Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File:                     SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier:          vSHp6o3ElQABAjXaRcqU53Ildw5E7B3JxHYNGT9WMSc=
Subject key identifier:   D9:5E:DE:B0:B7:D6:88:78:06:20:3E:ED:93:6C:4A:AA:52:A1:37:CE
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer:       /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial:       0197703EA3A6A920146194C8759F31F39408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number:          1579
Signing time:             Sat 14 Jun 2025 21:00:42 +0000
Manifest this update:     Sat 14 Jun 2025 21:00:42 +0000
Manifest next update:     Sun 15 Jun 2025 21:00:42 +0000
Files and hashes:         1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: mJ70x+vefNJ3sEohBjpPpMKXyI0fXZs/H4adPDXO5Gk=)
                          2: qamXgGdELqVwuCRXcGaE5fyjphY.roa (hash: XwiZQCHwX+Vwexgrkkuz5eMSgh62jyoQLxKiqhe1Bqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:a3:a6:a9:20:14:61:94:c8:75:9f:31:f3:94:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
        Validity
            Not Before: Jun 14 21:00:42 2025 GMT
            Not After : Jun 15 21:00:42 2025 GMT
        Subject: CN=d95edeb0b7d6887806203eed936c4aaa52a137ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:83:2e:5c:97:b0:57:72:93:6b:c6:44:76:
                    93:d5:db:17:99:0b:0e:c6:b6:ca:0d:50:31:6b:51:
                    b5:97:9b:cf:bc:18:71:23:5e:cb:bd:63:3a:41:a2:
                    66:04:d8:16:35:80:62:e3:2c:9e:35:bc:ea:85:88:
                    7b:99:ee:af:e2:77:7a:b9:18:9f:a9:f1:12:be:fb:
                    e2:67:82:c9:2b:63:38:4c:31:54:38:94:3b:d6:37:
                    d4:24:dd:62:c9:8a:01:0f:9a:c1:3c:ec:bd:94:8d:
                    f6:8e:c3:4e:a2:bd:81:b8:a5:da:1b:cc:56:6d:58:
                    da:7c:67:a0:45:c5:81:a7:0e:a0:53:31:ca:46:60:
                    7e:2c:bd:6b:88:55:2b:7c:6c:58:8b:aa:d0:14:72:
                    77:ff:76:d0:0b:9f:10:b3:15:f2:b8:22:b8:72:7f:
                    10:2e:5a:c0:e2:31:aa:1a:1d:3f:52:5d:60:16:4f:
                    37:08:50:61:8e:eb:49:2a:03:9a:77:87:ce:37:32:
                    24:50:3e:88:6b:35:1d:7a:df:49:29:4a:f7:c0:31:
                    52:c4:d1:d9:f1:c9:9e:b3:85:51:d3:7e:85:c1:61:
                    db:91:10:67:2b:78:ab:04:bd:30:0f:92:a5:cd:00:
                    e4:6a:fb:7e:14:b5:80:f0:f2:df:87:3f:8c:c9:cd:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5E:DE:B0:B7:D6:88:78:06:20:3E:ED:93:6C:4A:AA:52:A1:37:CE
            X509v3 Authority Key Identifier:
                keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:30:01:b3:43:17:43:cd:75:d5:2b:2b:a4:0d:a4:d4:d6:b1:
         a3:bd:7e:b9:14:b8:82:90:99:bd:47:9a:b3:82:ba:7d:a8:b0:
         58:e5:e2:53:5e:75:a1:54:22:6c:42:08:da:3f:3a:8d:e2:bc:
         af:3d:28:a3:85:cf:fd:f8:1e:7e:e5:f6:b2:83:a5:ab:f4:e6:
         57:76:83:d5:11:da:af:7b:06:67:1d:49:d3:ef:f5:72:a8:f2:
         01:be:92:fa:0d:04:7a:61:58:6f:cc:38:1c:e1:2f:4e:0c:af:
         0c:b1:78:36:fd:50:7b:e1:78:2a:e3:9b:4f:e0:1d:14:f9:7e:
         d3:3d:3d:ff:2c:3c:39:2c:67:8c:c4:4c:44:09:bc:d9:27:be:
         bc:e3:f3:bd:33:82:92:0d:b6:d8:04:bb:46:62:d3:ae:b2:b9:
         89:1f:a8:c7:a5:72:9a:c2:6f:e2:39:b0:48:c9:ef:dd:f1:57:
         f7:b4:04:74:89:8a:7d:d2:5b:c3:f8:c3:c2:ff:2a:d4:a5:3e:
         37:9e:32:dc:0e:e9:df:2a:53:39:71:14:ec:c3:86:72:5d:83:
         c6:e7:1d:20:bb:31:d4:3f:b5:df:6c:62:72:a3:c9:be:9c:70:
         b9:b2:33:5d:9a:59:95:f2:35:bd:40:c4:80:77:01:90:fa:84:
         a2:4f:d9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:46 2025 by rpki-client