Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
File:                     SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json)
Hash identifier:          QGb1s/eLmxYIrtx8tEJ5t62f/bxJlUM2Mofudtsv3JE=
Subject key identifier:   47:F5:BD:FA:6C:23:D1:43:EF:C9:F6:FC:70:7D:81:2B:FD:74:84:E8
Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
Certificate issuer:       /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Certificate serial:       01976CCF5C95037AE0A8DE3BF598A78E6173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
Manifest number:          0F4A
Signing time:             Sat 14 Jun 2025 05:00:18 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:18 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:18 +0000
Files and hashes:         1: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: mStwAFnf1p8W1Sj4aeJdhQnc2pIbOeUzw6DAhqZFaEk=)
                          2: tmx5LjQV62XIOiTTxX3EbhTuW90.roa (hash: ONvGVTfcwoaLd5CXPlp64qPMMnmfgrXhtwa7DXeFCYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:5c:95:03:7a:e0:a8:de:3b:f5:98:a7:8e:61:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
        Validity
            Not Before: Jun 14 05:00:18 2025 GMT
            Not After : Jun 15 05:00:18 2025 GMT
        Subject: CN=47f5bdfa6c23d143efc9f6fc707d812bfd7484e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:b5:73:06:80:45:6d:f8:bf:7a:12:d3:0b:
                    f6:05:1c:cc:2e:c7:c8:c6:68:d9:ee:92:97:69:05:
                    24:f1:3a:98:c3:cc:eb:06:16:67:0f:5d:a1:53:c9:
                    4b:c3:09:3f:16:59:23:64:ae:83:b5:19:00:c9:4d:
                    96:fb:80:6d:99:f4:58:22:12:51:07:8a:cb:70:bc:
                    d0:29:9f:49:89:80:7a:ad:fa:26:c2:39:f1:7d:38:
                    df:8e:5c:79:18:4c:25:60:07:d9:46:91:0c:36:ef:
                    76:99:0c:69:0d:03:1b:85:68:de:da:5d:ef:55:14:
                    2a:5c:5f:71:a2:d9:51:31:04:6a:a6:e7:6f:e0:31:
                    ad:af:25:44:b0:3c:ea:e9:14:67:ab:54:af:49:b0:
                    d9:18:f8:78:98:b5:88:6e:54:63:39:23:18:a6:ef:
                    d1:96:48:77:df:85:3c:51:c5:9e:35:a8:c3:af:32:
                    e6:de:b6:f2:95:16:a2:85:28:b8:5a:cf:9f:dd:44:
                    96:2d:64:63:54:5e:50:84:9c:b3:27:73:8d:a0:06:
                    38:6a:69:9b:cf:85:8b:a3:8d:e6:17:01:97:d8:c4:
                    bc:5c:df:2c:3f:9f:7e:53:2e:51:49:54:39:ad:0b:
                    90:f6:af:02:34:24:aa:dd:4a:cd:b0:e4:2d:b9:1b:
                    57:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F5:BD:FA:6C:23:D1:43:EF:C9:F6:FC:70:7D:81:2B:FD:74:84:E8
            X509v3 Authority Key Identifier:
                keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1c:f9:86:6f:e6:95:2e:45:ed:3c:2a:72:f2:7d:20:8f:04:
         16:e6:c0:e3:0d:13:be:c7:ea:a8:3b:8f:41:0b:b7:a5:d4:1e:
         33:f4:2c:3c:a8:af:52:21:be:f3:b9:bf:43:e9:93:88:c7:67:
         04:77:c7:0c:e8:0a:54:bd:53:b1:b0:bc:8c:0a:af:62:bc:be:
         46:8d:d2:94:20:50:fd:7a:cf:7d:b6:de:5a:db:a0:ca:93:55:
         0b:f8:d1:e5:7a:c9:f8:81:1e:7f:e2:41:43:2a:05:18:46:99:
         35:e0:df:8d:d4:1b:b9:b0:5a:79:72:ae:38:ee:bd:4a:bb:29:
         00:9c:69:3c:47:e3:71:42:39:0d:55:f3:21:38:ec:e8:83:23:
         a5:e8:b8:7d:79:53:29:5a:70:08:d3:20:78:70:33:17:c7:e4:
         b5:db:ee:43:60:33:f8:70:53:c8:0a:3e:d1:1b:ea:00:29:57:
         4d:b4:46:33:a0:90:56:e0:ee:88:7e:c6:81:dc:68:78:da:f6:
         c1:5d:85:47:be:ca:88:95:a2:61:44:6e:5e:dd:1d:4a:bd:ef:
         21:bf:ec:4e:6a:31:08:a6:24:25:06:92:42:53:03:53:16:cb:
         b9:ae:4e:d8:40:dc:0c:b2:7e:05:84:da:a8:0e:08:95:8f:31:
         ef:b4:44:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:53:34 2025 by rpki-client