Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File:                     SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier:          TKV3Dk7CqHinsCJ0gJIsOKkQCK9uqSkgv90pfwVhPUE=
Subject key identifier:   37:33:B1:5D:DA:5D:0C:AD:B5:7C:BD:81:F5:A2:73:49:18:EB:BE:77
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer:       /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial:       01976C2AA2A3213F3C78A1AF5B6D1FE203E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number:          138D
Signing time:             Sat 14 Jun 2025 02:00:22 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:22 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:22 +0000
Files and hashes:         1: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: fvSuxSLKxDaGaxPTHKge6+abib+N1hLN26bQt7LaiTg=)
                          2: V2Y4d-TLmNFHJ4lClsc4ERneXIs.roa (hash: PHo5kCdxREAK30hAhZYcMgPNVkKaDt5dMWxCCahvYBE=)
                          3: bazUCWmUnVsUPI48K1m2IjF_KYM.roa (hash: AyYWdQS+wgobcYMMdY+5yoadUDioqr0YVD4DAeG57TU=)
                          4: vG2nuL1igzgqWJUWOISEpJLLdWQ.roa (hash: eVGIn7eVFi1uovTluqkckWewyyXRYQcdEO/+J7uhkjQ=)
                          5: z4qyX-331qkRpNendrVE2vuUwMg.roa (hash: 1tgnSBh6zavqUvITN/dHmAA7avLexZgbuVDSxY+JNpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:a2:a3:21:3f:3c:78:a1:af:5b:6d:1f:e2:03:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
        Validity
            Not Before: Jun 14 02:00:22 2025 GMT
            Not After : Jun 15 02:00:22 2025 GMT
        Subject: CN=3733b15dda5d0cadb57cbd81f5a2734918ebbe77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:f2:34:da:f5:bb:5f:61:e1:1c:99:05:d4:
                    1e:63:05:1a:ab:26:5a:d1:c3:71:d7:b7:ac:09:3a:
                    0e:7e:c6:fd:10:ed:2b:a8:be:d6:17:d1:68:94:7b:
                    23:42:5d:54:95:61:98:26:58:19:5d:e2:71:a7:2f:
                    3f:71:19:3f:b5:52:2f:41:fe:35:4d:7d:fa:95:ec:
                    45:f0:af:14:b1:45:2f:da:33:b2:d4:e6:3b:a2:48:
                    d6:e4:78:8e:14:ba:7b:e5:04:aa:22:ae:39:15:6d:
                    e0:30:0e:d5:cd:59:0d:ee:82:fc:17:90:3b:e5:10:
                    b8:60:ae:05:b9:95:75:8e:b4:ed:e3:d3:4b:e6:22:
                    fd:03:be:be:bc:ab:9f:49:45:34:99:63:38:e7:4e:
                    e0:fc:62:1d:4f:34:04:e3:16:07:50:b2:f9:cf:97:
                    09:ac:60:06:af:5c:72:6e:f5:58:8c:b5:82:05:0b:
                    12:06:f3:1d:c8:ad:67:48:e5:bf:5c:5d:cc:57:5e:
                    c0:56:a2:d4:b1:fb:0a:07:7d:7a:a1:eb:74:aa:1a:
                    86:80:3e:f4:8a:73:59:bc:cb:8a:fe:fd:2f:6d:31:
                    02:25:10:aa:ba:37:fd:89:5f:ea:80:8e:48:8e:58:
                    01:1d:c4:ec:6c:28:07:cb:83:ac:84:70:27:9a:e4:
                    30:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:33:B1:5D:DA:5D:0C:AD:B5:7C:BD:81:F5:A2:73:49:18:EB:BE:77
            X509v3 Authority Key Identifier:
                keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4e:a4:d5:62:11:a3:83:6e:91:50:3e:b7:a2:a0:79:14:4b:
         4f:44:c6:08:b8:6f:9b:27:49:fe:56:d0:aa:c1:e8:c5:80:68:
         c0:c6:d6:ae:1c:4a:b3:2a:10:8e:3c:b9:8d:b3:db:c0:21:57:
         5d:92:57:5d:4e:cb:89:58:1b:30:51:3b:93:f2:93:78:b2:60:
         ce:18:2c:d3:29:ba:0c:18:b2:24:10:6c:5c:7e:cb:c8:89:c6:
         2a:a4:17:c7:20:e1:f2:88:31:c0:6f:39:e9:9a:ad:5a:8a:b9:
         e6:38:91:df:a9:80:5b:dc:cc:2c:e0:d5:74:c2:37:20:7f:fb:
         dc:1d:73:b5:21:59:69:67:86:c5:be:03:d8:4e:fd:fa:80:79:
         c4:52:26:f8:00:18:87:7a:8b:33:91:4e:ea:aa:0f:f0:7a:92:
         b7:8b:12:59:25:86:08:18:70:2e:67:62:58:e8:b8:ee:19:b8:
         d4:e6:ac:f3:76:6c:f1:94:93:6d:58:e9:ac:70:bc:a7:b5:7b:
         e7:63:1f:a9:cd:df:02:a4:e0:ae:e0:f2:4e:a7:22:80:3f:bf:
         38:b8:ad:7a:af:11:cf:02:a8:a3:58:66:fb:a7:5e:25:78:78:
         c1:8e:11:f8:69:7a:04:1f:53:a1:fb:2d:10:f0:47:8b:d3:a7:
         2a:cb:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:20:42 2025 by rpki-client