Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          0/xazYQnvf5gCwNmiucmi3UaMygAaC3AZac7fYiq1m0=
Subject key identifier:   36:E1:FE:D4:4F:D2:34:64:D4:1E:DF:71:C8:28:CC:13:AC:E9:BA:6C
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019774C0438CDEE6B301844F1EB689F6BF71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          0BEF
Signing time:             Sun 15 Jun 2025 18:00:46 +0000
Manifest this update:     Sun 15 Jun 2025 18:00:46 +0000
Manifest next update:     Mon 16 Jun 2025 18:00:46 +0000
Files and hashes:         1: 9rmctfL499xq_XdP3NUoaQL9dt8.roa (hash: qmWMMe4np6q+yuy7dqi4TF4eBy7zv3FZoKf6q8wuZjY=)
                          2: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=)
                          3: Ec-3R5lSbUg4nkiWhBSyhOomcnQ.roa (hash: 62Xy6RK/IfEoVB5QCyI3LUCOJ3jLbPB31KKuSd8Y3RM=)
                          4: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=)
                          5: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=)
                          6: HIg12NFUg7Eb_z2q4_r85AxcQMM.roa (hash: +6laq1iJCnub2N6uqVJ0BPm3G2zkWo723oA1FoMeiQM=)
                          7: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=)
                          8: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: zcp9FSseQhSPM8k7+HWocXE1s8yc9JGuiW6EsG5LLxk=)
                          9: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=)
                          10: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=)
                          11: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=)
                          12: o979ZrblSrorE9B9zxDq41HUGYA.roa (hash: kigJPd/hpDjSHjs7rzVTH64QUtXJbGCT3yl7CjOiV2A=)
                          13: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=)
                          14: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=)
                          15: sYn86kZKw4G3fFE4L_epfK7wXCA.roa (hash: fdCIDuHioT3v4CHhE018xXjPJRG+/QyggQzYrvRftpc=)
                          16: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=)
                          17: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:c0:43:8c:de:e6:b3:01:84:4f:1e:b6:89:f6:bf:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Jun 15 18:00:46 2025 GMT
            Not After : Jun 16 18:00:46 2025 GMT
        Subject: CN=36e1fed44fd23464d41edf71c828cc13ace9ba6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:72:8e:64:0e:2b:13:7b:a9:97:fa:db:aa:
                    c2:3c:d3:59:4a:fc:49:9c:46:36:0f:3d:6d:76:95:
                    9d:7f:a8:af:68:5d:84:a3:ef:80:a0:47:1d:42:67:
                    7d:47:28:27:57:78:ad:95:e3:d0:31:03:fe:05:4e:
                    dd:19:cc:b7:1c:d8:4e:db:ba:4d:65:fe:0f:d1:3e:
                    1e:21:59:ce:61:38:a9:e2:48:ae:1b:c3:ba:5d:ad:
                    1a:be:31:ca:b8:16:71:19:9e:92:c9:83:84:56:4b:
                    e0:82:0e:0b:e3:c3:df:0d:28:ce:0f:a2:c4:94:a7:
                    6a:2d:f8:fa:72:e5:cd:d1:2d:8a:56:f5:6f:a0:dd:
                    d8:66:59:e7:85:cf:61:aa:b1:9e:31:c1:c2:6d:ff:
                    74:cc:b0:3e:aa:3d:a7:99:c7:8f:30:3b:9a:4b:c5:
                    88:4d:be:1b:0b:8c:d5:b9:f6:d5:38:a7:e5:1f:2b:
                    1b:79:8e:b1:13:88:3b:f2:58:8f:a9:f4:6c:09:db:
                    28:2b:77:b3:f6:cb:58:88:bd:6a:5a:c3:50:36:9c:
                    b6:84:1e:99:2e:db:f4:c7:98:99:f7:84:22:90:cb:
                    d3:de:e6:0e:e5:83:f2:36:3d:80:fb:ea:fe:b2:a5:
                    e2:5c:31:bb:65:95:51:07:f6:39:e1:b6:fb:77:6c:
                    16:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E1:FE:D4:4F:D2:34:64:D4:1E:DF:71:C8:28:CC:13:AC:E9:BA:6C
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:be:31:63:bf:53:98:c4:b1:26:41:02:26:fb:dc:51:43:25:
         a5:f7:a2:96:39:8d:db:16:6b:a7:d8:63:1d:33:69:28:f5:6f:
         09:bd:ad:73:ee:3e:fd:96:56:7c:4f:d0:b5:80:30:5c:4b:cc:
         04:44:87:80:8d:b1:d6:5a:04:56:a9:20:30:fe:c1:78:8e:33:
         e1:79:da:fc:67:4b:6f:1c:7a:0b:e6:2f:f8:47:0b:6c:40:e3:
         f1:bf:7b:c2:1f:c8:b2:37:d4:5b:14:50:53:d5:64:eb:bb:41:
         f9:05:de:de:34:e4:d5:55:77:5a:ba:66:42:18:04:16:c3:d7:
         48:28:e5:36:be:89:8c:9d:4e:fb:c9:b3:eb:67:3a:32:52:23:
         a0:b7:85:08:44:a5:1f:39:32:65:f1:36:04:92:61:63:df:f9:
         03:3c:5d:95:0c:c3:4f:7e:6a:19:77:94:8c:a4:6e:fe:8e:a9:
         0c:ec:99:69:25:9a:d9:a9:d2:0e:76:b0:88:8a:4b:2e:87:6b:
         bf:05:33:eb:b1:43:a4:63:24:63:6a:a3:6b:d2:80:42:fe:56:
         07:de:23:7d:61:a6:13:d6:96:fe:39:3e:37:b2:33:3f:67:2a:
         7d:35:43:e4:41:a3:0f:30:d9:22:e1:ed:fd:1d:1d:1a:f4:10:
         78:36:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:56:57 2025 by rpki-client