lfLOVmBSJmwQo2B7EteYzgU=
Subject key identifier:   A2:EC:E3:9C:87:AD:04:F2:A8:DD:08:42:38:DE:E6:8D:AE:CC:89:13
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer:       /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial:       019683FFB2E4209105962C1E5D709256A9DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number:          F3
Signing time:             Wed 30 Apr 2025 00:01:34 +0000
Manifest this update:     Wed 30 Apr 2025 00:01:34 +0000
Manifest next update:     Thu 01 May 2025 00:01:34 +0000
Files and hashes:         1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: q38Jrw14fJBg15qlwaJ3jjrLKUU+uAfMFjjV+Om0+h4=)
                          2: kFX-uYTQe-hNv7R7b32AFNfIUMM.roa (hash: dfEaZcwO+Rs/PwwE6piUHmyj/TNPDDXLzEVdyeyS3Ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:ff:b2:e4:20:91:05:96:2c:1e:5d:70:92:56:a9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
        Validity
            Not Before: Apr 30 00:01:34 2025 GMT
            Not After : May  1 00:01:34 2025 GMT
        Subject: CN=a2ece39c87ad04f2a8dd084238dee68daecc8913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:00:59:88:46:55:88:91:fd:b9:03:0d:fd:
                    90:3b:fa:6d:63:4b:f2:48:11:aa:e2:07:57:89:9e:
                    ac:19:c1:9d:fb:a3:73:ec:cf:39:5c:82:e3:20:90:
                    f2:bc:69:14:de:8d:af:0d:d5:14:49:a7:8b:7b:26:
                    b0:bf:de:26:e7:f4:7f:ca:b8:b8:81:22:15:c2:36:
                    03:1c:6d:06:b5:31:90:40:27:7a:a3:6b:a0:f9:54:
                    62:c3:46:d4:63:48:11:00:a1:bb:c5:55:7a:85:e7:
                    fc:8a:1a:a7:2f:19:93:03:2f:a0:7b:1a:0e:70:79:
                    4f:b6:1a:d1:49:de:8a:70:5d:6b:b8:83:b2:4a:bf:
                    7d:27:96:60:cd:ba:6b:b2:97:85:4d:d4:5d:ec:83:
                    28:d4:db:73:fc:a7:c6:19:cd:ec:6f:c3:48:a2:09:
                    4d:f5:84:c3:50:62:5b:34:0c:cd:38:8f:b3:a0:fa:
                    f6:74:6e:92:03:d5:ec:86:78:1b:7a:10:69:1d:dc:
                    9a:c6:bc:2d:c2:67:d9:ca:47:bb:3a:1b:33:06:a0:
                    79:1e:48:cc:3a:35:59:bf:df:d7:d6:fa:99:fe:29:
                    db:bc:ac:f8:2b:be:d1:a3:81:0a:03:12:b4:61:16:
                    d5:a4:f6:01:b1:09:85:2c:44:83:6e:80:fa:9a:b9:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EC:E3:9C:87:AD:04:F2:A8:DD:08:42:38:DE:E6:8D:AE:CC:89:13
            X509v3 Authority Key Identifier:
                keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:ad:1f:d8:4c:5a:ca:92:2c:f2:4f:f8:c2:70:e6:ee:1c:
         dc:21:de:2d:78:03:1a:ce:02:92:13:c3:0c:bf:10:ae:6b:3f:
         b3:01:3f:0a:b4:e8:c4:1e:ec:99:e2:b9:19:9e:c8:34:65:38:
         21:05:e9:7e:7b:be:80:f5:8b:7e:0f:5e:af:c6:ee:5c:b9:e2:
         a3:7c:3e:41:86:02:52:35:58:7e:63:fc:ac:8c:6a:be:56:b1:
         28:4f:56:80:b0:cd:bd:1f:c9:53:8e:9c:ed:a5:67:9c:5b:22:
         4c:3c:21:cb:c8:ec:c3:0f:2a:2d:11:e6:1f:f7:c3:20:c7:b7:
         8f:85:48:d8:dc:78:31:25:1d:41:a5:40:a7:d7:28:4b:b9:0f:
         08:db:da:38:9b:70:36:91:0a:f7:ee:e4:5a:41:9a:ed:00:f2:
         15:5a:cf:01:f0:20:3e:a5:1a:57:cb:92:37:e0:a3:51:d1:68:
         79:a1:3c:47:0f:cb:4a:d5:0d:00:d0:5d:48:89:d3:27:7a:fe:
         79:a9:c3:87:01:51:b5:bc:59:24:7e:6f:70:ed:7d:96:a0:3c:
         a9:e3:05:f8:78:a7:4a:5d:51:ff:8d:20:7d:a9:b7:d6:8d:12:
         c3:22:90:45:47:64:56:79:d2:81:56:e7:41:ca:9c:7e:48:62:
         14:75:07:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:05:22 2025 by rpki-client